Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
File:                     pfjRvVkiC4dTo3nUoz0jv0IysTY.mft (raw, json)
Hash identifier:          4KnAJphCjUwE4mz/GqM5aBHTfsBmYtgRTO205fYhUUg=
Subject key identifier:   9A:E9:57:7D:43:7A:AB:85:06:91:25:8B:DF:CA:A0:D3:67:6A:C6:4A
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Certificate issuer:       /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial:       067D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
Manifest number:          0679
Signing time:             Mon 20 Oct 2025 02:14:36 +0000
Manifest this update:     Mon 20 Oct 2025 02:14:35 +0000
Manifest next update:     Wed 22 Oct 2025 02:14:35 +0000
Files and hashes:         1: pfjRvVkiC4dTo3nUoz0jv0IysTY.crl (hash: 48Qk9+mQdmqo+Yc7MmHAqyi7uc/q/AxMVYO2Qcn2NYQ=)
                          2: AE758D00D4CD11EB8D9EBF2EF8AEA228.roa (hash: AOBdcxlDhMloECpYuyvumc0EXau1j2QFtzwgu7UYQFA=)
                          3: 59B094CCD4CD11EBB5CE312EF8AEA228.roa (hash: WZXnDXOTSBrcGjPAB+W4tlPrl63sGMKab4xVa7Dl5+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5D1AF, serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
        Validity
            Not Before: Oct 20 02:14:35 2025 GMT
            Not After : Oct 22 02:14:35 2025 GMT
        Subject: CN=68f59b0c-01f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:ce:33:a1:ab:23:19:3d:98:25:f7:47:a5:
                    33:f1:ed:fa:81:8a:cb:c8:07:d2:0e:04:a2:75:6a:
                    fc:33:d6:63:4e:5c:66:f0:d2:23:34:b8:00:a6:b5:
                    46:63:d7:90:5d:8b:af:5e:24:41:44:0a:e2:6d:08:
                    77:5b:49:8d:b5:ab:1e:22:5f:5f:e9:0f:26:82:59:
                    90:99:cc:6d:40:ab:2f:22:5d:bf:ea:70:f2:b0:e2:
                    07:15:12:bb:8c:9a:70:5f:0f:69:4b:47:5a:b3:dd:
                    d1:c1:95:2c:47:95:e9:5a:bd:b6:fd:a4:d5:b9:7c:
                    ac:a4:63:28:24:54:b5:69:be:70:35:a1:dc:27:0a:
                    31:4b:1f:18:1d:06:81:f7:62:63:2e:ef:1e:7c:35:
                    88:6c:67:2e:bb:86:3a:62:2c:55:34:7e:e4:ff:14:
                    80:39:20:a8:47:4c:db:e0:dd:aa:47:3c:03:c7:ba:
                    09:69:49:34:1e:c7:c7:3a:ce:19:1a:55:65:f8:69:
                    1e:1e:a8:25:d7:75:cb:35:a1:d0:3f:07:0e:41:06:
                    62:75:3a:18:e7:22:b7:f6:25:f7:16:86:04:5c:72:
                    45:be:9c:b0:6c:03:f0:9e:83:d6:ba:8a:66:12:82:
                    d5:c8:80:e8:ef:16:20:25:ee:55:dc:25:a7:b8:6c:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E9:57:7D:43:7A:AB:85:06:91:25:8B:DF:CA:A0:D3:67:6A:C6:4A
            X509v3 Authority Key Identifier:
                keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:0d:be:ef:d2:fd:fd:c0:ab:2a:91:fc:f4:f9:8a:92:b3:a1:
         87:82:ee:fe:32:0a:e7:be:1a:1e:4f:e9:c4:7f:4e:93:84:50:
         79:b8:04:d8:aa:30:74:3f:9d:24:41:0f:95:9a:a1:bd:56:fc:
         fa:0c:96:68:09:e3:08:8a:ce:5a:ac:8b:7a:ed:72:a1:c9:77:
         8b:3e:f5:d1:2f:de:02:90:47:cc:9b:ef:77:4b:02:4f:2a:09:
         52:cd:83:dd:39:f0:11:5d:6e:2c:a8:75:1b:d7:a3:9e:3b:23:
         ee:1d:1f:d7:90:c0:be:00:0d:84:75:29:2c:6f:95:c0:1c:06:
         39:03:9c:36:69:88:99:56:e0:6e:6c:56:71:b9:ca:d6:50:94:
         b8:c1:59:e7:cd:a1:d9:05:ea:f2:3f:06:1a:8d:6a:c0:32:79:
         b1:75:16:60:46:cf:12:a3:7b:38:b7:17:9f:12:3d:8e:74:d2:
         79:a1:4e:61:60:5a:14:db:e5:f2:20:35:4a:4f:ce:83:a2:ba:
         a7:a1:d4:d0:45:1a:6a:62:2e:07:56:5c:65:40:3f:d5:05:69:
         0b:ff:2b:18:22:85:cf:68:bd:22:42:69:f9:10:bd:e1:b3:66:
         6f:b3:52:5a:be:85:63:48:65:13:ba:2e:9a:b7:a7:23:06:b3:
         6d:72:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:41 2025 by rpki-client