Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
File:                     PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft (raw, json)
Hash identifier:          9XSxuEOtBvA0Asx9dTPdBUkavviaq2hft8QGBvm6mnQ=
Subject key identifier:   27:FC:82:BE:DB:B2:61:F2:03:F9:CB:F2:45:39:F5:EA:02:DC:8D:3D
Authority key identifier: 3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1
Certificate issuer:       /CN=F36E8936AF/serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
Certificate serial:       042A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
Manifest number:          0429
Signing time:             Tue 04 Nov 2025 04:28:45 +0000
Manifest this update:     Tue 04 Nov 2025 04:28:45 +0000
Manifest next update:     Thu 06 Nov 2025 04:28:45 +0000
Files and hashes:         1: PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl (hash: G8lY2LVJxxrNwj8CJj2wC47tNA5IL6g65XY3rwNWm9c=)
                          2: DFF1E77490ED11ED942A0B7DF1222468.roa (hash: 9WA9paanDgVyhx1/5/CO95xKP5kF7OW8npO/gngIuxQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 04:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AF, serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
        Validity
            Not Before: Nov  4 04:28:45 2025 GMT
            Not After : Nov  6 04:28:45 2025 GMT
        Subject: CN=690980fd-1ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:9e:31:2c:b7:52:d4:f5:e3:3d:ba:39:f0:
                    5b:d7:55:e7:c4:37:3c:af:33:3c:ae:fa:74:0a:37:
                    a4:03:01:b1:7f:8b:5e:f1:0e:04:0e:fb:d1:05:9b:
                    96:59:53:ed:95:d2:8e:a3:b1:51:eb:3e:a2:ff:a1:
                    4e:90:42:35:0e:bf:bb:ee:8d:97:08:61:d0:19:48:
                    98:8f:17:97:5c:3f:da:fb:3c:dd:7d:3c:26:9f:f7:
                    67:66:61:5f:e3:eb:64:6f:13:c9:b2:47:39:31:a1:
                    0f:eb:61:5e:48:d0:23:ad:4a:2e:15:67:81:7a:f2:
                    d4:45:35:d6:11:50:11:c5:9a:0f:88:9c:bd:7f:85:
                    2b:da:f9:16:05:8b:78:51:b7:ea:7c:1a:0b:4a:e8:
                    fd:e4:15:d5:2c:1c:1b:92:d7:5b:9c:a3:5d:d9:02:
                    99:6d:aa:7b:33:8a:5d:5c:31:db:2f:0c:f9:b0:f6:
                    be:e9:44:0c:8f:1f:2b:a1:7c:b4:ba:f8:09:79:9e:
                    aa:49:0f:52:77:b3:3f:06:4b:11:1e:2b:a7:99:24:
                    f3:6c:45:46:fc:d7:84:9c:e0:fc:19:24:e5:ff:a9:
                    49:96:93:0f:c2:c8:dd:74:96:ed:1c:84:a9:5c:05:
                    e8:5e:40:21:1d:af:7f:85:ce:88:97:72:a7:ab:03:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:82:BE:DB:B2:61:F2:03:F9:CB:F2:45:39:F5:EA:02:DC:8D:3D
            X509v3 Authority Key Identifier:
                keyid:3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:90:e8:a8:34:11:00:32:1b:a4:14:ae:7e:aa:3b:36:c8:9f:
         aa:d4:e1:e9:c0:ab:9a:13:78:f3:9f:9f:75:76:4e:64:3b:d9:
         67:68:2c:42:53:28:0a:6a:c7:4f:72:6c:af:96:ef:6f:8e:7a:
         e8:97:ad:6f:cd:28:f2:ab:49:35:1a:2e:4d:93:a9:35:9c:99:
         36:e3:a8:c4:ea:bd:2b:51:68:84:a9:20:93:b2:39:bb:11:54:
         5e:85:39:a3:1f:e5:17:33:94:6c:ec:b8:fe:77:b1:2f:23:6a:
         ba:2a:cb:23:e8:74:00:78:a9:eb:70:fb:9f:08:5a:36:ae:83:
         29:73:a8:58:45:ed:f8:4b:e3:e2:41:0c:7c:e9:29:fb:65:83:
         43:8c:ee:b9:ac:d4:9f:cd:be:71:fb:58:a0:d6:f1:d9:ee:1e:
         9d:f6:c4:87:d1:b4:fa:5a:1c:c8:41:80:04:c7:9b:ee:84:b7:
         99:31:b0:72:62:18:3d:57:a6:aa:76:c7:90:fb:54:cc:47:dd:
         3d:35:03:04:46:f1:01:a3:b2:f0:c9:4d:f6:92:ae:e6:2a:0b:
         ed:22:d3:3c:54:2c:60:9c:7d:af:ef:72:28:04:1e:b1:29:18:
         ae:71:0c:7b:a0:55:60:c7:90:a4:5f:59:be:b2:a6:8d:78:a1:
         ba:65:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:10 2025 by rpki-client