Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          bs+FhNWralGOCeQekLx/Sunh2DQwtpAY7rYOFooOSXs=
Subject key identifier:   67:88:4F:FE:08:DD:56:13:74:57:37:23:01:19:B3:5B:DF:E5:40:10
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       085F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          0859
Signing time:             Wed 05 Nov 2025 01:42:40 +0000
Manifest this update:     Wed 05 Nov 2025 01:42:39 +0000
Manifest next update:     Fri 07 Nov 2025 01:42:39 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: qz0elogcqMUtmOjZTT0Ih0rTgZ3amQBxQhjl4Fou4VQ=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143 (0x85f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: Nov  5 01:42:39 2025 GMT
            Not After : Nov  7 01:42:39 2025 GMT
        Subject: CN=690aab90-2c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:af:55:28:1a:73:57:ae:f9:3e:d0:fc:db:
                    55:c9:d6:5b:5e:f3:aa:c1:74:d4:3c:e8:30:8c:6d:
                    1d:2d:a3:33:03:0e:43:52:51:f6:20:27:cd:48:78:
                    d1:c6:0c:f7:09:7a:2f:fa:4d:68:64:24:27:92:a6:
                    fc:51:0c:04:bf:c6:60:8d:8a:54:6e:6c:f2:d3:be:
                    5a:e4:d3:da:58:b8:a0:58:d5:6e:58:80:30:b9:da:
                    20:69:81:40:da:53:cb:2c:df:d6:f8:c0:b1:60:c0:
                    e1:a7:1d:ba:e9:f8:44:22:0a:99:1e:34:84:14:9c:
                    91:b7:49:01:05:5b:98:5a:a6:e8:4a:61:cb:cf:8b:
                    f1:6c:de:34:b1:22:13:a8:17:00:60:1a:ed:01:dd:
                    bf:11:0b:3b:7a:4f:68:10:18:d0:76:fa:c2:02:2f:
                    4c:39:3e:32:e6:d4:a0:16:90:5a:d3:6f:2d:4a:c6:
                    5a:83:1c:eb:8d:f9:bb:09:9f:fa:78:64:d6:3d:d9:
                    f1:0a:7e:9e:6d:9d:cb:60:68:20:1f:7e:31:dc:5b:
                    80:9b:8e:02:91:ea:13:61:21:c1:f6:e3:d8:7f:57:
                    e0:ae:03:8a:b6:53:99:f8:86:4d:7a:f6:9e:47:d6:
                    99:41:ba:8e:7a:3e:82:7d:d6:eb:75:d7:c7:97:71:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:4F:FE:08:DD:56:13:74:57:37:23:01:19:B3:5B:DF:E5:40:10
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:26:76:6d:ea:89:86:68:5f:b7:5f:a1:ba:83:ec:84:72:01:
         0b:d5:51:09:6a:38:7d:53:46:da:5f:db:0c:f7:b5:bc:ab:9e:
         4f:f4:4b:8d:fc:6a:23:ff:2d:5f:ea:12:ba:4f:91:3a:45:c3:
         b3:16:b9:11:1e:b5:72:d8:f2:46:32:fa:86:35:64:5d:50:01:
         dc:2c:52:31:52:8b:75:dd:03:42:9f:11:49:61:5d:4d:a4:72:
         4f:32:87:bb:68:2c:b3:74:84:eb:8e:52:bb:ca:2c:83:13:fa:
         36:9b:9e:cb:87:32:7e:c8:ed:ef:cc:5a:d5:89:02:3b:52:79:
         2a:84:b9:df:77:05:1e:63:65:d0:ff:e5:5e:44:cb:72:b9:2c:
         2b:47:26:cf:97:d8:80:1a:33:64:18:b9:72:51:3c:30:18:fe:
         c5:3e:67:41:1e:aa:5c:3f:21:70:ca:69:26:80:9b:98:2c:1a:
         87:10:ef:d6:d5:40:5b:89:14:7c:a3:d0:cd:85:70:49:48:22:
         9b:03:d5:38:c9:d1:8a:a2:03:9f:39:d8:d7:6d:1c:24:fc:9b:
         47:3f:4b:e9:cb:48:54:55:75:28:71:a8:1d:c3:ae:de:d8:5f:
         2c:c8:df:49:37:77:2c:8a:e9:ad:4e:d2:37:0e:e8:12:3d:77:
         49:f9:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:14 2025 by rpki-client