Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier:          SGkcfaI0JChiozj0wAyHSkDFT06TKwYZsKTIM26CAHY=
Subject key identifier:   A9:D3:E4:03:3A:C4:A3:1B:C0:C8:08:34:59:94:F7:B2:45:1D:F8:C0
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer:       /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial:       0242
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number:          0240
Signing time:             Tue 04 Nov 2025 05:32:09 +0000
Manifest this update:     Tue 04 Nov 2025 05:32:09 +0000
Manifest next update:     Thu 06 Nov 2025 05:32:09 +0000
Files and hashes:         1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: DUQaY85hXoQ/jhmqkk7oYzk0hYfLJlBnG62oN3cl9lk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Validity
            Not Before: Nov  4 05:32:09 2025 GMT
            Not After : Nov  6 05:32:09 2025 GMT
        Subject: CN=69098fd9-8822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:65:0c:9e:98:b0:f7:57:db:bb:c2:52:d6:
                    03:88:6d:8c:0a:f1:54:4b:7a:82:38:b8:db:5b:bd:
                    4d:4d:47:91:ec:3f:a2:7c:12:f3:ea:04:e5:b5:55:
                    ee:56:60:3d:9f:85:0e:72:4d:12:a9:5c:78:00:11:
                    c0:70:be:19:36:3d:55:81:a9:a3:45:69:b5:6b:56:
                    ce:66:54:b7:aa:0f:2f:9e:e0:a5:cf:42:62:39:84:
                    84:31:89:d7:8c:58:11:79:fc:6a:35:5c:cf:68:a4:
                    b2:69:3c:72:bc:85:93:60:af:ae:a3:d4:c3:38:46:
                    ad:b6:41:1d:56:cb:63:22:a7:a9:d8:f7:2a:a6:bb:
                    06:da:25:41:cd:5b:56:52:e7:b7:98:23:e1:76:1c:
                    4d:51:5e:fd:f6:d7:32:a0:d7:67:a1:d7:af:24:d6:
                    4c:5a:55:2c:f3:ea:03:b0:8e:e7:d5:d0:f3:9a:53:
                    ce:d6:3a:71:2f:35:68:2a:ef:cc:c5:cc:2d:d7:cd:
                    24:d2:38:40:ae:09:2b:c3:34:28:e4:a0:08:02:2d:
                    6e:ef:36:8c:26:8c:88:e7:56:59:69:ed:32:03:22:
                    e1:65:5c:bd:95:7e:5b:99:df:69:b3:bc:90:0e:89:
                    e1:68:ac:1e:8b:02:af:2c:b1:1c:5f:53:46:7f:6c:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D3:E4:03:3A:C4:A3:1B:C0:C8:08:34:59:94:F7:B2:45:1D:F8:C0
            X509v3 Authority Key Identifier:
                keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:ce:ad:ea:fe:95:29:ef:91:20:24:2e:cf:a9:44:42:7c:
         5a:76:ce:76:91:3e:48:3f:e5:70:85:da:a4:22:22:e1:fb:da:
         e5:85:c8:b6:91:96:81:b9:18:5d:19:31:ba:de:48:98:25:2d:
         33:1a:d6:1a:b5:2d:4d:36:4e:2c:e3:80:29:67:c1:1b:b1:01:
         9e:96:e4:9f:15:28:2f:0e:79:5f:d4:2c:45:8c:4e:b0:62:9c:
         f3:8b:77:3e:94:6f:9a:71:f9:a2:2b:c0:c1:02:1d:25:a4:dd:
         68:41:6f:45:58:ee:ec:cd:30:54:31:c6:23:6e:fb:59:6b:7c:
         9f:b6:f9:ab:8f:d8:ab:42:a6:f6:2d:37:87:7b:90:6d:c1:b1:
         7a:f2:e4:0e:56:3a:75:2a:3a:69:8f:ab:0c:a1:88:dd:8e:7e:
         1a:fe:58:94:51:0d:1d:46:70:3e:e8:e2:39:f9:2f:d0:3d:44:
         0c:70:b7:b3:10:77:cd:bd:ff:65:c8:78:c2:9c:44:bc:ae:1b:
         63:4c:27:3a:4d:22:08:ec:d9:9c:73:db:f0:b7:af:98:f4:5c:
         c3:58:ff:b9:f4:de:81:73:36:d5:e4:a8:3d:3e:a0:77:fa:78:
         ab:91:35:d7:17:19:09:a9:06:bd:50:f5:e9:78:a7:9e:ba:37:
         7c:d1:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:18:10 2025 by rpki-client