Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
File:                     AjFjgfORycHBtlB5K7N-_nj13ZM.mft (raw, json)
Hash identifier:          DPkqdbfLpgPrgqqwPV2Zq6XMHiBgp1s7IFW6NryXpNo=
Subject key identifier:   FE:33:84:DC:1A:C5:30:58:35:B8:A7:D7:FF:3D:71:03:56:7B:6A:8A
Authority key identifier: 02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
Certificate issuer:       /CN=F36C684FAF/serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Certificate serial:       08FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
Manifest number:          08FD
Signing time:             Wed 05 Nov 2025 01:35:25 +0000
Manifest this update:     Wed 05 Nov 2025 01:35:24 +0000
Manifest next update:     Fri 07 Nov 2025 01:35:24 +0000
Files and hashes:         1: AjFjgfORycHBtlB5K7N-_nj13ZM.crl (hash: 538GPuAvjVjyPJIQBY7pB3fwhWwCKmiHKN5yEspnzGQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2301 (0x8fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FAF, serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
        Validity
            Not Before: Nov  5 01:35:24 2025 GMT
            Not After : Nov  7 01:35:24 2025 GMT
        Subject: CN=690aa9dd-4a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:f0:a5:e0:fa:5f:81:04:9e:14:ac:52:8a:
                    90:6a:77:38:68:5b:56:53:d3:a5:f3:87:7f:f2:15:
                    b9:33:dc:a8:fd:36:15:da:6c:c5:ca:d5:17:7a:d6:
                    b5:d0:6d:19:dd:f7:f2:5d:a0:15:4e:68:12:d6:48:
                    8c:42:c8:7f:54:17:98:72:6d:45:f5:f3:98:c8:ca:
                    4c:8c:ae:4b:59:4a:ec:8d:4b:17:53:e7:8a:5e:dd:
                    4b:35:35:ae:2b:31:0a:3a:92:ff:8b:4f:01:07:fc:
                    ce:b7:67:b9:5c:5b:0e:d8:ec:04:e7:26:44:fb:95:
                    98:46:1e:86:c0:77:0c:d7:65:6a:13:71:16:49:40:
                    d1:20:c5:4e:42:95:66:4b:9e:cb:cb:45:f8:c5:69:
                    bb:d3:b8:44:3d:03:ee:ea:bd:4c:e7:a4:69:5d:85:
                    65:84:2c:4b:a6:50:33:82:35:81:b6:ae:6e:1b:a3:
                    9a:93:85:bb:c4:3d:3e:06:3d:dc:f3:27:5f:53:f5:
                    a7:12:39:c3:6e:fb:9a:c5:7a:39:2a:d8:27:79:2b:
                    e4:2c:ca:c7:ac:e4:c7:aa:5a:ee:09:e4:dd:07:a9:
                    68:a4:1b:7a:f6:b0:4d:1f:8a:99:f1:ae:58:5b:90:
                    61:be:1e:aa:8e:92:ed:c2:6b:3c:9c:6a:0e:7a:4d:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:84:DC:1A:C5:30:58:35:B8:A7:D7:FF:3D:71:03:56:7B:6A:8A
            X509v3 Authority Key Identifier:
                keyid:02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1f:73:47:1e:04:3d:2b:3e:df:f5:fe:fa:14:99:df:0e:6f:
         69:73:6a:52:2a:3a:93:70:ae:8b:58:81:8d:cc:ac:fe:67:75:
         90:b5:b2:50:13:0b:90:7f:a1:83:95:da:1f:17:f1:84:09:6e:
         e5:ce:36:a4:57:dd:31:30:07:97:17:17:14:f4:b1:9b:7e:f1:
         7b:29:23:cb:31:6f:99:52:fd:be:0c:79:4c:43:33:33:81:7b:
         04:f8:18:43:90:d1:66:0d:48:e8:6f:d8:d4:c7:7a:5d:46:0b:
         fa:4e:10:72:9b:c4:c4:be:85:8f:a1:85:2c:75:e9:c2:52:f8:
         7e:c0:48:5c:44:d5:61:99:c7:b5:a9:ce:3a:50:9f:55:5b:a9:
         e4:98:93:db:0c:25:9b:b0:95:24:d9:54:8d:d0:cb:92:37:8e:
         7e:57:9b:83:ea:83:24:ab:aa:73:df:72:2b:90:45:61:71:ba:
         03:47:3a:24:90:7d:67:c1:cc:56:13:48:ce:51:f0:43:b8:9c:
         3c:ce:77:d2:87:0d:65:ff:48:81:1d:dd:f4:0c:5c:69:dd:69:
         2c:47:87:69:ad:29:1d:fd:b8:c0:aa:67:34:72:d0:b6:af:02:
         5f:40:51:70:4d:89:c6:2e:07:fa:77:37:0d:f1:5c:83:77:0c:
         b9:02:ff:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:12:57 2025 by rpki-client