Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          vnWAlm89+y6eVuL/idLdbNeRFtlxFZkYpWBatRPOfSA=
Subject key identifier:   7B:28:B9:FE:30:9E:30:73:D2:A7:7C:8E:1F:71:BC:AC:17:16:E8:6A
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       04EB
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          04E8
Signing time:             Mon 20 Oct 2025 02:52:17 +0000
Manifest this update:     Mon 20 Oct 2025 02:52:16 +0000
Manifest next update:     Wed 22 Oct 2025 02:52:16 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: RBgWmsvF0H5GMbW3BHDR3izgp4Gx2cfG6vt7xKPFfeU=)
                          2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=)
                          3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=)
                          4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Oct 20 02:52:16 2025 GMT
            Not After : Oct 22 02:52:16 2025 GMT
        Subject: CN=68f5a3e1-baad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:2d:a5:05:6a:7f:e2:ec:e2:b6:91:84:cd:
                    cb:bc:0e:ad:9b:3b:70:4e:55:ba:34:a3:e2:b5:24:
                    ad:85:ff:b1:84:95:67:b4:54:8a:89:25:56:89:37:
                    82:46:20:5f:fa:0e:75:33:48:6c:f1:74:86:1a:9c:
                    b2:8e:d8:31:b2:e8:d0:39:b0:65:af:28:c1:2b:14:
                    bf:a8:49:76:6b:d2:f7:97:e3:d4:4f:e9:49:ea:1d:
                    02:ad:4c:7f:de:6e:86:14:c2:67:21:43:46:55:0c:
                    14:e1:98:dd:77:e2:28:6b:dd:8a:ba:bb:e8:a7:46:
                    42:52:b1:e0:02:1e:ff:99:c2:39:40:c1:7c:cb:f3:
                    38:ed:80:88:a7:fe:36:da:d5:8a:43:31:fb:a9:6c:
                    00:d0:3d:49:60:d4:9a:76:10:44:68:4d:9e:6d:ad:
                    9b:8f:94:9c:28:de:ae:db:03:f3:fa:14:2c:83:16:
                    3f:0b:28:1a:61:1f:7e:4a:d8:cb:a1:65:e9:b5:73:
                    32:b5:b0:aa:a2:1c:6c:f5:be:ad:61:4a:46:e6:23:
                    da:b4:c2:64:22:8c:7a:97:2c:29:ba:71:c8:50:c8:
                    10:45:df:bf:ea:bd:de:45:46:e6:20:40:81:bf:43:
                    1e:58:81:35:92:64:91:54:55:b2:ee:5b:fc:3d:59:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:28:B9:FE:30:9E:30:73:D2:A7:7C:8E:1F:71:BC:AC:17:16:E8:6A
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4e:43:80:32:54:38:fa:0f:3d:86:e4:18:03:bc:20:4d:6b:
         2c:9d:d0:b6:e3:97:44:84:4f:5c:de:17:03:2b:ba:06:f9:52:
         a7:4f:72:f0:f1:57:6f:05:ec:a8:df:4d:89:80:60:40:56:f3:
         cf:7a:a5:ae:2b:68:c9:c0:f9:f7:87:b1:2f:ea:17:75:46:82:
         49:74:80:c4:bf:3b:8b:31:10:b4:bd:e6:02:27:76:bc:1a:78:
         41:7a:9d:0c:63:e9:a3:e3:6d:cb:90:5b:ac:be:f1:18:40:4f:
         8e:64:79:e0:58:70:a3:ee:6a:d2:91:29:2c:96:cb:9d:98:5a:
         36:6d:33:ad:7b:02:8b:02:9e:e2:61:45:44:43:d5:bb:bc:f3:
         6e:13:1d:12:59:82:4f:35:c5:a4:7e:1f:fe:bf:37:27:0e:c8:
         cd:83:d3:48:d3:80:5a:e3:a9:af:ab:b9:d7:19:f2:aa:18:54:
         71:19:79:ea:43:1b:e9:3b:8b:76:eb:0a:01:a5:4a:39:a2:87:
         bd:4a:6f:a7:f4:c6:51:83:43:db:df:90:a4:26:46:7e:aa:e7:
         95:3f:bf:61:01:b2:75:f7:5c:d1:97:91:4b:8b:2a:84:dd:6e:
         75:7f:58:d9:6d:0f:3e:77:25:4b:d8:10:6c:bf:1a:5d:6b:1a:
         21:0d:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:43 2025 by rpki-client