Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
File:                     CNLFTntRy8c0NN0AYFFFEi8ay2c.mft (raw, json)
Hash identifier:          gMuNZhmVDnjBQ/aagCI1JnJA9Uc3nu/7wInDx4REE7g=
Subject key identifier:   D4:96:BA:8F:C4:C4:91:DA:F4:D1:EB:AC:94:57:BD:45:8B:01:8A:47
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Certificate issuer:       /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial:       09C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
Manifest number:          09C7
Signing time:             Tue 21 Oct 2025 01:16:51 +0000
Manifest this update:     Tue 21 Oct 2025 01:16:51 +0000
Manifest next update:     Thu 23 Oct 2025 01:16:51 +0000
Files and hashes:         1: CNLFTntRy8c0NN0AYFFFEi8ay2c.crl (hash: SLT95jX5ZiowCm/bg0tM3hd47ZHJk5Z8RV/tSHRkGPc=)
                          2: 6F1DB8E692A611EEAD363E72D25BE465.roa (hash: U9BUtJsAMRe8LhMXpRX7x5DD1wtXY7iOI00OaJrVYBU=)
                          3: B785A0A892A611EEAC80BD72D25BE465.roa (hash: 0EcQiKXcB6upVmjNjOVseGG+e+e/Qe8GkvIuWAlYYX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Oct 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505 (0x9c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
        Validity
            Not Before: Oct 21 01:16:51 2025 GMT
            Not After : Oct 23 01:16:51 2025 GMT
        Subject: CN=68f6df03-9328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:d5:f2:4e:6e:41:07:60:ef:49:b3:48:17:
                    f3:f5:d2:d2:44:0d:d7:6d:74:3f:cf:29:f9:c0:c7:
                    aa:ee:46:5a:6f:fc:ed:95:27:02:8e:dd:16:0b:24:
                    d0:86:e3:6b:e6:79:45:bf:cf:35:d3:5b:05:cc:f5:
                    cc:74:0e:d6:16:b8:0f:4e:61:b3:68:7a:f7:22:cf:
                    9c:30:0a:c9:58:1a:85:82:60:42:f7:94:cb:ee:8b:
                    43:e4:0a:f8:09:46:28:b2:bf:36:29:77:b7:51:03:
                    94:7b:82:6e:ca:22:30:1c:93:bd:04:e9:86:cd:ea:
                    fb:35:92:be:34:1c:1a:9a:2f:7c:a1:72:a0:8f:82:
                    b7:f5:a3:37:3a:68:55:d8:28:a6:60:2f:95:49:af:
                    7d:fa:27:bb:81:de:54:f9:0a:9d:8e:5c:d1:34:71:
                    56:10:70:d2:f1:1e:f1:46:07:88:f1:ab:db:bf:06:
                    4c:e7:b8:62:87:40:da:10:bd:7c:58:1b:75:85:80:
                    57:35:53:b7:35:fc:b0:b3:19:29:93:db:e6:b5:65:
                    78:19:a8:94:2a:43:6b:77:c0:19:58:fc:e9:65:f3:
                    33:a1:77:2a:55:56:ad:2c:60:01:94:4e:56:7a:39:
                    4c:d4:7c:6f:a7:ee:72:17:39:11:20:48:26:81:0f:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:BA:8F:C4:C4:91:DA:F4:D1:EB:AC:94:57:BD:45:8B:01:8A:47
            X509v3 Authority Key Identifier:
                keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:28:e1:c8:48:ff:db:f3:c8:b8:90:66:4b:5d:7f:ae:c5:
         84:09:d9:ee:37:68:8a:d2:ca:be:c0:35:39:00:d0:ac:74:fa:
         7b:5e:7c:12:e7:49:33:93:7b:a7:8a:47:47:e9:15:50:41:44:
         d7:b4:17:ed:78:e8:6b:cb:8b:78:69:78:34:7d:3e:f3:84:63:
         ee:fd:6b:27:3d:11:ce:da:bb:58:26:fc:53:50:9a:77:e3:9c:
         b8:84:c5:53:4c:cc:b9:b2:eb:0b:c7:b5:69:76:a2:6c:f9:74:
         e9:64:81:3e:cf:43:6c:bf:80:f5:17:4a:d9:16:b1:0a:03:db:
         e2:c3:1c:d0:df:fd:32:84:0e:ec:af:d9:1c:87:49:92:13:75:
         31:e7:28:23:27:cd:68:99:32:1c:69:e0:24:9e:b8:3e:43:a5:
         df:ef:35:9e:24:c2:40:87:07:d7:33:e9:36:7f:bd:9b:bb:d7:
         9b:bc:6b:b2:66:e8:26:8e:fb:f4:7a:af:0e:d2:b3:7a:1d:51:
         17:4d:38:55:c6:4a:f4:ff:3c:87:7f:66:de:ea:a6:db:a9:c1:
         fd:da:9a:b3:90:ac:6b:ca:fe:39:b3:39:75:08:84:3f:83:cf:
         40:cb:b7:54:b2:24:02:11:91:b4:49:64:e3:c2:17:ad:b5:76:
         9f:fe:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:26:19 2025 by rpki-client