Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          x9rL7dgA9FLcBRd1zEjQO4Bp5+Q+FuudB5k3g1geRc0=
Subject key identifier:   93:EF:BC:30:74:A9:AC:EE:84:F0:71:15:CA:AC:32:96:99:3F:A2:1D
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       062D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          062C
Signing time:             Tue 04 Nov 2025 03:39:21 +0000
Manifest this update:     Tue 04 Nov 2025 03:39:20 +0000
Manifest next update:     Thu 06 Nov 2025 03:39:20 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: WZNM82CeoNKASov0hwjw3XoLngEOBvpR7YHkI9Arj7c=)
                          2: 2A3F25CA461211EDA2ED7DD4F1222468.roa (hash: lvPd6VTKcLMhU/3Nl8dyjCE5frGwG4hqXNXwJymfNBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF, serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: Nov  4 03:39:20 2025 GMT
            Not After : Nov  6 03:39:20 2025 GMT
        Subject: CN=69097568-f56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:c1:ec:d2:c7:79:05:92:70:e7:43:6e:b6:
                    60:a4:66:18:de:69:fe:8f:a1:d8:15:4b:b6:31:1b:
                    c3:57:bc:7b:6a:2e:12:e0:72:20:d3:04:53:9c:df:
                    63:4a:09:e8:8b:54:73:cb:b6:12:1d:bb:66:e1:c1:
                    81:17:d1:fb:d6:8c:1b:b9:ac:f9:f8:ce:1f:6d:f6:
                    d5:69:dd:3d:bd:c8:73:67:f6:d0:22:62:8b:3a:a3:
                    81:c7:2a:5e:c4:9a:d6:95:aa:c6:0c:34:7d:f2:ea:
                    6d:79:a1:d4:17:9e:12:92:af:19:be:43:64:57:7c:
                    c8:7f:02:04:4b:c7:9e:59:7b:8e:26:89:c8:a0:ab:
                    71:fc:78:4b:ac:f2:97:da:e1:56:f7:c4:73:b8:3f:
                    79:f4:41:9f:b1:70:b4:ef:a2:f8:a9:de:5c:52:ae:
                    98:75:e1:73:26:60:ca:4a:5c:da:fb:18:0b:b9:dd:
                    52:11:9a:15:d2:c0:72:cb:7f:ff:b9:ce:3b:ae:80:
                    ae:c4:d8:a6:b7:97:e9:ee:07:e3:15:5e:95:d4:6f:
                    d1:84:92:60:6c:65:f5:fb:a1:e2:da:2b:f1:cc:71:
                    98:4a:01:da:0c:0e:33:42:83:ae:42:31:c7:83:91:
                    91:19:f1:e6:fa:3c:0a:fc:be:0d:67:d1:ac:2c:21:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EF:BC:30:74:A9:AC:EE:84:F0:71:15:CA:AC:32:96:99:3F:A2:1D
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3a:63:c7:e6:2e:a3:c5:a7:0f:7b:ab:b9:5f:63:2c:8a:d3:
         3f:a6:2d:87:f9:02:0a:4d:dd:6c:f3:59:e4:ff:34:28:1f:77:
         27:a5:2e:de:de:fc:ce:b9:ca:d5:8a:d8:54:b2:6a:54:3c:c8:
         12:1a:3b:7b:05:c1:9c:2f:dd:a5:bb:d0:f9:80:0a:7b:8b:86:
         39:85:14:2e:9c:29:76:a0:eb:0a:bb:0b:bc:e2:e4:07:32:d6:
         ad:bf:4b:5e:e3:7a:e8:a8:b3:e7:1a:9b:42:b9:bf:25:c0:fe:
         56:75:61:f9:be:f4:f3:ac:45:10:ac:62:14:46:a8:5a:7a:49:
         3b:c9:ab:3b:84:96:99:23:3e:84:d4:72:d7:31:c4:57:46:fd:
         1f:45:75:ca:1f:fa:17:93:17:d3:4e:90:d0:79:ac:26:1a:b1:
         7f:94:29:e9:39:37:17:94:61:ba:19:b8:58:3c:c2:f6:2f:8c:
         80:0f:f8:c3:f1:6d:b1:65:7f:cc:13:2e:d1:8d:f1:2e:fa:a4:
         fc:71:55:9d:55:26:98:61:b9:06:ec:f4:06:13:81:d4:32:6f:
         a4:58:97:9a:69:cb:bf:cf:7f:09:62:39:e8:3e:3b:7a:18:63:
         d8:e3:e9:99:57:71:18:bd:3d:7d:be:71:9c:cb:a9:6d:31:2c:
         a9:eb:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:06 2025 by rpki-client