Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
File:                     wDEb4pGTolThzVxYy7dlalArlVo.mft (raw, json)
Hash identifier:          T4/qUNo6KiOPAcFIA/vXTGF1sFRWS5OodLNuHEKfPmo=
Subject key identifier:   AF:25:71:F3:8B:E1:E3:8A:34:9D:E8:59:A8:F5:27:ED:46:64:CA:BC
Authority key identifier: C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Certificate issuer:       /CN=F36C2FCAAF/serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
Certificate serial:       25
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
Manifest number:          25
Signing time:             Tue 04 Nov 2025 06:48:06 +0000
Manifest this update:     Tue 04 Nov 2025 06:48:05 +0000
Manifest next update:     Thu 06 Nov 2025 06:48:05 +0000
Files and hashes:         1: wDEb4pGTolThzVxYy7dlalArlVo.crl (hash: aYwdxE7St7mXgkW5vPlqUkW0Pc1WJHnvIEYJrWfQIi4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Validity
            Not Before: Nov  4 06:48:05 2025 GMT
            Not After : Nov  6 06:48:05 2025 GMT
        Subject: CN=6909a1a6-9a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:00:ba:62:b2:73:59:e6:4f:54:a9:9b:ae:
                    d3:bc:7f:43:74:30:2e:92:05:a0:0a:e1:e4:25:89:
                    a5:28:88:8a:40:73:12:34:63:e6:02:6f:9a:56:70:
                    e1:f9:ae:fe:79:90:c7:c2:c6:f3:c0:73:f5:9a:21:
                    4f:06:07:0f:63:1f:c5:6f:88:4e:27:88:df:65:7a:
                    de:ee:ef:0c:f1:62:82:e2:1a:1d:6e:e5:ed:bf:ea:
                    fd:f3:15:d0:d7:89:49:09:86:24:9f:f9:5a:e6:33:
                    2c:b3:cb:c7:31:c5:eb:e6:05:15:05:23:ce:c1:a1:
                    4d:19:94:1a:07:41:b7:cc:1f:3b:ae:c4:76:b5:c3:
                    b0:3f:a5:6d:02:a8:9d:c4:39:dc:28:f5:05:44:ab:
                    61:50:de:57:65:73:56:9e:78:26:76:97:7d:81:b9:
                    95:c0:61:26:c1:37:48:1d:19:bb:5e:81:5e:59:5a:
                    62:91:4a:1d:92:bc:97:31:f6:d2:40:92:3b:7c:80:
                    35:fb:2b:14:81:aa:2e:27:91:d6:74:1d:77:a4:79:
                    3e:ee:90:18:46:bc:8c:4a:97:1f:d2:6b:f5:ae:4c:
                    a0:79:58:72:0c:35:55:e6:0a:f6:d3:17:0a:70:25:
                    72:ca:9b:b8:f0:1f:c3:c7:94:7d:c4:ff:4d:64:26:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:71:F3:8B:E1:E3:8A:34:9D:E8:59:A8:F5:27:ED:46:64:CA:BC
            X509v3 Authority Key Identifier:
                keyid:C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8a:2f:0f:6f:14:03:c2:cb:bb:61:93:45:25:4c:15:a3:21:
         33:0b:f0:45:a8:50:9e:80:fe:e0:f8:a8:09:d9:be:1e:11:84:
         86:e6:e3:d3:d9:23:34:37:4b:61:71:ff:18:05:f6:53:b2:ec:
         50:6c:8b:4e:20:8b:a5:e0:5b:2c:66:6a:a3:d8:48:3a:7e:e2:
         e5:21:3f:c0:f5:e4:0f:43:d2:52:7c:09:da:e1:c2:ea:dc:9c:
         a2:35:80:94:aa:73:16:0f:19:e4:07:88:9b:d8:b6:28:64:11:
         ef:3e:50:33:d5:9a:cd:ae:08:be:17:67:52:94:29:1b:e0:c4:
         19:b6:99:f0:ee:7f:b8:b0:fa:76:d4:8b:31:f6:8e:f9:f6:3f:
         8a:bc:50:1a:bc:17:c4:24:68:8c:b8:ae:88:d3:75:cb:2a:3e:
         88:e9:6e:72:62:16:5b:07:18:8d:a9:77:c0:f7:89:01:93:38:
         0f:b8:4f:cb:6a:a7:ca:61:72:b8:73:76:98:17:16:31:44:28:
         0e:20:d7:da:5c:22:f2:f9:6b:4a:cc:8d:6c:84:9d:fb:7b:5c:
         35:d6:55:1e:51:9b:3f:da:75:4a:9f:d9:ca:17:3d:37:fd:b3:
         c0:db:f9:5d:2e:c5:8f:b6:e8:93:b5:82:e9:55:07:4f:26:ee:
         7c:5d:63:e5
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MkZDQUFGMTEwLwYDVQQFEyhDMDMxMUJFMjkxOTNBMjU0RTFDRDVDNThDQkI3NjU2
QTUwMkI5NTVBMB4XDTI1MTEwNDA2NDgwNVoXDTI1MTEwNjA2NDgwNVowGDEWMBQG
A1UEAxMNNjkwOWExYTYtOWExODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIFALpisnNZ5k9UqZuu07x/Q3QwLpIFoArh5CWJpSiIikBzEjRj5gJvmlZw
4fmu/nmQx8LG88Bz9ZohTwYHD2MfxW+ITieI32V63u7vDPFiguIaHW7l7b/q/fMV
0NeJSQmGJJ/5WuYzLLPLxzHF6+YFFQUjzsGhTRmUGgdBt8wfO67EdrXDsD+lbQKo
ncQ53Cj1BUSrYVDeV2VzVp54JnaXfYG5lcBhJsE3SB0Zu16BXllaYpFKHZK8lzH2
0kCSO3yANfsrFIGqLieR1nQdd6R5Pu6QGEa8jEqXH9Jr9a5MoHlYcgw1VeYK9tMX
CnAlcsqbuPAfw8eUfcT/TWQmyasCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSvJXHz
i+HjijSd6Fmo9SftRmTKvDAfBgNVHSMEGDAWgBTAMRvikZOiVOHNXFjLt2VqUCuV
WjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzJGQ0EvQTBBODQ5Q0M5RTE1MTFGMEE4M0U4N0JGREFFNEVDOUMvd0RFYjRw
R1RvbFRoelZ4WXk3ZGxhbEFybFZvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvd0RFYjRwR1RvbFRoelZ4WXk3ZGxhbEFybFZvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDMkZDQS9BMEE4NDlDQzlFMTUxMUYwQTgzRTg3QkZEQUU0
RUM5Qy93REViNHBHVG9sVGh6VnhZeTdkbGFsQXJsVm8ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAK2KLw9vFAPCy7thk0UlTBWjITML8EWo
UJ6A/uD4qAnZvh4RhIbm49PZIzQ3S2Fx/xgF9lOy7FBsi04gi6XgWyxmaqPYSDp+
4uUhP8D15A9D0lJ8CdrhwurcnKI1gJSqcxYPGeQHiJvYtihkEe8+UDPVms2uCL4X
Z1KUKRvgxBm2mfDuf7iw+nbUizH2jvn2P4q8UBq8F8QkaIy4rojTdcsqPojpbnJi
FlsHGI2pd8D3iQGTOA+4T8tqp8phcrhzdpgXFjFEKA4g19pcIvL5a0rMjWyEnft7
XDXWVR5Rmz/adUqf2coXPTf9s8Db+V0uxY+26JO1gulVB08m7nxdY+U=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:38:37 2025 by rpki-client