Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          ZnotSXT29W5y5CMTCYXvyk8Ves0XYVy1QH62FPLXaYw=
Subject key identifier:   DF:F7:DE:2E:02:C2:D9:61:BE:92:FF:BD:E2:E3:8B:39:3A:58:3E:56
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       04C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          04A8
Signing time:             Tue 04 Nov 2025 04:21:42 +0000
Manifest this update:     Tue 04 Nov 2025 04:21:41 +0000
Manifest next update:     Thu 06 Nov 2025 04:21:41 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: MSaBmcrkOUV6D8cQILrE8kvo/ZcogkuPVRipKNlJt/8=)
                          2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          17: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (hash: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=)
                          18: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          19: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 04:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Nov  4 04:21:41 2025 GMT
            Not After : Nov  6 04:21:41 2025 GMT
        Subject: CN=69097f56-094f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:ac:4e:5f:f4:75:e7:39:75:bd:e1:66:0a:
                    f3:22:cd:d1:a0:9e:a9:12:9f:2e:03:cd:eb:05:bb:
                    d1:8b:ad:d2:90:19:16:42:42:2b:c1:98:0d:8c:dd:
                    82:b5:f6:7e:05:ff:46:05:0d:fd:f2:c1:28:f0:d0:
                    1f:36:6b:23:73:2f:e3:c6:bd:b6:8f:48:9d:28:76:
                    87:fa:f5:68:fb:98:3b:c2:fb:b6:ff:4c:01:b4:33:
                    e2:33:fe:ae:91:10:2d:79:85:2e:b7:5c:a5:50:4a:
                    20:18:6f:cb:9f:bb:11:85:d0:5a:d4:c2:97:d3:d4:
                    7f:d6:bd:d8:f4:54:3d:79:98:fa:e2:a4:ea:ff:74:
                    30:58:f6:f5:5c:80:8d:02:99:99:12:62:c4:49:92:
                    c9:d2:ab:b6:a5:f1:71:ae:15:24:70:75:0b:08:6e:
                    ec:99:93:6a:bc:3a:58:df:4d:bb:98:29:3a:9d:be:
                    17:4a:b5:51:ea:17:95:72:68:da:ff:15:84:13:27:
                    9e:06:b3:5a:92:3f:cf:0c:69:64:75:74:4b:36:b3:
                    3e:c0:5d:00:08:14:6b:80:80:82:7e:c7:02:40:30:
                    60:0d:f4:fa:c0:96:6c:c9:92:eb:b0:39:cb:d5:c1:
                    41:da:fe:c4:91:70:f0:b8:33:31:bf:75:b2:ef:a3:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F7:DE:2E:02:C2:D9:61:BE:92:FF:BD:E2:E3:8B:39:3A:58:3E:56
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:01:96:8c:a7:3b:a0:b7:40:1c:46:2d:8d:75:f5:1c:c6:5b:
         cf:24:d5:36:9b:55:5a:2a:2a:1e:f3:d3:05:b8:74:4e:30:c5:
         a3:8d:91:24:0a:a5:3f:69:e4:9b:c2:d3:74:1e:a3:fd:53:dc:
         b5:57:22:cc:43:f9:02:a8:5a:21:9a:d2:0f:fc:c1:c8:5c:db:
         e4:61:c6:e6:48:7a:c1:37:11:87:cd:8f:80:ad:a7:64:0b:5d:
         04:d1:c4:06:e6:e1:70:1a:c1:fa:d0:67:10:f5:a2:cf:cc:9e:
         f4:07:77:61:b7:92:37:1e:ea:ed:ef:6d:c5:43:a4:fa:49:6c:
         27:a0:4d:00:ed:9a:15:d3:95:b5:f3:f1:ac:4c:3d:d3:80:b7:
         01:00:f5:f8:29:14:26:1c:2e:4f:8a:b8:dc:c7:88:e3:ee:6e:
         f3:cc:19:c0:01:57:69:52:0f:42:1c:83:95:5e:0b:54:1f:6e:
         0c:9d:65:54:ab:62:1c:36:6e:13:eb:56:fc:06:5a:05:04:68:
         9a:68:11:52:f2:df:2f:f6:f7:a7:c8:f2:51:26:42:e2:17:17:
         00:71:7a:4d:23:42:13:69:b2:f5:43:45:c9:db:f3:ca:fe:77:
         ba:d0:78:86:e1:e8:9a:4b:1f:08:34:b5:34:e6:db:3a:a4:3c:
         17:3f:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:33 2025 by rpki-client