Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
File:                     X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft (raw, json)
Hash identifier:          +JlZkC/OAEPjKMkt6oyA3ZYRxb5szl3uxJK+c11mgDU=
Subject key identifier:   17:18:05:C4:D9:D2:AF:E9:CA:9B:11:45:B4:5F:6C:2C:A4:BE:E7:4D
Authority key identifier: 5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24
Certificate issuer:       /CN=F36DD1E2AF/serialNumber=5FD4C60AEC0F5B276DAAB9DB6911766589D8AA24
Certificate serial:       07CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
Manifest number:          07CB
Signing time:             Wed 05 Nov 2025 01:52:34 +0000
Manifest this update:     Wed 05 Nov 2025 01:52:34 +0000
Manifest next update:     Fri 07 Nov 2025 01:52:34 +0000
Files and hashes:         1: X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl (hash: Z5EazwD6/LT6j0imfx20kIJc4egaOimLOPIh0fpg1Fs=)
                          2: 9E5F4D20C02911EAA359D20AF8AEA228.roa (hash: mddgoRu4s2817HTK3OKl+Ig4JHtX0J/FyOyMNUGfu+I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD1E2AF, serialNumber=5FD4C60AEC0F5B276DAAB9DB6911766589D8AA24
        Validity
            Not Before: Nov  5 01:52:34 2025 GMT
            Not After : Nov  7 01:52:34 2025 GMT
        Subject: CN=690aade2-d185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:c5:36:88:e8:73:4f:68:b6:8d:81:92:d2:
                    0a:f2:21:6b:5a:e9:a2:56:dc:61:62:f2:ca:7f:df:
                    fa:3f:17:c1:35:23:6f:18:f5:61:7f:85:9a:14:1e:
                    25:d3:2b:86:93:0a:9c:ab:9e:7c:27:86:c5:0d:aa:
                    05:b2:ed:46:51:10:d2:f6:26:36:12:77:02:71:ca:
                    56:ea:32:93:1c:2e:c1:65:da:04:da:a1:76:41:91:
                    07:0b:af:57:06:92:fa:84:28:7a:8c:d2:af:f2:dc:
                    b3:90:70:55:9e:74:09:80:7c:03:a9:c0:a7:32:43:
                    45:3c:d2:40:6a:f4:71:b0:d8:3e:74:79:64:9b:12:
                    4a:bb:e7:bd:0c:bf:6d:9f:93:f9:96:8b:e2:a6:ca:
                    87:aa:47:ba:e9:3d:68:b0:aa:7b:69:b1:4a:42:56:
                    ae:8e:eb:e8:06:39:af:71:e1:65:90:be:78:ef:fb:
                    28:56:2a:9b:e3:c1:07:b2:26:37:5d:63:16:14:ea:
                    43:9f:80:c6:c2:16:b3:c5:03:f3:0f:2e:c3:6d:91:
                    dd:19:5c:cc:c1:5a:b7:5c:f8:ce:60:c1:8a:11:24:
                    37:4a:81:42:18:b5:b4:0c:fc:6d:27:b5:94:19:e7:
                    0d:70:bf:f9:33:48:06:16:b2:bb:13:6d:03:0f:92:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:05:C4:D9:D2:AF:E9:CA:9B:11:45:B4:5F:6C:2C:A4:BE:E7:4D
            X509v3 Authority Key Identifier:
                keyid:5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5a:66:78:43:0b:1d:70:1b:04:00:de:69:05:7a:99:32:04:
         2a:7e:9f:38:c5:1e:48:03:44:25:76:22:c3:d3:92:60:9c:22:
         90:d8:d3:45:12:5b:14:04:1a:c5:47:6a:78:eb:be:9b:90:df:
         f4:3e:2d:55:1c:ac:21:f2:48:7f:b6:54:1b:51:0f:5e:ac:5a:
         30:d3:5b:9b:d3:b8:09:f4:d5:57:da:fe:e0:47:45:54:91:b2:
         e1:8c:05:f5:ff:a8:2a:d5:69:81:32:d4:31:01:44:4c:f6:15:
         4d:25:ab:80:4f:89:03:75:7e:37:21:29:4c:f3:8f:28:9f:5f:
         55:7f:c2:a1:87:e4:88:67:65:c4:8b:02:a8:98:0b:0d:bd:76:
         ee:71:2b:7b:4d:3d:5f:eb:d0:96:e9:95:2c:2a:4f:ac:09:3b:
         42:0b:87:70:cf:b7:f4:c7:8a:9d:98:d6:9b:2e:40:33:83:37:
         5a:d7:bc:84:7a:b6:30:9e:f8:f5:29:4d:18:be:8c:51:78:ef:
         9a:de:36:f1:29:c5:9f:d9:03:76:f9:aa:96:7a:c5:f4:90:b0:
         15:87:ea:42:27:ef:f4:e4:8e:54:f5:06:7d:aa:d1:1d:c2:c0:
         ca:2c:b6:36:6e:85:49:88:25:bd:f5:b6:35:5a:21:46:d1:2e:
         d9:54:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:59 2025 by rpki-client