Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
File:                     3Y7gOV77NMQJjlduH6lWEvCuEIw.mft (raw, json)
Hash identifier:          VMpDSgSo7+eY0wxEs4EokGchdkFPdFCRt7xQK5Fn5wM=
Subject key identifier:   73:5C:CD:AB:92:6C:5A:0A:C0:FA:1B:4D:AE:34:6E:AF:9F:7B:29:6F
Authority key identifier: DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C
Certificate issuer:       /CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
Certificate serial:       0279
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
Manifest number:          0275
Signing time:             Wed 05 Nov 2025 04:26:05 +0000
Manifest this update:     Wed 05 Nov 2025 04:26:04 +0000
Manifest next update:     Fri 07 Nov 2025 04:26:04 +0000
Files and hashes:         1: 3Y7gOV77NMQJjlduH6lWEvCuEIw.crl (hash: pxX3TWoSDsH6BmvQ1YDA3gGoCO2ioeZTwORVQLFiaPo=)
                          2: 41ED69D60D1511EFA8396400017001B1.roa (hash: x3aVslqCzMfioshN80Dla6JteewrsmH2GjIbIFA+j2M=)
                          3: 1A07CB8EDBEA11EEA45EFA81775412E6.roa (hash: Pkjs2jgzXCv29HKkqLFfvU1IeY4hITiyODVD/2YyWlE=)
                          4: A07BB004DBEA11EE8E03CC82775412E6.roa (hash: 5FeX+dqvUeIECgzm38Ru/fnBhkIsH4lq/tNWx1MCZM8=)
                          5: 6B9CD7800D1511EFB6A61201017001B1.roa (hash: ssvUYk5x0OzQ7Q0Xp7UErygVy3MmZIG7nazU7zgnCUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE14CAF, serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
        Validity
            Not Before: Nov  5 04:26:04 2025 GMT
            Not After : Nov  7 04:26:04 2025 GMT
        Subject: CN=690ad1dd-3e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:4d:ce:7c:a2:7f:81:61:81:9c:39:44:a8:
                    a6:2c:74:ec:ee:32:4c:7e:7f:22:ad:d8:a3:60:61:
                    1b:75:91:88:d0:e4:90:ae:55:48:2e:b4:c9:50:14:
                    91:a3:24:ae:4c:05:4a:0e:d6:ab:be:7d:04:02:e8:
                    b6:b4:a6:64:9a:10:ec:ff:8f:2b:b2:d4:40:73:05:
                    5c:ab:db:78:17:72:99:d4:28:8b:52:27:3f:84:29:
                    d3:48:a6:84:e9:1b:93:df:b3:96:a0:1d:ac:01:ec:
                    de:11:df:01:d6:06:d9:ba:54:79:ca:5b:1b:de:65:
                    49:57:55:36:c4:52:7d:81:db:66:d1:c4:61:50:26:
                    d6:6c:ef:b4:4d:fb:19:de:68:ec:fa:7c:44:04:67:
                    68:9e:93:54:30:5c:48:27:f2:30:10:49:e9:1b:1c:
                    1c:d9:ef:b9:40:51:1b:82:3b:ca:ba:c4:31:91:a8:
                    a3:b0:ca:c8:70:46:17:60:99:93:5f:36:e1:85:1f:
                    06:11:3d:f7:51:c2:78:4a:6e:d2:52:c8:4f:da:66:
                    86:13:5b:60:45:f2:76:ee:fe:03:b8:22:69:89:4f:
                    72:cf:a6:24:8f:68:61:6e:3f:b7:6b:fd:a1:b5:26:
                    a7:9c:a3:b2:74:9e:07:2c:ee:ec:44:7a:c9:e3:99:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:CD:AB:92:6C:5A:0A:C0:FA:1B:4D:AE:34:6E:AF:9F:7B:29:6F
            X509v3 Authority Key Identifier:
                keyid:DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:cd:81:18:64:90:87:23:09:c1:92:c9:57:78:b9:2d:24:
         40:c0:b0:ae:8e:92:e2:1a:2d:22:13:53:1e:a7:6d:94:fe:f7:
         c7:67:e0:72:fa:d7:76:d1:e0:23:44:79:98:ef:80:14:a5:b3:
         7b:6c:0c:39:51:62:0a:87:a8:d8:97:c6:b7:03:c4:aa:3c:00:
         9b:14:66:5f:bf:0d:d1:94:41:9a:2e:c0:75:46:ef:e1:a0:5c:
         a1:27:71:c3:9e:5b:ef:13:f6:9b:24:33:58:c4:09:31:24:cf:
         b3:5a:bf:02:ce:cf:4a:8f:1d:9e:71:82:e7:e5:f9:44:f3:28:
         36:64:20:59:b5:80:c5:88:78:7a:30:22:f5:2f:94:17:ec:3d:
         a2:5c:88:85:2e:83:9f:7a:07:9e:b0:e2:26:e6:28:ff:bb:72:
         d5:10:a8:cb:08:08:6b:d8:a3:bd:0c:be:2b:b3:3d:51:23:e1:
         cc:8e:5b:61:84:05:b4:95:bd:1f:5c:b8:83:56:32:c7:ed:1e:
         7b:57:a9:dd:7f:1a:4a:37:d9:81:15:e8:39:06:ae:83:ff:de:
         c7:b7:cc:c8:73:8f:aa:4e:b9:68:65:d9:86:19:16:08:f4:0d:
         1f:86:a6:dd:97:f7:83:72:5c:3d:fc:a1:b9:41:d8:06:e6:66:
         40:b3:7d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:12:23 2025 by rpki-client