Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          bsbFi84NCv33m0jdOCVLJtBbHomCvZuKlI1ecJDIet0=
Subject key identifier:   EF:88:71:2E:DE:DF:21:35:93:30:8C:B3:F7:D5:8A:BA:2F:11:C6:DA
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       03B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          03AE
Signing time:             Wed 05 Nov 2025 03:39:01 +0000
Manifest this update:     Wed 05 Nov 2025 03:39:00 +0000
Manifest next update:     Fri 07 Nov 2025 03:39:00 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: lVRBc8r5Im3oVJM9g09BPy2fstcJKJvA0aQbbgep4Co=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Nov  5 03:39:00 2025 GMT
            Not After : Nov  7 03:39:00 2025 GMT
        Subject: CN=690ac6d5-b7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ad:b8:e1:9f:fa:3b:f3:6b:7f:8c:01:be:2e:
                    1c:42:9e:93:4b:a1:63:4f:a9:27:f7:52:2c:cb:4d:
                    e6:28:a7:d6:6f:60:c5:0d:70:63:b6:46:ad:52:52:
                    7c:03:a1:0a:32:27:37:29:d3:2a:de:dc:27:98:99:
                    6e:09:d6:6a:dd:8a:fa:f5:79:19:14:77:db:84:8e:
                    b6:c5:95:65:dc:5f:e8:d5:d0:d1:08:c1:81:29:3d:
                    60:0c:f4:27:13:20:ab:4c:4c:76:3d:c3:a6:c0:f5:
                    f6:94:2e:ae:1f:80:4d:3f:ad:21:2f:f5:47:05:96:
                    a1:dc:ac:7d:a7:2b:5e:38:cc:c8:1d:8c:99:5f:f1:
                    81:c9:60:53:c0:1f:5f:3d:db:f6:5e:6f:2f:23:cd:
                    63:6e:e0:4c:57:ec:50:1e:6f:d0:70:c6:95:39:18:
                    20:e1:61:bd:8b:23:f1:ff:d3:fc:8f:a9:8b:9a:05:
                    da:41:80:e3:83:61:cc:e4:36:c4:49:af:aa:79:23:
                    0e:22:09:e2:c4:ea:aa:3e:2f:a4:6a:9a:5c:dd:4d:
                    28:f4:4a:82:a0:76:ab:34:84:9c:c3:0c:80:d4:0c:
                    92:05:1c:4d:9c:59:89:aa:46:69:3d:e7:07:7b:af:
                    68:63:0d:f3:27:6f:60:7c:d8:75:de:ae:87:fc:64:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:71:2E:DE:DF:21:35:93:30:8C:B3:F7:D5:8A:BA:2F:11:C6:DA
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a5:c7:46:42:60:ae:0f:44:4c:50:97:66:ba:93:ac:71:8e:
         4a:ee:65:d0:f7:79:84:cb:a1:f2:66:86:ba:d6:47:2b:eb:ac:
         ce:e3:c4:a9:86:08:04:19:5a:43:c8:b8:08:1d:c7:cb:d3:b1:
         2e:ac:99:5d:ca:49:3f:f5:a6:14:41:e1:63:71:c9:0e:cc:1d:
         c4:88:3f:27:bf:85:11:08:ac:59:64:ad:61:c6:a1:e6:4d:5d:
         23:27:65:97:5f:53:35:3f:c2:9a:f8:db:02:1a:9c:f9:b6:73:
         c6:22:4e:9b:22:70:ae:65:40:41:26:54:13:cc:cf:fb:15:b9:
         f7:71:ea:3e:32:80:35:21:a8:71:3e:0c:15:b3:2a:6a:19:20:
         7b:4a:84:2e:a8:c6:02:cf:83:bd:8b:fb:b9:f8:a1:f6:f0:26:
         d5:8b:34:22:e4:14:47:b0:c6:10:96:93:91:03:4e:c5:4d:50:
         a6:e6:f3:71:fc:59:02:23:94:62:df:fc:ea:15:10:b7:fb:ea:
         8b:59:cd:58:7e:b5:f2:1d:81:34:78:30:2f:61:e9:b5:d3:12:
         a4:4f:e1:5f:9f:cb:b6:7e:b4:94:0b:10:95:60:ab:2c:05:fe:
         35:f4:1f:a4:09:ad:5f:7e:d0:b0:67:bf:bf:f0:ad:5b:1c:41:
         35:9d:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:38 2025 by rpki-client