Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
File:                     Ho4GD8DqacvW-tSkvG7THSnI5Go.mft (raw, json)
Hash identifier:          VCp/Zzzvw3yLkJLuOyVD/ErUFW9HAihQBiYHLD4ewsc=
Subject key identifier:   01:30:67:86:6A:81:2C:0F:8D:0F:0A:BF:94:FB:6B:9C:F6:18:CA:ED
Authority key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Certificate issuer:       /CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Certificate serial:       0510
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
Manifest number:          050F
Signing time:             Mon 20 Oct 2025 02:46:44 +0000
Manifest this update:     Mon 20 Oct 2025 02:46:43 +0000
Manifest next update:     Wed 22 Oct 2025 02:46:43 +0000
Files and hashes:         1: Ho4GD8DqacvW-tSkvG7THSnI5Go.crl (hash: KJCjk7EcqgnhFtMbrHOTuCgMvQiNkqTR3RbAnJQ9x7Q=)
                          2: 5C02D460D03F11EC9A4EAA89F1222468.roa (hash: F/9p11nL0wbGpBdREAn2qkEHpPq+G048kxKZo17dwn4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D435AF, serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
        Validity
            Not Before: Oct 20 02:46:43 2025 GMT
            Not After : Oct 22 02:46:43 2025 GMT
        Subject: CN=68f5a294-daaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:62:0d:a5:8a:30:a5:1f:80:7d:5a:a2:a0:
                    48:ac:4c:93:6b:a6:ae:48:d9:6f:20:ae:83:96:24:
                    2b:72:79:27:69:93:63:f3:d7:5b:57:e3:c7:9a:a8:
                    95:80:88:2f:5c:28:33:91:8b:09:de:88:cd:24:43:
                    1c:ac:77:83:0e:e8:0a:c4:44:d7:19:37:c1:2f:4f:
                    41:c2:94:ea:41:1c:a1:49:7b:b6:2b:be:16:3d:78:
                    6a:ed:a5:b5:66:ea:4c:64:e0:27:2e:05:4e:81:e9:
                    e4:10:9d:24:de:b7:e8:c8:43:fa:06:f6:0f:5c:f4:
                    ef:61:ca:c7:20:f1:eb:25:06:75:d2:5a:d1:56:d3:
                    01:ff:23:86:11:6b:ec:86:15:d0:8e:d4:3b:1a:7e:
                    83:26:00:c0:8b:8a:22:48:6f:64:81:db:68:72:06:
                    4d:0f:d8:d9:58:9e:97:a4:3f:96:1b:6d:ca:d5:7c:
                    e5:c0:80:cf:2c:a5:78:60:69:6b:6b:cf:f5:43:a1:
                    15:f5:16:d3:72:c2:ea:15:f1:4b:c3:1c:7d:ad:52:
                    fb:44:7c:f4:b8:29:71:13:54:76:b5:25:a7:1c:33:
                    23:9b:2d:27:00:06:3d:42:25:cf:92:4b:29:fc:b8:
                    95:4b:fb:ef:d1:7e:78:d8:4f:c8:24:d8:3f:5d:90:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:30:67:86:6A:81:2C:0F:8D:0F:0A:BF:94:FB:6B:9C:F6:18:CA:ED
            X509v3 Authority Key Identifier:
                keyid:1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:a2:6e:76:48:ce:83:fa:35:75:22:41:65:43:c7:4e:cb:
         37:24:67:db:e6:7a:f5:3d:d9:50:16:bb:1e:a7:b2:33:29:27:
         2d:33:4f:f0:d6:28:54:ed:47:f0:18:71:20:2c:bb:53:d3:fd:
         5e:fa:af:f0:b7:21:46:20:cf:bc:4e:b0:63:48:20:79:ba:39:
         a4:cd:28:bb:1d:13:94:0a:e2:ff:74:52:41:9b:02:82:20:f6:
         a9:9a:a5:ef:26:45:84:2e:a3:c3:53:56:af:77:5c:e6:e3:b9:
         98:3b:f3:54:a8:14:93:47:fb:fd:c9:e0:07:5b:02:9b:a9:20:
         7b:a2:d6:50:16:e8:af:00:bc:70:1a:7e:62:53:1a:ef:9a:1a:
         95:d2:93:a0:64:36:74:98:4b:0d:4b:11:e9:67:0a:e8:7b:a8:
         41:54:2e:1b:e2:0b:42:31:3b:4f:85:d0:aa:f0:43:d3:dc:ef:
         74:6f:e7:fb:e5:96:89:7a:b4:6f:35:e2:05:d1:30:7e:a0:53:
         ed:81:c5:f7:8d:b3:2a:79:3a:34:fe:cd:d4:18:d4:3c:b0:38:
         23:57:7f:5e:81:5d:52:63:bc:b9:23:b5:c2:13:2d:c2:f1:6a:
         dd:bb:bb:72:2b:e3:df:f7:be:7b:0c:3a:6a:47:b0:85:61:c2:
         dc:64:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:19 2025 by rpki-client