Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
File:                     4co12ODZvFHAlvkK_gIBb5OmeaA.mft (raw, json)
Hash identifier:          t1B78MYtUQt7g0nkxTPhQXKIJJjo+x2uAla5BufQCj0=
Subject key identifier:   7C:13:6F:1B:6E:63:B5:FF:65:DA:48:F5:7E:FB:29:8C:70:83:9D:79
Authority key identifier: E1:CA:35:D8:E0:D9:BC:51:C0:96:F9:0A:FE:02:01:6F:93:A6:79:A0
Certificate issuer:       /CN=F36E6DE6AF/serialNumber=E1CA35D8E0D9BC51C096F90AFE02016F93A679A0
Certificate serial:       8A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4co12ODZvFHAlvkK_gIBb5OmeaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
Manifest number:          89
Signing time:             Wed 05 Nov 2025 05:30:16 +0000
Manifest this update:     Wed 05 Nov 2025 05:30:16 +0000
Manifest next update:     Fri 07 Nov 2025 05:30:16 +0000
Files and hashes:         1: 4co12ODZvFHAlvkK_gIBb5OmeaA.crl (hash: iwJCWNwvVfjVsOa6XHoqhyBBZfBAgOZ/VA7ZjAlZOTU=)
                          2: 0BF3367E50E611F0BBDDD082DAE4EC9C.roa (hash: b6mmX0pmUciTPgFCAT//NQwXI5tfH+5qdXUZdemBc5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4co12ODZvFHAlvkK_gIBb5OmeaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6DE6AF, serialNumber=E1CA35D8E0D9BC51C096F90AFE02016F93A679A0
        Validity
            Not Before: Nov  5 05:30:16 2025 GMT
            Not After : Nov  7 05:30:16 2025 GMT
        Subject: CN=690ae0e8-29a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:40:0f:e9:6a:9f:cb:db:2d:c3:ce:32:da:
                    3e:50:66:7c:5d:06:58:fe:dc:2e:33:e8:29:79:89:
                    50:fa:7c:3f:d4:74:43:bc:46:5b:16:74:16:a7:ff:
                    78:7b:64:1d:6a:33:33:8c:43:ec:c1:d0:a3:0b:c9:
                    49:45:0f:a7:0c:5e:c1:7c:f6:73:31:2d:fd:d1:e4:
                    7e:2d:9e:db:73:5e:ea:01:6b:98:5b:70:9e:99:99:
                    8f:15:34:3d:73:e6:dd:bb:1d:19:1a:5c:2c:4e:94:
                    30:f8:05:c2:e1:81:ed:77:7f:aa:ef:d7:00:da:a1:
                    a4:20:24:79:37:bd:d2:d1:07:64:94:20:d8:fc:b6:
                    cb:7b:9c:0a:39:4d:4f:1f:79:17:1e:d3:1e:83:eb:
                    8e:92:0a:6e:2f:87:49:84:03:06:c1:24:28:cb:1f:
                    34:45:e3:f7:27:64:f7:59:d0:72:65:dd:d9:c4:b6:
                    7b:f5:90:6f:be:e0:97:3f:e9:94:12:ae:ec:c5:4a:
                    0b:3c:26:82:bc:5b:ae:c0:a1:9e:48:98:69:8b:45:
                    58:fb:60:39:6a:42:85:96:96:b0:73:85:bc:79:03:
                    f6:db:91:d7:49:c8:ac:0d:a4:3b:81:f5:ce:7a:8c:
                    97:b7:cc:4a:36:f4:9c:37:c5:aa:34:f2:5b:52:23:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:13:6F:1B:6E:63:B5:FF:65:DA:48:F5:7E:FB:29:8C:70:83:9D:79
            X509v3 Authority Key Identifier:
                keyid:E1:CA:35:D8:E0:D9:BC:51:C0:96:F9:0A:FE:02:01:6F:93:A6:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4co12ODZvFHAlvkK_gIBb5OmeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:03:6b:f3:c5:22:bf:51:66:a5:30:1e:dc:47:6f:ff:9c:65:
         3c:5d:0f:30:45:3a:fc:05:4f:15:ca:86:9d:e0:fc:19:5f:ab:
         b1:91:31:c5:ee:57:6a:14:29:ea:50:7e:1c:1e:98:f7:15:43:
         fb:db:14:9a:50:96:47:9b:d3:e0:49:6d:00:1c:b1:f0:bf:0d:
         dd:87:45:88:f5:fd:68:11:9f:c9:e0:51:97:ac:5d:8e:32:d6:
         06:06:fc:b0:8f:52:c6:20:11:7e:fc:88:7e:16:f5:22:76:37:
         6b:e6:d0:2b:16:30:af:5c:c6:0f:00:29:e7:0b:79:18:75:86:
         85:39:dd:e4:64:83:e2:d9:14:01:04:42:9f:81:46:54:5d:3f:
         cc:cf:e7:19:f3:ad:ca:f7:7f:b5:05:d4:7b:f5:ca:02:bb:64:
         43:dc:63:f7:94:35:5b:e2:7f:b7:6c:69:de:f0:be:c4:64:51:
         8f:02:6d:67:8e:fa:71:4f:4a:7b:48:88:d7:ad:4d:88:c3:36:
         59:3c:b0:44:9f:e5:8c:9c:3c:43:34:a4:77:f5:e3:aa:37:57:
         7a:f2:8e:66:3e:c3:a6:de:64:3b:ec:ad:3b:f9:69:0e:2c:ce:
         7b:1b:fd:3e:d1:ef:a9:0b:7e:f6:df:6d:c9:b6:e1:b5:9a:c4:
         45:fd:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:07:15 2025 by rpki-client