Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.mft (raw, json)
Hash identifier:          i/iteyJ6i9wKYIQBYzQxWaUV/GDG6t2sRiIHXel7Ybw=
Subject key identifier:   91:60:1B:50:D4:1B:70:1E:52:07:04:DF:D5:77:48:7A:37:13:9F:80
Authority key identifier: EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Certificate issuer:       /CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
Certificate serial:       06F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
Manifest number:          06F1
Signing time:             Tue 04 Nov 2025 03:12:22 +0000
Manifest this update:     Tue 04 Nov 2025 03:12:21 +0000
Manifest next update:     Thu 06 Nov 2025 03:12:21 +0000
Files and hashes:         1: 6y_2M0NFlzp0sAkALjaRcdk48DM.crl (hash: abCOices5G9IJrSJhFeNhQWXhGv+zRHkuqYyPjdEc9Y=)
                          2: 3ED2C7FA73DF11F08938C08EDAE4EC9C.roa (hash: iyabqTBm+x48hvA2ztaOaTXns/fPRnTXSFF6KRFDSwY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Validity
            Not Before: Nov  4 03:12:21 2025 GMT
            Not After : Nov  6 03:12:21 2025 GMT
        Subject: CN=69096f16-3342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:63:44:e2:1e:3f:cd:71:8f:62:52:2c:be:d7:
                    6c:a0:34:ad:69:5d:bb:5d:d9:51:e0:e1:b7:91:1c:
                    8d:10:33:77:d6:ab:41:08:51:df:07:62:5d:a0:85:
                    34:01:51:26:92:73:5d:82:47:2b:08:a8:6e:f3:4e:
                    af:97:33:84:af:f3:72:c9:76:1a:7c:27:12:d5:f5:
                    70:3c:bb:20:21:ba:e2:93:d1:39:ea:87:1c:aa:ee:
                    61:72:97:e5:3d:f5:ff:69:18:13:61:8b:a7:22:03:
                    09:dd:9b:2b:35:fd:ba:d9:1e:54:f6:40:24:20:13:
                    9b:91:71:1a:19:bd:5a:c5:2e:bf:46:ef:c4:df:8e:
                    7d:8f:2c:ba:08:95:52:b7:ea:06:9c:3d:4c:1d:a4:
                    ed:b5:22:79:83:a8:a9:b5:9b:5b:06:a8:27:9a:71:
                    e3:44:46:ea:66:4e:4d:8b:9c:50:8e:56:e7:9f:0a:
                    5e:ac:a7:1d:67:d8:46:65:74:ad:fe:68:9d:c3:bc:
                    30:e7:8a:f2:3c:50:12:3e:8e:a5:cd:29:ee:ff:04:
                    34:65:65:97:22:f6:a8:6b:9d:1f:4a:1a:d9:6e:b1:
                    0b:6d:76:5b:ff:7d:df:60:f5:ff:5b:ee:45:98:3e:
                    cb:b0:5f:ed:58:5a:3c:e8:43:64:13:06:3c:e2:e0:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:60:1B:50:D4:1B:70:1E:52:07:04:DF:D5:77:48:7A:37:13:9F:80
            X509v3 Authority Key Identifier:
                keyid:EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:34:e4:83:b9:3f:51:d8:17:7a:80:5f:cc:1e:6a:b1:b8:
         6b:b2:46:52:1c:77:52:3f:9a:55:eb:ec:09:e7:b4:f3:0d:47:
         d8:58:3c:4c:fe:15:ba:f2:d1:89:32:f0:0c:89:11:69:a4:0b:
         96:7c:96:82:a4:4d:e1:7b:87:73:8c:7d:54:14:ed:28:8f:c0:
         08:1d:98:7f:9c:5a:9e:cf:ba:cc:7f:57:82:22:5e:fb:b7:3c:
         a2:e3:68:69:04:31:c4:3a:01:d4:0b:aa:54:6a:93:fc:f4:7d:
         1a:9f:81:4b:3d:e0:89:54:a9:1c:85:8d:80:76:02:6e:9d:9b:
         bb:67:24:5a:61:6f:26:84:b8:8d:a3:bc:14:d1:a5:f0:5c:e6:
         27:81:c0:50:ad:2f:b0:4c:0e:56:3f:1b:bf:5b:2c:ff:11:f0:
         b2:e1:0b:92:41:ad:bf:f7:67:2e:e3:1b:85:0b:38:40:8f:48:
         4f:60:5c:8f:60:24:c0:bb:c0:8c:ba:45:dc:e7:19:12:b6:e8:
         8f:d4:a2:8d:c2:07:91:91:ee:cf:47:fc:76:96:ea:25:5d:6d:
         8b:47:6c:7e:eb:9c:7c:20:c6:9a:06:69:fd:8d:a9:9c:1d:81:
         86:ea:98:e6:1b:ed:f4:17:59:a7:fc:7c:c7:98:d9:51:de:ee:
         8f:de:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:14 2025 by rpki-client