Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          Ktmg8st2Ocb0E4G1Fumi1YtVcaJW4BlTHRUF3NHmtZs=
Subject key identifier:   A2:59:D0:FE:5C:EE:95:8D:76:2C:78:73:0D:81:89:69:A3:39:A1:96
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       0F24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          0F1F
Signing time:             Wed 05 Nov 2025 00:51:39 +0000
Manifest this update:     Wed 05 Nov 2025 00:51:38 +0000
Manifest next update:     Fri 07 Nov 2025 00:51:38 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: CungF6peIA6HuAaQrYgIfoUZlUGNH0lmXkSRFizJglQ=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3876 (0xf24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Nov  5 00:51:38 2025 GMT
            Not After : Nov  7 00:51:38 2025 GMT
        Subject: CN=690a9f9a-62a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:53:ee:43:39:83:83:65:b2:2e:c1:1e:e8:
                    27:e0:f7:20:c1:f1:c6:75:da:b5:11:78:7e:60:c5:
                    8b:ef:1a:18:6a:e7:4c:2e:4d:15:d9:43:d4:3b:40:
                    5d:11:58:2e:8a:f9:c1:19:b0:b9:b5:81:0c:2d:8d:
                    58:4c:9b:65:10:24:99:d3:99:f9:41:47:44:0a:9a:
                    93:d6:a3:98:cd:a4:fa:b6:45:48:d8:c5:d9:4f:21:
                    0e:7f:04:9c:9f:4c:0e:60:b0:4e:75:36:5d:6a:36:
                    72:ee:6a:eb:99:9d:34:07:a2:da:8a:12:b7:c2:21:
                    28:0c:04:95:d0:c7:c6:70:d1:40:22:c6:0a:5c:f6:
                    21:c7:c6:83:aa:2e:ae:e9:a8:cb:b4:47:71:6c:79:
                    9b:f9:66:69:41:56:38:af:37:b4:7c:80:e6:87:2a:
                    7f:96:da:5b:7a:5a:0a:25:a4:58:eb:d8:9d:68:17:
                    06:08:5b:7d:e4:0e:bf:15:0d:83:74:2c:3f:6f:03:
                    ff:83:67:15:1d:0f:d9:81:84:72:22:e9:a5:e0:19:
                    ad:c5:e5:85:d6:77:14:ce:03:39:b3:41:5a:d4:31:
                    d9:58:fa:8a:6f:c0:b9:f6:1b:0d:d0:77:dc:9c:21:
                    9a:30:88:c5:50:e1:24:a4:42:97:0e:c3:ba:d3:33:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:D0:FE:5C:EE:95:8D:76:2C:78:73:0D:81:89:69:A3:39:A1:96
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:db:72:a3:6e:98:70:9c:6e:69:61:4c:ac:37:5d:5b:3c:10:
         bb:fe:2e:eb:bc:50:52:e5:b3:39:70:f0:fe:d7:d3:80:21:a2:
         54:b4:59:6c:7b:2f:81:78:cc:ff:12:89:11:48:0a:8d:86:78:
         d4:c3:4d:f9:d6:07:a0:04:11:00:0b:23:fe:fd:ee:8f:a2:9a:
         e2:99:d1:e1:84:17:73:c2:85:f9:21:13:c4:39:9f:ac:38:59:
         2d:8d:f5:fc:82:c1:f5:9f:32:97:d1:6e:68:c1:5a:ea:b4:24:
         bc:b4:15:58:fa:19:c6:37:de:3b:39:6a:17:ab:0a:c8:a7:f6:
         97:94:73:17:52:23:53:98:1f:eb:af:64:64:0b:26:e0:5f:38:
         03:42:35:44:0f:78:1b:ec:60:c2:a0:5c:be:16:c5:d7:9b:f7:
         4f:7f:4a:a8:70:26:bf:43:cf:a0:58:6b:80:c7:f9:a1:c7:b3:
         c7:c8:03:cb:f4:f3:14:16:06:ed:33:4a:7b:81:6e:68:57:4a:
         02:e0:5f:7e:1b:c3:53:76:74:bc:c7:d6:9e:63:68:68:ff:67:
         18:fd:ab:97:30:18:3e:d1:86:05:ef:18:eb:e4:4b:52:92:95:
         01:77:89:1d:2d:4d:25:be:36:4a:bc:d3:a1:b2:0c:82:41:9b:
         75:49:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:55 2025 by rpki-client