Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File:                     bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier:          Ey1O8ubHfpzLV8wzrENy93jJnIIT+Avwga3e7WcrEdY=
Subject key identifier:   F6:DE:4F:87:CE:B8:3A:7D:EF:87:95:FF:52:32:95:A1:C3:E6:05:01
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer:       /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial:       03C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number:          03C4
Signing time:             Wed 05 Nov 2025 03:36:48 +0000
Manifest this update:     Wed 05 Nov 2025 03:36:47 +0000
Manifest next update:     Fri 07 Nov 2025 03:36:47 +0000
Files and hashes:         1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: /KPfT6WL25ii0zw3NPs7hPhEJR6stKn6jUfhyNa+ox0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3584AF, serialNumber=6C0B46384E939A20D778364656645013B5F766FE
        Validity
            Not Before: Nov  5 03:36:47 2025 GMT
            Not After : Nov  7 03:36:47 2025 GMT
        Subject: CN=690ac64f-fc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:82:da:5e:99:14:68:1e:40:02:2d:0b:95:
                    78:3a:02:eb:d1:f8:91:f5:b3:3a:72:6e:65:b4:9a:
                    81:fc:b4:bd:1a:00:87:0c:dd:e9:3f:b0:de:9e:3e:
                    d4:a3:31:32:46:28:db:0b:0d:18:c1:2e:de:87:a9:
                    cf:e6:c1:eb:10:42:77:54:99:ff:28:5c:a7:d6:a6:
                    11:f8:b7:c9:e0:15:29:9a:1d:1c:83:07:c5:4d:ef:
                    98:88:ba:08:af:49:ed:1d:8b:a5:a1:cc:dc:da:d1:
                    a8:34:6e:da:32:f0:b9:7f:4e:91:44:f4:1d:54:33:
                    95:65:ab:a7:d4:d3:b8:da:04:cd:d9:04:e2:42:c4:
                    fd:13:b7:84:30:07:f8:3d:2d:a4:30:ca:4b:86:11:
                    9c:09:15:fb:5f:49:8a:8f:fe:e4:76:fd:e2:de:57:
                    f6:b6:b4:5a:cb:4b:2f:4a:e9:5f:55:1a:c3:a8:fd:
                    69:2f:d9:80:ff:28:11:bd:84:5b:de:ea:f0:1b:bc:
                    64:b6:4f:ab:10:0c:da:28:98:b2:87:58:14:50:bd:
                    19:91:8c:64:8b:ce:98:cb:0e:ce:3e:06:55:43:f6:
                    35:04:f7:77:20:00:c6:24:11:0c:f8:57:87:63:9a:
                    43:05:bf:c5:f0:68:f9:7c:32:2f:1c:46:ce:80:fd:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DE:4F:87:CE:B8:3A:7D:EF:87:95:FF:52:32:95:A1:C3:E6:05:01
            X509v3 Authority Key Identifier:
                keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:96:79:e2:16:38:6b:04:29:10:af:53:cf:8b:fe:d0:c2:
         4a:c2:d3:d1:49:e9:f9:a3:94:f0:42:f5:86:63:62:f2:c7:46:
         81:35:61:4a:48:54:a1:3e:2d:79:4a:c7:eb:04:1f:81:61:63:
         25:dd:ca:77:4a:f0:2e:20:1f:52:ee:37:dc:48:94:7f:e1:15:
         59:e5:1e:1f:c2:d5:06:59:43:ec:3a:6e:55:77:d6:b2:e6:32:
         5b:1d:1b:39:e5:a2:b1:9d:cf:03:ca:5e:cb:94:a8:84:29:43:
         b8:0f:95:b3:5e:35:1d:02:2c:c9:10:ee:76:85:03:c8:a8:17:
         fd:9d:0f:ad:67:87:88:b4:40:a6:6c:8a:99:f8:fc:0c:dd:a8:
         3b:4d:93:ce:e6:f8:59:17:43:6d:13:94:36:51:fc:5e:03:ab:
         39:73:5a:62:45:3c:a5:c0:04:7c:42:40:7a:6f:46:e7:69:93:
         b4:6f:d2:e2:79:97:21:b3:f1:f3:16:6c:ba:75:0d:3c:01:8b:
         2f:19:33:37:b0:a7:4c:e8:21:45:9f:f5:3f:e5:e4:96:18:85:
         65:f3:ac:6d:08:34:1a:b2:ca:f3:df:59:78:d4:c1:6d:c9:d5:
         8d:c5:12:d1:3a:7d:95:8c:55:41:07:39:89:37:e9:3b:2e:d3:
         a8:4a:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:25 2025 by rpki-client