Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          xCC9UETjNPjj3scDDm6bBobmc5DolBNcGaCo0gbGWsY=
Subject key identifier:   14:8F:B4:3A:72:A3:BB:D8:3B:76:79:86:7E:7A:F6:98:68:09:D4:ED
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          64
Signing time:             Wed 05 Nov 2025 05:36:52 +0000
Manifest this update:     Wed 05 Nov 2025 05:36:52 +0000
Manifest next update:     Fri 07 Nov 2025 05:36:52 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: 9EfbRzPeCy7LmDF+A885iXLqq1XsaWoATm6vYekMOIg=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: Nov  5 05:36:52 2025 GMT
            Not After : Nov  7 05:36:52 2025 GMT
        Subject: CN=690ae274-a7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:34:e3:c3:a5:e6:d3:e2:b6:29:70:80:cc:
                    d8:50:c6:8a:d3:82:6a:1a:fc:9e:c4:48:74:5d:f1:
                    d0:0d:51:9a:25:51:53:91:e2:c1:e3:9f:a6:ea:e8:
                    6b:9d:f1:dd:d9:c4:a3:b6:f1:1e:7d:66:49:47:6a:
                    b6:70:bc:d5:72:42:88:61:42:22:45:7b:d8:b0:0f:
                    3b:dc:df:71:46:91:2e:6b:1b:1b:8d:be:34:04:03:
                    11:52:c1:53:1e:37:a7:dc:5e:99:b0:54:a9:f0:33:
                    2f:ae:4e:42:8d:0d:a4:f2:61:79:d5:ec:c1:2b:49:
                    ab:fd:bf:9f:e9:41:23:4c:00:dc:77:10:00:47:d8:
                    e1:5d:14:55:21:d7:7f:08:fd:b0:b9:62:1f:a3:82:
                    42:c3:ee:d2:7f:61:98:3a:df:69:52:77:8a:a4:3a:
                    a4:f2:ed:03:51:bc:66:6c:00:2f:26:ad:26:85:73:
                    21:79:ec:7c:60:3f:1f:d6:71:f1:21:78:59:10:46:
                    a1:43:e8:1b:6d:bc:6c:c4:7a:a0:ea:d3:a3:f5:ca:
                    58:7e:3a:b1:d1:a1:12:44:a1:cc:ed:d5:cb:b0:bc:
                    26:38:85:e7:88:e8:e2:88:ae:ff:35:ef:de:b3:83:
                    fd:1a:23:c9:9f:21:8f:57:88:2f:1d:cf:c9:63:8c:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8F:B4:3A:72:A3:BB:D8:3B:76:79:86:7E:7A:F6:98:68:09:D4:ED
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:70:3f:2d:9b:94:5d:17:dc:cd:0b:52:0f:ee:2b:a2:3d:
         6f:39:27:a7:04:eb:22:46:ab:71:fd:be:73:9b:59:6c:99:6b:
         0f:bd:9a:46:ee:c4:ef:0e:ee:c6:92:d0:02:ee:23:7d:c9:91:
         0b:79:67:16:82:46:37:3b:cc:cc:29:c9:d8:12:78:47:e2:54:
         e6:dd:b7:d7:5e:70:62:6b:74:98:65:6f:0e:68:42:eb:15:00:
         26:ad:ea:4d:e8:30:7f:e5:cd:8e:61:b1:4e:1f:43:bd:73:8e:
         51:24:cb:89:5e:53:28:f7:63:9c:49:c3:d3:f6:1b:34:16:09:
         15:a9:c8:d4:15:95:94:86:9b:43:0c:f7:c6:19:6a:8f:fe:1c:
         51:4d:88:b3:e9:7c:a5:45:af:d0:0e:21:37:a0:67:7f:73:11:
         db:c9:a2:cf:91:25:75:ee:c0:f3:78:6f:8d:ef:59:30:d1:8c:
         e8:52:8e:dd:b1:9d:a9:f8:df:45:ec:30:b2:1b:75:05:b4:01:
         dc:04:48:8a:c4:60:b2:21:66:66:7e:75:dc:4e:93:fb:e1:9f:
         40:5a:6a:1b:d8:3f:d2:c6:89:3f:6a:f0:4b:7a:97:d6:c3:c7:
         7e:79:32:93:75:fc:09:27:e5:1d:c5:16:cd:28:92:03:e7:57:
         1b:c6:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:07 2025 by rpki-client