Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File:                     x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier:          wupfoMRNYLH6e38IikKkBE5LEvkshfop6LyP/2bexog=
Subject key identifier:   12:4C:5F:51:11:B1:B8:18:3B:D5:81:1C:1B:7A:FE:AE:E6:76:A5:62
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       0454
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number:          044F
Signing time:             Wed 05 Nov 2025 03:20:33 +0000
Manifest this update:     Wed 05 Nov 2025 03:20:32 +0000
Manifest next update:     Fri 07 Nov 2025 03:20:32 +0000
Files and hashes:         1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: 4cU1nHHL/xRCVHDAig4Hrkk1c26zie7IxkmV0xgRkqA=)
                          2: 72225BFEA05C11EFA3BA68B5762E951A.roa (hash: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=)
                          3: B6F83C207D4111ED99A5A8DEF1222468.roa (hash: Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=)
                          4: 6F61D56CD3F011EF874D80BD762E951A.roa (hash: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: Nov  5 03:20:32 2025 GMT
            Not After : Nov  7 03:20:32 2025 GMT
        Subject: CN=690ac281-0e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:11:24:40:97:70:f9:d6:c0:fd:4d:cd:68:
                    de:05:07:d2:03:db:01:65:10:6b:90:26:02:a5:5c:
                    6a:44:7a:bb:d8:e4:5c:b5:0d:c2:c3:26:e3:aa:21:
                    5a:36:0f:29:61:50:b9:41:6c:af:9a:96:fc:23:c9:
                    78:8e:62:3b:44:3b:e3:e1:09:7a:c1:e6:26:38:75:
                    32:c7:8d:9e:5e:65:9c:77:52:a0:9f:50:66:61:18:
                    3a:0e:fc:64:c4:26:30:b2:6f:34:15:b1:4b:33:54:
                    8c:84:3f:fd:2f:d3:b5:5f:a4:f2:33:99:66:f7:8a:
                    e4:3a:96:30:e2:46:6b:e6:f9:6c:94:e6:91:d1:73:
                    7b:91:dd:e0:c4:80:ad:d5:7e:a6:7e:dc:ec:0c:1a:
                    e8:e1:00:35:cb:13:1e:4f:aa:ec:b2:c5:ce:4d:6a:
                    d8:a3:56:a0:13:b4:5f:ba:45:77:d3:05:5a:19:ac:
                    1d:c3:5d:45:db:e8:39:b3:95:3e:c0:cc:b9:70:05:
                    c5:92:21:13:b4:36:0b:06:7b:5e:bd:11:46:e9:14:
                    56:bf:2a:53:c6:3e:a7:2b:7c:56:da:ab:17:0c:2f:
                    e4:5a:1d:13:33:60:a9:ab:48:a3:d9:59:c1:39:57:
                    4f:5c:20:ac:fc:f7:9b:9f:54:d1:16:31:1b:3c:3a:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:5F:51:11:B1:B8:18:3B:D5:81:1C:1B:7A:FE:AE:E6:76:A5:62
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:35:00:5c:b5:51:13:f9:62:bf:53:6c:f3:fc:17:2a:f5:7d:
         3b:90:a2:20:67:26:56:b3:1c:03:64:74:2b:e8:bf:a6:3f:d8:
         f8:54:de:c7:de:24:3c:bc:af:6f:87:4c:3b:5a:6e:32:93:7d:
         1f:ab:a4:c7:b2:53:dd:e8:35:9b:ae:d4:59:5a:46:5e:26:28:
         5a:04:91:74:d1:61:b2:13:d7:a0:f5:ab:40:01:11:fa:55:8a:
         d9:84:6f:1c:e5:3c:86:17:f3:a0:1b:d9:d3:59:55:2c:e4:17:
         18:45:cc:43:fd:22:79:a5:81:31:01:ab:ad:4e:86:8b:39:ac:
         5e:51:7e:31:06:00:f6:53:97:46:ad:1e:e4:61:f5:a2:7a:b2:
         03:d7:7c:40:bd:13:3a:af:d7:a4:44:2b:c2:7e:56:e0:77:3a:
         ad:82:c0:85:93:6a:4e:8b:fc:6d:c5:c4:1f:3a:2f:3d:21:8d:
         5c:62:c0:14:56:42:97:0e:ad:d8:7e:a8:e8:e6:d8:c4:a3:32:
         2f:9b:6e:d9:94:54:af:99:2a:03:e9:e4:68:9a:1d:82:3f:8e:
         54:81:72:d3:42:e7:e7:b0:d8:02:b5:19:dd:0e:fa:6d:5d:2b:
         46:4f:37:12:c5:df:55:8f:a5:e9:7d:b0:ce:ff:b9:a8:22:f5:
         3a:ef:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:34:06 2025 by rpki-client