Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File:                     aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier:          abjEEbrdWK8nqhhmj/Ec5s9AVUQnR8SIAgElTjanIYI=
Subject key identifier:   9A:39:AC:64:E5:EB:DE:4F:FE:13:6C:D0:2C:D5:45:78:B6:82:4A:DF
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer:       /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial:       6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number:          6D
Signing time:             Sun 19 Oct 2025 05:05:23 +0000
Manifest this update:     Sun 19 Oct 2025 05:05:22 +0000
Manifest next update:     Tue 21 Oct 2025 05:05:22 +0000
Files and hashes:         1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: eZPhcMyslVrZjSpWxC1SKCfA8WpOedv8Ah7//5y0XfA=)
                          2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
        Validity
            Not Before: Oct 19 05:05:22 2025 GMT
            Not After : Oct 21 05:05:22 2025 GMT
        Subject: CN=68f47193-21b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:09:97:7a:f2:91:b0:cd:bf:e1:d5:ff:33:e3:
                    6a:ae:5c:6c:5c:14:53:33:eb:a3:8a:b4:75:be:f0:
                    d7:be:c1:67:54:d3:63:12:c4:aa:a5:8b:25:72:4a:
                    76:e9:63:10:01:48:c3:d0:c8:6b:1c:ad:9d:2b:ea:
                    01:c0:26:74:a7:2e:bf:8f:32:68:98:22:3b:9a:0e:
                    41:2f:a5:33:12:66:20:d6:12:85:76:df:ca:40:3f:
                    13:69:86:fc:07:f3:3b:95:8b:5b:a6:f3:16:5a:a9:
                    1d:ed:a2:9c:9d:58:f4:2c:03:85:74:95:e7:96:39:
                    30:fa:67:4a:82:35:62:ab:00:4e:43:23:86:07:c3:
                    5b:7a:36:b4:33:7f:de:b5:d9:7e:9a:b0:d2:ec:db:
                    c6:f4:b4:09:b0:6e:3e:bd:e0:fb:d9:71:af:16:89:
                    7a:54:fd:36:a5:b5:53:75:45:8a:bc:ca:94:1c:98:
                    81:1c:c4:b9:d6:4a:80:58:c6:ed:61:71:a1:4e:fe:
                    27:91:4f:40:1f:78:b0:17:6f:2a:bd:9b:cc:d3:5c:
                    61:4d:bb:cc:b7:a1:1f:bf:cc:c0:22:ba:92:93:6f:
                    b6:d3:a5:48:64:40:34:07:3b:41:a9:02:af:50:30:
                    d2:d8:2b:b6:63:b7:ba:56:62:2f:a7:45:57:dd:5a:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:39:AC:64:E5:EB:DE:4F:FE:13:6C:D0:2C:D5:45:78:B6:82:4A:DF
            X509v3 Authority Key Identifier:
                keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:12:ec:60:b6:e7:0f:f8:67:64:37:4f:4f:24:31:c9:17:
         fd:11:ef:47:14:91:bb:2a:8a:ab:47:71:98:64:41:97:33:81:
         4e:82:59:7b:21:04:4b:0e:8b:47:0c:99:6f:80:e5:27:a0:46:
         51:b9:62:57:01:74:e7:91:f7:19:30:9c:25:c6:ea:e4:f6:a9:
         65:e0:c6:c5:48:31:b8:d7:88:47:5e:85:15:20:1c:b8:12:d3:
         bd:f3:38:8c:af:de:1b:00:ee:b7:46:35:97:38:a9:ae:be:c7:
         be:08:0b:40:de:eb:9e:a6:eb:cb:06:38:3d:7e:94:9b:09:8a:
         91:93:07:2e:37:64:1c:19:fd:70:14:b9:09:56:a4:3c:46:44:
         68:f6:85:12:a6:44:5b:98:d4:16:d8:1a:df:65:46:30:9c:6f:
         8c:a6:f9:b6:11:73:ed:ce:05:ff:f3:0d:4e:1b:45:e9:a0:1b:
         72:2e:39:6b:b2:dd:1d:e4:82:2e:d8:57:c9:51:5e:c9:a6:c3:
         5d:8a:79:8c:f6:80:99:e7:9d:1b:1a:24:7f:e0:d3:29:46:b8:
         7a:04:11:91:88:dc:83:9d:7f:4e:4d:99:1b:59:e6:42:ad:f8:
         b3:c4:dd:f6:f4:0e:6b:37:b8:c2:93:e7:e8:f5:c0:96:cb:42:
         b0:0a:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:13 2025 by rpki-client