Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
File:                     2-RJMcFJNvINzlhLKrkbZfQttpY.mft (raw, json)
Hash identifier:          RUAMXdJDIERtZffRAHIlPvIQLoK5IIhbzIPrDiBt9/M=
Subject key identifier:   68:48:44:8F:D0:E5:7C:AB:D8:79:A5:B9:CC:A7:1E:63:07:E9:BA:A5
Authority key identifier: DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96
Certificate issuer:       /CN=F36C06CBAF/serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
Certificate serial:       0528
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
Manifest number:          0524
Signing time:             Wed 05 Nov 2025 02:57:04 +0000
Manifest this update:     Wed 05 Nov 2025 02:57:03 +0000
Manifest next update:     Fri 07 Nov 2025 02:57:03 +0000
Files and hashes:         1: 2-RJMcFJNvINzlhLKrkbZfQttpY.crl (hash: Uk47YaX2tMUYY41TpRPei2pqECWCtXGgYcAUQwjKPtg=)
                          2: 06392D96808111EFACB35A67762E951A.roa (hash: owpJQ133udBSSOce7prYm8YhowuNrXIyS2eThdaFM+Y=)
                          3: BAD292FE050511EE9502F55D4AD9E6FC.roa (hash: sSGwGLApov2m0f4AHKaPHnZ0lUyscweITsyLbCMc9QU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06CBAF, serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
        Validity
            Not Before: Nov  5 02:57:03 2025 GMT
            Not After : Nov  7 02:57:03 2025 GMT
        Subject: CN=690abd00-5011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:14:3c:68:ae:51:ab:b1:0d:1b:77:b7:ff:
                    13:72:dc:ec:4e:46:82:c4:06:71:e9:3c:bc:72:9f:
                    38:c0:f1:c7:e3:50:d1:03:64:dc:88:c2:dc:62:54:
                    5f:7d:44:86:5d:ff:61:eb:6a:4d:95:76:3c:01:2f:
                    96:77:83:85:d0:c6:27:b2:a7:ce:a3:27:73:7d:23:
                    ed:20:37:b5:7f:dd:28:51:5f:f3:f4:94:00:9c:c1:
                    8b:e0:bd:16:8a:8a:42:d7:20:fb:e6:a5:43:02:9b:
                    04:04:67:d2:34:71:ba:bf:e9:64:95:e5:b8:ff:5c:
                    d6:0f:66:1c:4b:64:6f:f6:90:3a:ac:4c:f6:50:4e:
                    7c:d8:0d:1d:53:99:be:a1:a2:c5:41:d5:4c:b1:03:
                    82:e9:59:7b:dd:3c:7c:a9:d8:10:25:85:cb:8e:be:
                    42:3f:6b:00:4d:ac:15:08:66:31:0f:42:c5:3e:a2:
                    a7:9a:e4:64:61:9a:e1:f6:da:d3:2c:73:6c:99:b1:
                    94:17:d4:2b:18:3d:31:5a:1a:41:3e:cf:1e:d5:d9:
                    b3:68:24:84:b2:69:83:10:05:2f:6a:d1:ee:19:a3:
                    c2:b1:96:55:56:31:5b:a5:6b:12:41:84:b2:d1:8b:
                    2f:f7:ae:3f:a5:61:bc:87:46:0b:ba:b6:21:dd:c6:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:44:8F:D0:E5:7C:AB:D8:79:A5:B9:CC:A7:1E:63:07:E9:BA:A5
            X509v3 Authority Key Identifier:
                keyid:DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:fc:ec:f5:4c:1a:a5:9f:85:ef:23:14:2d:fc:9f:2a:77:
         27:bb:20:08:b2:cf:73:4a:50:0d:5a:e9:23:3d:bd:42:95:78:
         41:ab:73:9d:fc:18:42:24:48:eb:ff:e8:86:05:d7:4b:ea:06:
         cd:f6:9a:93:e1:af:4c:b6:97:39:7d:d1:d4:0b:46:b2:86:9e:
         1b:ef:d1:44:8f:ee:dd:0d:a9:44:8e:51:92:29:b3:ba:61:0e:
         55:e6:18:77:c4:b8:de:33:9c:02:5c:2e:8c:f1:5c:95:0e:f9:
         08:9b:d7:66:1e:96:d3:dc:70:a7:7a:3d:3c:43:5b:03:62:94:
         b7:7f:48:a2:79:cf:f7:f6:62:b6:81:55:cf:48:8b:58:e4:6b:
         0a:1e:31:de:de:b5:9e:fa:09:f7:c8:b2:82:b5:06:1c:55:05:
         37:b0:4a:75:6f:88:53:91:dc:ac:27:d7:9c:f2:03:76:d9:20:
         74:26:c9:7b:ee:4e:68:d4:cb:d9:36:e8:a0:da:c7:dc:5b:aa:
         72:6f:81:04:89:a3:4a:f7:76:18:7b:11:81:54:ca:ab:e9:b4:
         8b:b3:f6:5f:ac:91:cc:47:9c:b8:27:a6:7d:ef:41:0a:92:34:
         95:2f:8b:2b:1e:19:5c:d1:b0:33:24:5c:0b:09:fb:8e:a1:8f:
         23:0c:39:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:28:08 2025 by rpki-client