Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
File:                     4qOmjo-ihl0uVH2MskMPqyH8oG0.mft (raw, json)
Hash identifier:          8IzZv5ADO32dOlKUQ9YUQl3/K/ABpRVIFRAdyY8m4IE=
Subject key identifier:   51:5A:49:9F:7B:A6:02:51:62:AD:82:CC:B0:AB:50:CD:53:B4:BB:C9
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Certificate issuer:       /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial:       04EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
Manifest number:          04E5
Signing time:             Mon 20 Oct 2025 02:52:42 +0000
Manifest this update:     Mon 20 Oct 2025 02:52:41 +0000
Manifest next update:     Wed 22 Oct 2025 02:52:41 +0000
Files and hashes:         1: 4qOmjo-ihl0uVH2MskMPqyH8oG0.crl (hash: bSZ7fm71GyMZHX213pyS8MrowJDGN5Z3PjKKO8h4ye4=)
                          2: B063A1E4F70C11EC941F0CB4F1222468.roa (hash: Pp0AH2ECom1pa7n5F8aA5h/FubB3+W9tB91zRCkX5hA=)
                          3: 38150926F61711EC9FF6E8AAF1222468.roa (hash: R4O17UWTwxmFzLEBa28mhDTCBi+yy6jmbDMn8Gh9fK0=)
                          4: C6B22452F70C11ECB35A5DB4F1222468.roa (hash: qE23fzU6w713psdmbvCNENyQme+t86q76CBB2jdDWu0=)
                          5: E8C1348EF70C11ECA5BCDAB4F1222468.roa (hash: sQtWx2Bv/Sqp8d9pEf9Jqmmnu5VfFPqFz45blSrAhD8=)
                          6: 507471B4F61711ECA8BD35ABF1222468.roa (hash: mftcHJVRxHtq4aPHGuWKQ475mDfq8IorWrPcZAJ1yKo=)
                          7: 105F0D40F70D11EC8E5663B5F1222468.roa (hash: mjO2Sp6OVpSiQ7xZGU3orqZpsq+WKN6CkJVcH0QEXeM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
        Validity
            Not Before: Oct 20 02:52:41 2025 GMT
            Not After : Oct 22 02:52:41 2025 GMT
        Subject: CN=68f5a3fa-4361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:fc:46:65:e6:5b:68:9d:0a:6e:cb:b0:77:
                    73:17:3c:0f:1a:6e:52:fa:e6:29:40:4c:6e:43:23:
                    f4:24:58:07:d1:00:81:a5:9f:a1:80:f3:d2:ac:30:
                    b8:64:bc:3b:22:d9:e7:e1:cd:71:d9:25:1d:f1:de:
                    9d:41:0a:1b:39:98:3f:92:96:9b:b8:f6:50:d5:72:
                    9d:4a:4c:d0:9f:11:d1:6f:95:b4:c5:2e:f5:59:76:
                    99:ef:11:61:17:ea:8a:9f:e2:17:71:4c:37:18:54:
                    ce:3c:6a:4c:fa:2c:ea:65:3f:a5:1b:60:57:82:66:
                    1b:92:bb:32:69:57:6a:e4:cb:82:70:42:ab:70:35:
                    87:c1:0e:ea:df:05:02:a0:1e:ff:b9:b3:02:52:ea:
                    9d:b6:36:66:2a:b6:18:92:31:ad:49:16:fc:af:d9:
                    1d:a0:2f:bb:2e:28:dd:1f:e3:cd:64:9b:07:55:11:
                    ea:9f:77:2e:75:de:a4:6a:5c:8a:95:c7:ae:27:d6:
                    b8:0a:40:ae:e8:7a:66:45:96:40:48:ff:35:28:80:
                    d8:1b:5e:0e:6a:8d:e8:19:89:27:da:98:ce:0d:a2:
                    34:0f:90:b0:97:22:a5:ce:14:34:b6:5c:ae:e1:92:
                    a5:3e:6b:52:db:41:f3:7d:b6:30:a6:60:7c:48:42:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:49:9F:7B:A6:02:51:62:AD:82:CC:B0:AB:50:CD:53:B4:BB:C9
            X509v3 Authority Key Identifier:
                keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:2f:f3:c2:d9:9d:47:e2:ab:2d:dd:72:83:d6:47:05:5a:
         20:72:46:28:96:8c:d2:ee:b5:fb:8b:9a:95:0d:e9:17:e3:e4:
         fb:9e:af:36:ae:87:d4:81:10:39:09:57:6b:f6:ea:89:43:1e:
         98:20:ba:84:5e:c4:09:9f:ae:9a:5c:d3:c3:e8:57:84:3d:57:
         ae:4b:4e:93:7a:bd:22:8f:a9:60:5c:ab:94:9c:4a:6a:d3:08:
         f4:3e:aa:d7:64:04:74:3a:d4:3f:a9:40:be:45:04:9d:0b:8a:
         fd:c4:9d:20:15:1d:db:a2:7c:e0:32:e3:51:d4:bd:23:33:5f:
         46:d4:7a:1b:a9:73:e8:da:a3:44:89:56:7c:5b:29:16:a8:1f:
         59:73:3e:31:12:e8:3e:d5:e5:88:e3:a4:30:cb:00:73:30:7d:
         91:62:06:3c:af:80:c9:ee:ed:5f:89:cb:4e:18:c7:b9:33:94:
         08:12:e5:76:a4:18:ee:f8:df:d4:11:86:ce:30:ef:7b:7a:2a:
         51:d9:bb:73:17:47:a1:b2:66:5f:7c:9d:02:bd:d7:40:a3:a4:
         c4:95:96:34:87:c9:c7:16:c8:af:ed:14:a9:37:da:91:9f:2f:
         ee:39:04:82:c9:4c:64:96:df:9d:b5:b5:27:42:20:c5:c0:99:
         ee:be:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:49 2025 by rpki-client