Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
File:                     Po64WOYVOSGtsL9fC8lbTQbHw-8.mft (raw, json)
Hash identifier:          cy0wnAJ3WdCyAPAbx+mqnrO+oS9v/JAbk+w2YQJ6tds=
Subject key identifier:   00:50:48:90:42:F8:36:D0:64:68:86:D6:7D:B9:0A:8D:B2:E6:5F:15
Authority key identifier: 3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF
Certificate issuer:       /CN=F36E8DA8AF/serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
Certificate serial:       0487
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
Manifest number:          0486
Signing time:             Wed 05 Nov 2025 03:15:14 +0000
Manifest this update:     Wed 05 Nov 2025 03:15:13 +0000
Manifest next update:     Fri 07 Nov 2025 03:15:13 +0000
Files and hashes:         1: Po64WOYVOSGtsL9fC8lbTQbHw-8.crl (hash: fq8FCC72WgwobNcPRg5twF856CqlyEbtcGTpOkOrJRs=)
                          2: 55A38D48495D11EDB19BAAEAF1222468.roa (hash: SZNSy5X2cBi0hD7/2UgPgs5N7piTYi+vUEEFastGQCs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8DA8AF, serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
        Validity
            Not Before: Nov  5 03:15:13 2025 GMT
            Not After : Nov  7 03:15:13 2025 GMT
        Subject: CN=690ac142-9f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:d4:d7:8b:22:78:bc:3c:95:82:72:84:e5:
                    02:47:35:89:f9:da:b0:7d:3b:72:4b:8e:75:ee:6c:
                    a5:19:b3:06:66:07:73:3b:ef:d9:6e:56:89:8b:3e:
                    fb:1e:97:4e:f0:04:59:31:5c:1f:4c:88:8f:15:18:
                    61:53:17:5a:ab:0c:0f:82:45:3a:05:67:02:c1:39:
                    ca:69:c1:53:3c:00:00:66:8e:d4:42:6e:8b:61:24:
                    3a:d9:a3:b3:c4:ed:6d:c7:d8:6e:ef:5f:1f:54:40:
                    3e:29:50:26:cd:ec:b3:69:75:92:3d:69:93:a3:d5:
                    9f:83:0c:ad:59:ef:d2:1d:73:d3:d5:9f:04:1b:c0:
                    b6:af:00:3e:5b:90:72:be:42:fb:45:56:22:98:5e:
                    35:b1:0b:0d:42:77:3b:47:60:84:28:c0:16:24:a2:
                    32:36:79:d6:a0:ca:04:ef:8f:60:7a:83:a3:9a:11:
                    e8:6d:a8:f8:00:b9:cf:86:c5:d1:ff:89:6c:01:10:
                    2f:07:e8:9d:ef:d1:76:4f:16:89:bf:22:27:db:ed:
                    2b:6a:a6:d2:f4:f5:90:ed:2c:45:1d:ce:fa:9a:42:
                    4c:f1:ba:89:aa:bf:0c:14:ca:03:9d:39:e9:2b:d6:
                    fe:c7:39:38:72:2d:5d:73:84:f4:05:8d:3a:8a:e1:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:48:90:42:F8:36:D0:64:68:86:D6:7D:B9:0A:8D:B2:E6:5F:15
            X509v3 Authority Key Identifier:
                keyid:3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:60:5e:8f:d4:f5:20:ad:7f:ac:3a:e1:dd:5c:f0:2f:ee:d1:
         ef:6d:6e:c8:04:75:34:80:ed:f4:e2:8b:15:0f:6f:6d:49:5c:
         af:74:6e:f5:c1:31:8b:39:1d:68:07:5d:7f:4e:77:89:ee:bd:
         f9:81:71:1a:68:f7:82:54:be:05:ee:1c:f9:1c:e1:e4:93:aa:
         f8:54:de:51:ff:20:44:37:ef:2a:c6:da:2d:45:be:f0:39:56:
         dd:89:03:6d:90:66:69:1b:97:60:99:6d:24:dd:05:33:ba:54:
         15:97:84:76:be:5d:7e:f2:16:a8:d6:9d:8e:89:ac:4b:33:18:
         9e:3f:45:72:50:f2:43:02:9b:80:74:91:2d:3d:97:4a:b2:5d:
         82:d9:37:7b:cd:54:b7:f3:5d:f3:9c:17:9e:b9:d4:7d:77:a3:
         7c:12:d3:51:97:d1:92:e2:bc:c1:d7:6c:8a:7e:91:fe:98:38:
         fa:0b:00:8c:1e:63:8f:15:f4:c2:cc:57:4e:82:ec:24:8d:22:
         5c:d3:9e:f0:e7:75:28:cf:ad:f5:5d:a1:a8:74:e6:f7:d1:81:
         85:ed:7d:d0:9b:c2:13:5b:ed:de:9e:7e:6d:35:43:8b:71:6c:
         0b:94:c9:39:ed:56:d3:2d:98:fe:f8:0c:95:47:6b:bc:0c:cd:
         3f:20:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:35 2025 by rpki-client