Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File:                     Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier:          qtdHp+ActBCYzKQ3mMzOuG900cc3oYRvEx/HBNXcsGY=
Subject key identifier:   A5:FE:0C:C9:85:2D:15:61:E1:E2:2E:B7:D8:08:C6:A3:4A:1D:90:D2
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer:       /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial:       056A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number:          0564
Signing time:             Tue 04 Nov 2025 03:57:33 +0000
Manifest this update:     Tue 04 Nov 2025 03:57:32 +0000
Manifest next update:     Thu 06 Nov 2025 03:57:32 +0000
Files and hashes:         1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: uPEi4Jpao8BFoaC6hlyfi9ObT4H9lYP2GSU+YhcBNvE=)
                          2: B59F24BCF57211EC993D889DF1222468.roa (hash: maJQ7QpaTAEJtJEDY71F+/C/LFPT623BEcfsghzWeRo=)
                          3: 7FA7A028F57211ECB728E09CF1222468.roa (hash: SHmJD0o/WKe9DuMaCzkIRZ50PJsm8QXP+INyJbesPiI=)
                          4: 331F5746A0F411ECAE812B975A40D577.roa (hash: FvEjzuf2UFe1epBdLgowypdTxhYaL6zKJK6RJCwngCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
        Validity
            Not Before: Nov  4 03:57:32 2025 GMT
            Not After : Nov  6 03:57:32 2025 GMT
        Subject: CN=690979ad-7822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:f4:d5:c8:fc:e7:99:98:12:4f:ff:06:d8:
                    d6:fb:8d:59:54:0b:f1:b0:58:eb:25:e2:36:ba:15:
                    4f:1f:50:28:d3:ae:18:11:ea:81:72:c0:30:ca:77:
                    49:fe:fb:d5:8e:63:39:42:1d:57:5a:4f:21:3d:b9:
                    25:67:88:7f:3a:4b:0a:f5:09:dd:bd:a5:be:0d:0c:
                    ca:da:1a:76:f7:64:f9:75:9d:00:67:d1:c4:c3:be:
                    95:81:8f:d5:14:1a:73:06:47:c7:83:86:78:96:6b:
                    a5:6f:fe:07:a3:58:ab:1d:67:ae:70:aa:dd:20:b3:
                    b9:91:60:ef:01:4d:03:53:75:ff:b7:c6:59:ba:9f:
                    b2:fb:33:eb:ac:79:92:f7:b7:a3:a2:fe:78:40:c5:
                    c3:01:90:75:25:b3:a7:bd:9e:30:01:45:3d:e1:31:
                    46:d1:e3:dd:25:2c:3f:53:75:27:11:ff:48:93:fb:
                    b8:95:92:2f:b2:d9:c6:d0:d5:cd:3d:56:e5:d2:35:
                    4f:75:f0:60:86:3e:a9:4a:85:f6:c6:13:c9:e2:65:
                    35:ee:f3:e8:66:af:eb:d9:57:4a:16:dd:8d:99:98:
                    1b:d2:96:74:b4:a4:c5:30:4a:74:da:41:8b:e8:1e:
                    ab:03:34:1f:81:94:1f:db:45:e0:4b:5a:b3:ae:af:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FE:0C:C9:85:2D:15:61:E1:E2:2E:B7:D8:08:C6:A3:4A:1D:90:D2
            X509v3 Authority Key Identifier:
                keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:df:d4:72:29:87:d7:71:5a:ca:3e:fd:d9:17:58:7f:23:5d:
         78:f3:3f:0c:7b:ac:68:c3:65:42:cd:9e:04:fb:1e:7a:f6:28:
         8e:ee:17:9c:29:8c:08:76:22:1e:6e:0e:7a:3a:3d:75:a9:60:
         b1:61:7a:c4:aa:47:d8:e3:3f:00:89:0c:04:43:10:53:fd:32:
         0c:22:a3:fc:7b:04:b6:55:dc:6a:88:30:69:a5:f4:08:90:0e:
         ad:de:69:83:e6:c7:71:fd:88:e1:83:85:3c:b2:69:9a:b9:35:
         06:b6:4f:57:2f:20:9d:b3:e3:a1:c9:e4:de:2f:85:28:69:d7:
         9b:34:18:a2:b3:6e:60:00:96:d9:c6:55:1c:6e:8c:94:22:ce:
         38:dd:84:d9:48:3a:7d:48:65:41:5d:6a:dc:ae:38:5b:91:ee:
         a1:79:59:93:92:38:b2:9f:d6:35:6c:c3:44:fd:7a:31:a4:c9:
         55:d4:8c:60:22:2e:ec:fd:f1:da:f0:58:7c:0f:fe:33:1e:8d:
         ab:9a:7b:75:c1:81:8c:63:fd:f2:de:e5:34:8f:7e:e4:5d:c1:
         38:0c:8a:3f:e5:01:4c:63:eb:7f:0c:d8:e9:c2:0a:35:6b:65:
         d7:ad:ae:b8:83:d2:47:f6:33:f0:50:2f:69:6e:e6:47:4d:22:
         95:00:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:16 2025 by rpki-client