Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
File:                     rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft (raw, json)
Hash identifier:          o9GuYdqfzsd7vlzEiE2QhXUf6WJvFdRb3mI2qd4ZG60=
Subject key identifier:   39:D1:33:58:21:11:B6:B8:6F:88:46:57:B4:DB:37:5B:2A:C3:37:E4
Authority key identifier: AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
Certificate issuer:       /CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Certificate serial:       04E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
Manifest number:          04E2
Signing time:             Wed 05 Nov 2025 03:04:12 +0000
Manifest this update:     Wed 05 Nov 2025 03:04:11 +0000
Manifest next update:     Fri 07 Nov 2025 03:04:11 +0000
Files and hashes:         1: rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl (hash: vdzMcYVFoTnck2G+0Vltwrf6pzQdplyKgncYEQS59MU=)
                          2: 6ADD5F36276611ED8496B7E5F1222468.roa (hash: Qk4QPoBO37F+c6CTxiNXDVmzwT1MOwmXYJMKBjJSlEg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4C9EAF, serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
        Validity
            Not Before: Nov  5 03:04:11 2025 GMT
            Not After : Nov  7 03:04:11 2025 GMT
        Subject: CN=690abeac-e7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:1e:26:5e:2c:ff:5c:cc:b2:fb:e4:1e:e5:
                    4a:cc:83:59:4f:27:3f:af:ce:05:24:4b:27:9e:bb:
                    11:88:65:72:b1:06:f3:d9:e1:fa:1f:de:2f:3c:8e:
                    c7:12:f3:19:21:c3:43:a7:64:41:34:51:c0:7e:37:
                    a5:3e:bc:fd:ff:68:9e:ee:cd:fd:40:da:6a:62:9d:
                    21:75:95:3f:43:e4:4a:6e:61:32:0d:73:48:ec:6f:
                    07:1a:39:12:55:a6:5e:d2:87:2d:20:c8:79:ca:e8:
                    ce:13:c9:c0:ae:8e:82:84:e0:18:ad:45:98:a2:ae:
                    6f:fb:fe:0c:a8:61:5a:5a:aa:4a:a1:13:fe:86:be:
                    6b:c5:71:b4:c9:93:2a:31:74:81:95:97:df:d4:c6:
                    0d:17:13:33:3f:47:70:30:22:5a:7d:f1:bb:4a:3b:
                    2b:9a:4a:88:49:2c:91:3b:23:79:f8:ac:49:f2:63:
                    78:62:3a:2b:57:d3:94:32:3f:d2:29:65:aa:95:f8:
                    2b:d6:73:16:df:b7:14:4b:54:5f:3a:2a:a5:9a:42:
                    03:1f:c3:a9:93:d7:25:9f:08:4e:32:be:67:b0:c1:
                    98:d5:58:ba:30:ae:56:f3:53:92:46:fa:87:82:0d:
                    69:ac:37:6d:bd:03:27:d1:86:62:76:87:28:a9:f7:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D1:33:58:21:11:B6:B8:6F:88:46:57:B4:DB:37:5B:2A:C3:37:E4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:af:dd:bb:8a:7c:64:35:a2:da:94:29:43:fa:f1:ea:3c:90:
         66:59:1a:c9:b9:fa:0c:d0:be:a1:58:75:da:ce:e2:72:bd:d6:
         37:4b:5f:0a:db:f9:22:6a:1f:cb:1f:4e:ea:d8:84:eb:a6:a5:
         ea:14:ad:97:a8:df:e6:82:da:a4:d1:8e:1e:1f:22:a9:b5:8c:
         c9:88:d9:0b:43:64:34:d7:1f:6a:2c:87:39:db:1f:8b:7d:4d:
         b2:af:d7:00:95:3d:13:72:a5:e1:52:13:2a:76:aa:13:15:5c:
         4b:ef:01:8c:a8:cc:06:39:78:52:e2:9c:87:d4:73:6b:c1:73:
         ae:ce:c0:73:f8:8f:f4:c8:99:6e:c9:61:d8:68:03:59:b7:62:
         43:b1:1e:49:81:c3:1a:61:96:5e:10:67:91:49:c5:3f:a1:f0:
         24:15:d3:20:6b:5a:88:88:73:8c:bb:2d:1b:21:b2:de:9b:fe:
         7a:70:27:5f:21:82:b9:c1:55:e9:f5:49:f5:ab:21:ba:5a:a3:
         30:02:91:75:b3:16:b0:18:9e:d0:2d:be:77:b4:88:74:f3:8d:
         b2:41:1e:5f:c0:15:d8:d3:25:ff:d5:ef:2a:0f:92:3e:24:45:
         16:34:6d:71:54:69:e3:f5:ce:3b:c3:a7:aa:ea:5c:b0:5c:6a:
         a4:5b:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:18:57 2025 by rpki-client