Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
File:                     TCzDWgCjh0ueijRhfMDZa1EJgg4.mft (raw, json)
Hash identifier:          44zq8B9t3RfyXkbgcCkKfYdqxC9sh/INAdMs7AMMbIM=
Subject key identifier:   69:F9:99:63:8A:6A:8D:60:95:A2:4A:83:C0:EE:89:A8:86:2E:61:4F
Authority key identifier: 4C:2C:C3:5A:00:A3:87:4B:9E:8A:34:61:7C:C0:D9:6B:51:09:82:0E
Certificate issuer:       /CN=F36E8D5AAF/serialNumber=4C2CC35A00A3874B9E8A34617CC0D96B5109820E
Certificate serial:       02A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TCzDWgCjh0ueijRhfMDZa1EJgg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
Manifest number:          02A6
Signing time:             Wed 05 Nov 2025 04:18:05 +0000
Manifest this update:     Wed 05 Nov 2025 04:18:04 +0000
Manifest next update:     Fri 07 Nov 2025 04:18:04 +0000
Files and hashes:         1: TCzDWgCjh0ueijRhfMDZa1EJgg4.crl (hash: TTa20nalk4KIubOy7xq4rx+0wS7ItsbZd/USxAJOg3Q=)
                          2: A3699AF8B57811EEA299007E775412E6.roa (hash: ZRCLd3++fODMxgRHWAnJ8OnkFBoCiVyoDwHYHsayGfk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TCzDWgCjh0ueijRhfMDZa1EJgg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8D5AAF, serialNumber=4C2CC35A00A3874B9E8A34617CC0D96B5109820E
        Validity
            Not Before: Nov  5 04:18:04 2025 GMT
            Not After : Nov  7 04:18:04 2025 GMT
        Subject: CN=690acffd-f6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:57:96:74:f8:b1:89:1d:b5:04:0e:1d:85:
                    cc:cf:05:f0:57:d3:7d:10:fd:7d:c0:b2:c4:36:81:
                    40:9e:a3:5b:dd:53:6a:56:5e:42:ad:b2:af:24:9e:
                    b4:d8:4a:2e:2a:93:c4:73:19:ff:07:d7:61:a2:0a:
                    61:40:b5:3d:f2:55:d4:3a:6f:7b:e8:80:d4:da:b3:
                    57:f8:f7:eb:9c:4c:6a:45:11:b5:bb:48:18:23:99:
                    20:c7:48:f3:11:5c:84:6f:c0:da:2a:e9:16:b2:f1:
                    cb:0b:fe:3d:d5:26:73:e4:98:89:90:91:fa:8c:a3:
                    d1:c9:97:e4:7a:3f:5e:3f:18:e8:f2:94:d7:3a:4b:
                    8c:d2:51:f1:79:bb:e5:98:7c:c6:8b:1b:9f:2e:8c:
                    28:5d:85:5f:a8:89:3f:35:bc:35:7e:93:fa:8c:13:
                    14:3f:6d:7c:71:70:e6:5a:27:e8:b5:7c:bf:cb:c4:
                    4f:28:76:c4:70:6e:63:6e:96:5d:48:3f:c2:9a:2c:
                    c2:24:84:f4:56:11:d1:0b:b5:36:98:fb:95:c2:5d:
                    62:5a:e4:c2:95:c2:d7:ca:9b:2b:a8:f8:4c:14:ac:
                    df:b1:fe:03:e5:15:68:55:7d:5d:e6:7b:a7:57:bc:
                    59:ff:61:80:8b:07:c8:32:ea:85:60:12:37:cc:52:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F9:99:63:8A:6A:8D:60:95:A2:4A:83:C0:EE:89:A8:86:2E:61:4F
            X509v3 Authority Key Identifier:
                keyid:4C:2C:C3:5A:00:A3:87:4B:9E:8A:34:61:7C:C0:D9:6B:51:09:82:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TCzDWgCjh0ueijRhfMDZa1EJgg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8D5A/07E44428B57511EE9501EB77775412E6/TCzDWgCjh0ueijRhfMDZa1EJgg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:d3:8e:bc:c1:75:f3:e1:81:0a:b5:27:b2:68:32:c9:9f:
         68:26:cd:e2:fb:03:57:a8:2b:33:43:05:74:2c:4a:67:35:2d:
         e2:77:ba:bc:1f:f8:45:a2:4d:56:75:0d:46:67:bb:86:5d:73:
         26:79:86:f3:bb:e4:6f:15:ed:a2:09:f7:6d:a4:7d:4d:bb:fa:
         fc:e3:52:77:60:81:e4:54:b4:0d:0d:a3:51:8a:a6:ee:fe:10:
         32:76:ac:80:be:b5:40:4d:30:ba:ba:d2:8b:ea:54:4b:7c:be:
         27:9e:d0:df:c1:3e:0d:62:14:74:b5:3b:5c:ee:39:1e:70:b2:
         32:d7:52:5e:9a:6c:36:d3:34:10:d7:11:7e:39:1f:bf:91:c1:
         d8:94:de:da:3e:23:14:80:d8:e0:ce:f3:7c:eb:4d:79:21:1f:
         c3:30:e3:77:dc:c0:5c:71:0c:f4:ab:84:87:ef:f0:c7:11:66:
         ac:02:86:c0:0e:4f:3d:53:91:2f:27:3e:6c:5b:fa:3c:d8:0c:
         de:49:76:24:fb:e9:4a:07:10:16:94:f9:89:a9:47:ef:a1:75:
         4b:fd:96:20:7c:3a:35:bb:f7:96:0d:d0:21:0b:ee:3d:f8:9c:
         05:c9:bd:8a:c5:f2:60:95:23:d0:af:62:97:0c:b7:5a:9e:61:
         a9:d1:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:29:07 2025 by rpki-client