Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          ZlIKhI49VPojapsAl+4ITKu4IZT4FRFLtgRSLmxzdp0=
Subject key identifier:   7F:2D:B1:03:56:4A:47:DE:CE:AC:19:D9:18:B6:D5:C9:3C:D7:61:B5
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       0944
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          0942
Signing time:             Wed 05 Nov 2025 01:32:05 +0000
Manifest this update:     Wed 05 Nov 2025 01:32:04 +0000
Manifest next update:     Fri 07 Nov 2025 01:32:04 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: e9768qJKAFBi3tYT4fPUys1mzSPB+M/Vn6vMOeXxYBk=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372 (0x944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI, serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Validity
            Not Before: Nov  5 01:32:04 2025 GMT
            Not After : Nov  7 01:32:04 2025 GMT
        Subject: CN=690aa915-1ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:fb:4e:71:69:bd:10:da:f3:0c:d7:d5:96:
                    b6:f8:f8:15:8c:bf:62:d0:1e:28:05:a4:48:54:e1:
                    ca:13:6c:03:19:ec:12:dc:16:e8:fe:8e:e2:2a:8d:
                    ad:42:4f:b9:f9:19:c1:80:40:c2:f3:4c:2d:6a:d7:
                    7d:0b:33:bb:fe:29:5a:ea:64:82:b1:3b:aa:b2:7e:
                    71:3b:1d:68:1d:34:21:35:97:20:c7:cb:cc:23:96:
                    43:b4:1e:42:38:ea:01:53:bf:ef:57:64:a5:42:e5:
                    fb:b4:ef:d0:f2:76:1e:85:9b:bc:34:ad:7a:cd:38:
                    5b:3b:c1:13:ac:18:f7:08:e9:13:66:03:b0:f6:58:
                    58:21:71:9e:52:aa:68:8e:71:67:49:57:c7:2a:4c:
                    df:f5:6a:53:b7:f0:03:a0:07:99:cf:77:91:42:70:
                    e2:80:a9:9d:9b:55:a6:a1:6d:71:ca:8a:e9:95:fc:
                    e0:31:10:f0:6f:49:34:41:f0:86:a7:3b:f8:83:59:
                    a7:07:d5:a6:39:62:6b:5a:49:42:d8:8b:c4:42:68:
                    56:46:4d:5c:ba:fc:62:e2:7a:59:21:fb:3e:e2:fb:
                    ac:70:f6:51:3d:ad:08:9e:ef:2a:8f:50:c9:af:24:
                    cb:83:82:05:5a:4c:ee:c3:a9:18:d0:bd:93:8f:29:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:B1:03:56:4A:47:DE:CE:AC:19:D9:18:B6:D5:C9:3C:D7:61:B5
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:28:ec:78:70:49:c9:02:e6:96:b9:68:09:cf:d7:eb:c2:
         be:ba:47:e4:16:68:6f:10:c4:6e:0c:12:8f:49:eb:47:c3:0e:
         88:4d:2c:df:b6:49:de:c1:71:b2:d8:bd:66:39:38:33:96:6d:
         86:55:37:f4:78:c6:55:7e:80:fa:92:93:cd:e7:69:50:6b:0c:
         e2:44:05:8f:93:db:74:b4:c8:cf:aa:25:82:9e:74:ee:89:8c:
         54:f5:3e:45:41:64:96:4b:a9:9e:03:ce:95:06:bb:4f:e4:14:
         a6:ce:76:f8:fb:f8:6b:f6:7f:8b:af:8a:12:fb:55:9c:86:64:
         4f:90:64:85:53:26:ed:03:82:64:d5:cb:33:96:21:92:22:8d:
         12:12:d9:b3:19:58:1b:b7:e5:e8:cf:34:82:b1:7b:af:e9:b6:
         db:93:20:54:d3:7f:76:57:66:c9:66:a5:a9:46:ab:df:a4:d7:
         16:2f:37:cc:dc:f2:88:be:7b:9c:e1:ba:e8:0a:39:b5:f5:6e:
         6d:f0:63:ab:69:4f:71:b4:f7:86:55:27:b0:41:8a:89:7a:7d:
         3a:51:3a:8a:92:e6:a0:b4:cf:cc:e1:54:9b:04:3e:24:32:c0:
         f3:3b:d6:cd:42:29:d1:6c:33:4f:ad:96:f4:64:6a:85:0d:88:
         25:ec:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:02:37 2025 by rpki-client