Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
File:                     xk60GwPUwTMps2P1p5PyzZy0LLc.mft (raw, json)
Hash identifier:          L/Ow0OT+ND7sA8xZlqZD+UjvFSsQDSWGcJlaDXx0F9k=
Subject key identifier:   BF:8C:93:79:AA:4E:08:15:66:C0:25:8A:0F:37:83:F2:A7:4F:CD:8C
Authority key identifier: C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
Certificate issuer:       /CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Certificate serial:       06A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
Manifest number:          06A0
Signing time:             Tue 04 Nov 2025 03:19:16 +0000
Manifest this update:     Tue 04 Nov 2025 03:19:15 +0000
Manifest next update:     Thu 06 Nov 2025 03:19:15 +0000
Files and hashes:         1: xk60GwPUwTMps2P1p5PyzZy0LLc.crl (hash: IdYKnPQ9MTXUo6WLyyeVTnKrPae9guT+3UPkwqjfH3E=)
                          2: 4FDC1DC2F14D11EFBAC0E3A0762E951A.roa (hash: dOKqRkTfN9jocpe+O0SITKXIanbXliNmUMx3esYzAi8=)
                          3: 87E50DA6AA2B11EE9A64EA6D775412E6.roa (hash: XpYMXNR2CG5z3pCw7sOpke9QbTyJBxDxE9SukOPOH8g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699 (0x6a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5804AF, serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
        Validity
            Not Before: Nov  4 03:19:15 2025 GMT
            Not After : Nov  6 03:19:15 2025 GMT
        Subject: CN=690970b4-32df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:9f:f0:37:dc:40:0f:16:d6:88:d1:c2:45:
                    e4:fc:60:b2:5f:7d:bd:30:d5:9e:9a:76:f1:ec:00:
                    5b:c1:77:90:2b:83:26:db:4f:cf:52:41:a0:d8:61:
                    57:b8:f6:fb:bc:fb:e0:f7:01:18:8a:ac:2b:60:5c:
                    d6:de:dc:93:7a:a7:bb:30:e6:9e:e8:a4:7a:a6:c9:
                    7d:60:79:4c:f3:47:2a:e3:81:4f:be:15:01:e5:07:
                    29:80:77:cf:05:96:ef:d9:92:1f:a3:fa:73:4d:6e:
                    60:6a:7c:a0:82:fa:cc:c0:d1:37:73:53:1c:41:91:
                    cb:3c:31:df:99:4d:c2:7e:bd:3f:2f:23:af:a4:3b:
                    31:f9:19:dd:18:3a:ef:fd:14:aa:d4:5b:7d:95:5e:
                    7b:10:30:70:38:8a:a7:b0:df:ca:eb:6f:ae:17:6f:
                    7a:01:ef:c1:85:39:bc:3b:b8:fc:05:d2:30:34:b2:
                    65:0c:46:91:59:1f:ad:a8:56:ef:8a:b5:45:a4:53:
                    e0:86:4b:ae:66:0b:a5:b8:ca:90:99:35:9d:69:6d:
                    b4:8e:dd:96:36:1c:82:d8:a5:02:40:54:11:4f:ff:
                    fa:c4:62:92:96:e8:4d:77:9f:5d:f0:0d:c8:e7:ac:
                    30:47:6f:4c:85:7e:55:2e:27:8d:89:22:24:24:97:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:93:79:AA:4E:08:15:66:C0:25:8A:0F:37:83:F2:A7:4F:CD:8C
            X509v3 Authority Key Identifier:
                keyid:C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:64:ec:8e:d0:f4:9e:54:e7:fd:0f:f6:9b:04:c9:0f:b2:ec:
         1f:e3:c3:c9:53:4c:b8:7b:7c:36:a5:67:6c:d0:2b:b6:c6:77:
         d3:a1:72:85:3f:b8:9f:eb:49:4b:dc:ea:bc:0e:94:95:59:a6:
         1a:42:02:c9:d0:47:f2:5d:51:41:cf:73:9a:a8:7e:a5:97:b4:
         13:fc:1e:75:a5:11:9c:10:52:53:f4:68:96:84:22:03:a8:bd:
         24:ca:8c:e1:a3:7f:5e:75:60:82:40:d3:c0:4a:7e:98:07:db:
         73:ce:04:3e:f3:c1:08:43:bc:af:98:5f:fb:69:14:8f:4b:7a:
         65:a9:44:f2:82:e3:e2:e6:00:21:21:46:3b:f8:d7:d9:8d:35:
         0d:11:67:7d:c8:89:77:42:82:9f:fa:38:8a:e6:ec:ed:44:94:
         a8:a9:4a:df:58:f3:00:c5:7c:3d:a5:29:a7:8e:7b:4d:0f:f7:
         3f:5e:ff:0c:47:0a:53:a1:e8:25:95:2e:88:a1:d4:9d:2b:cc:
         7d:50:c9:4b:af:33:d1:85:70:0e:5f:e2:4f:13:ef:20:67:52:
         dc:af:e3:6a:ab:6a:c6:97:c6:2a:48:d8:18:6a:1d:d7:f3:92:
         96:a8:55:6a:da:2a:5c:8e:44:8f:36:54:27:73:d4:bb:ec:2d:
         c0:a0:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:32:08 2025 by rpki-client