Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File:                     DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier:          aAW4fOfuHtlxHE1GG5ZL4DuoMYUPJGM3m1HTLuAbhv4=
Subject key identifier:   23:C2:4F:9E:3E:83:79:7C:50:E4:4F:4B:6C:D4:FF:47:89:B1:3F:3E
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0966
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number:          095C
Signing time:             Wed 05 Nov 2025 01:31:04 +0000
Manifest this update:     Wed 05 Nov 2025 01:31:03 +0000
Manifest next update:     Fri 07 Nov 2025 01:31:03 +0000
Files and hashes:         1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: z33kyV+viiA/A7h8XL8Wg46du1MrBwqCWQqDqBveXxE=)
                          2: 82A311068E9D11EA936A3D74F8AEA228.roa (hash: 2fJIX7cXKI9q+Xtr5M7y3JF2k9yaJVXpVCcsMHvm1sY=)
                          3: 25FEFCBCDF7011E997CFF03AF8AEA228.roa (hash: NtIZQtczAvdXKaNMIz0m1Q59Z9nMLMNC/p7wM9puv2w=)
                          4: EAE45BCCDF6F11E9826AA83AF8AEA228.roa (hash: pbv4p9icCN4O4WG3leeCL1EpjVjH0clUw2cLgw9t0TQ=)
                          5: 9F906EFADF6E11E99541B739F8AEA228.roa (hash: hCPkplK+hVP9DlTjTX9JwAshQG3hKSM8ZsAigNstAOM=)
                          6: 57B1CD5CDF7011E994C8153BF8AEA228.roa (hash: zjnpjvYJ2wSjAd/hAZmaBFc5QxQdM4l8os6iExNvOEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Nov  5 01:31:03 2025 GMT
            Not After : Nov  7 01:31:03 2025 GMT
        Subject: CN=690aa8d8-4ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:a0:a0:14:20:a2:7f:c9:b4:6f:83:f7:6e:
                    a8:35:55:7d:90:04:14:1d:fc:55:4d:04:54:0a:12:
                    4c:df:b0:2c:47:21:d8:c4:e9:af:ee:36:80:3d:7a:
                    d3:96:f0:b1:5c:ee:0b:2a:be:fe:91:46:82:43:ca:
                    1d:e8:48:6f:27:2b:20:c7:47:af:af:26:26:09:e1:
                    ee:ac:a3:24:4c:1f:5a:25:42:01:85:8c:54:df:bb:
                    f5:a3:5c:a7:fb:f4:fe:b9:3c:40:12:a0:f0:bd:54:
                    44:a7:09:1a:a5:58:d2:a7:e0:00:72:99:16:5d:0f:
                    ac:00:45:8e:eb:54:60:28:29:79:33:62:9c:a3:36:
                    d6:aa:3c:99:e1:fc:48:39:5f:6d:d0:87:0f:30:4a:
                    ec:eb:04:f6:8a:d5:b8:f5:7b:cc:39:fa:cd:9b:90:
                    8a:c8:2c:05:b4:22:52:ba:5b:76:89:ab:05:d2:7d:
                    fe:17:ac:e9:64:93:e8:b2:3c:36:59:6e:47:36:55:
                    d0:f1:ef:71:8c:62:3e:f3:02:b4:9e:c5:9b:ec:5a:
                    84:38:49:5a:9c:f5:db:b7:37:1b:f4:aa:06:bf:aa:
                    f4:6c:12:e8:77:57:7d:fc:86:9a:fc:51:e1:ec:83:
                    5a:8c:6f:31:61:a8:e2:e9:64:d1:04:73:76:70:80:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C2:4F:9E:3E:83:79:7C:50:E4:4F:4B:6C:D4:FF:47:89:B1:3F:3E
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:70:d1:c9:78:86:12:0d:22:9a:80:34:43:d9:d4:18:7a:89:
         b4:4e:d5:46:d7:9c:33:3e:95:83:b8:cf:5a:c5:c8:70:cb:34:
         2e:d6:d2:41:2c:d6:bc:63:8f:f1:1e:1e:25:3f:54:d7:64:d1:
         80:12:4a:fb:f7:0d:87:9b:dd:f4:92:b9:bc:17:13:6d:39:80:
         82:08:a6:97:0c:d0:56:f9:02:b2:5c:c4:21:8a:1e:b6:3d:99:
         dc:fe:be:d5:7d:59:8a:e9:b4:49:83:cc:9e:82:57:61:88:05:
         e2:2b:a6:dd:fd:be:87:e1:1c:e8:d7:01:0d:c7:d4:4a:b0:ce:
         5d:98:cd:6c:1e:d3:58:29:cf:94:66:ce:0b:d2:19:82:fd:77:
         db:57:ee:ed:d2:e4:dc:15:2c:15:a1:ac:89:f4:a8:b0:b0:d6:
         3a:20:53:ae:3c:e8:f4:9c:4b:e3:3d:ac:63:68:2e:2d:d9:3e:
         20:e6:fb:f2:0d:0d:c0:52:4a:20:1e:d8:17:d7:2b:2c:35:fd:
         d8:1c:12:33:b4:93:61:26:fa:77:18:07:b8:7a:84:a7:7b:87:
         42:2f:8a:31:67:35:7a:b0:27:86:bd:75:85:73:07:e7:d1:c3:
         24:eb:dd:a2:55:9e:da:dc:93:f8:ca:7d:43:ac:58:c9:96:2f:
         d8:02:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:17:29 2025 by rpki-client