Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
File:                     QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json)
Hash identifier:          UJ8zWwPPXzCRkxQD2DOBx+hXP004m+nXNj4B5wMCZLc=
Subject key identifier:   95:B6:61:55:87:73:5D:C9:23:C8:B6:0D:87:9A:EB:0E:55:DC:52:19
Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
Certificate issuer:       /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Certificate serial:       0988
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
Manifest number:          0985
Signing time:             Wed 05 Nov 2025 01:20:28 +0000
Manifest this update:     Wed 05 Nov 2025 01:20:28 +0000
Manifest next update:     Fri 07 Nov 2025 01:20:28 +0000
Files and hashes:         1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: 7q71Cp/P/i4GecPc9V8mQXoEvCA2boVFt0ZjaMB86Pw=)
                          2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=)
                          3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2440 (0x988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBAE4AF, serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
        Validity
            Not Before: Nov  5 01:20:28 2025 GMT
            Not After : Nov  7 01:20:28 2025 GMT
        Subject: CN=690aa65c-590c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:9a:6c:6e:56:aa:f6:84:97:43:eb:b9:cd:
                    f3:2f:e4:19:be:53:0c:8d:a4:e7:fe:39:55:ec:14:
                    31:8e:d8:02:4e:0c:ee:56:34:e7:31:19:e8:35:32:
                    af:8a:7a:82:9d:e8:25:85:b1:a2:c7:ba:fd:d1:d7:
                    fc:b0:41:a7:0e:80:44:26:21:34:25:f4:8d:bc:07:
                    cc:01:5d:28:35:e4:5a:85:b7:66:9a:d4:f8:5f:c5:
                    d6:6d:e3:d7:ca:15:ca:09:5b:23:e7:10:18:8d:9a:
                    b2:9d:45:20:5f:41:16:b7:e2:06:cf:8d:2c:1d:42:
                    65:e7:4d:5c:8b:22:1f:49:8e:80:0c:76:1a:c9:73:
                    b5:19:9f:55:f5:52:05:87:99:9d:c5:03:93:e4:04:
                    95:40:d7:ee:e9:99:e0:7c:28:27:e6:50:40:c3:7a:
                    48:49:22:f0:d0:2d:73:d4:07:f1:13:f8:50:e5:22:
                    d6:74:88:e9:81:68:95:7b:ac:52:29:71:7c:51:b2:
                    7b:fe:75:72:0d:d8:4b:ff:d5:ab:d3:f1:fc:bc:d6:
                    f6:2f:da:82:59:a8:5b:2f:22:97:b6:2e:d6:11:db:
                    84:1b:13:80:52:07:ba:03:69:8a:7c:71:cd:c4:cc:
                    f9:c2:f8:84:89:b3:78:e9:0e:cb:18:1f:34:e5:b3:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:61:55:87:73:5D:C9:23:C8:B6:0D:87:9A:EB:0E:55:DC:52:19
            X509v3 Authority Key Identifier:
                keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c2:65:5c:ff:86:e2:43:35:67:90:eb:f1:9e:74:2d:73:ea:
         6a:b7:0d:67:3f:b4:17:a3:b4:f7:20:e7:2e:fc:16:37:c0:ed:
         b1:fb:de:ad:6e:d2:a2:1d:a9:fc:14:6a:b6:5e:65:cc:2a:1c:
         3e:e9:d5:81:55:fb:81:55:31:e3:37:56:9c:70:83:1e:31:d4:
         52:b0:6a:26:e3:1b:67:f3:f1:cc:d4:0d:d5:c2:2c:3a:92:96:
         41:80:8f:aa:13:20:9b:12:98:09:2c:aa:ab:c6:c2:21:78:d1:
         8a:53:b9:0b:2c:55:16:f2:28:f9:c7:94:82:31:1e:93:a0:13:
         cc:8a:e0:6e:d1:b6:e0:aa:6c:d4:a0:1d:ff:92:73:fa:fb:46:
         bd:7a:f6:8b:cf:3b:5d:d7:cb:27:e0:0a:f3:84:cc:06:6b:97:
         92:b3:5e:44:ce:43:cc:69:eb:8c:b5:a6:01:11:ae:57:b5:3e:
         b7:29:40:08:89:a5:dc:bc:5e:71:7b:29:3c:78:96:06:17:5d:
         6e:4d:3e:f9:29:44:e5:ab:a0:1c:3e:df:f8:8a:41:c8:cb:b7:
         64:29:37:11:ea:ac:70:31:3a:2a:04:39:16:a8:20:03:5e:51:
         69:e2:81:9a:63:07:41:29:4e:60:d1:ed:cc:ca:c4:68:66:9e:
         51:3d:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:05 2025 by rpki-client