Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
File:                     a80vareT2tF2SQgQRK-wMtX7SVc.mft (raw, json)
Hash identifier:          kY+eBik8BfT3M4/S4Gy9mgkyvkGJipIPjHr1WJJyXTM=
Subject key identifier:   63:9B:B7:9B:6B:73:71:31:B5:2D:43:6B:B9:83:F8:B1:77:14:41:55
Authority key identifier: 6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
Certificate issuer:       /CN=F36429BBAF/serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
Certificate serial:       0E91
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
Manifest number:          0E8F
Signing time:             Mon 20 Oct 2025 00:59:18 +0000
Manifest this update:     Mon 20 Oct 2025 00:59:18 +0000
Manifest next update:     Wed 22 Oct 2025 00:59:18 +0000
Files and hashes:         1: a80vareT2tF2SQgQRK-wMtX7SVc.crl (hash: B5YZi1NQoGbl1gRffROeicyr/JpS4gm7aGefSvfrjfU=)
                          2: 187EDD9C7AED11E984C8C332F8AEA228.roa (hash: nhY0hDClfKko61UqhvpEoCzSPfAm4A5VUTRq1mCbE5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3729 (0xe91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36429BBAF, serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
        Validity
            Not Before: Oct 20 00:59:18 2025 GMT
            Not After : Oct 22 00:59:18 2025 GMT
        Subject: CN=68f58966-432b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:30:41:ea:72:1c:99:1f:05:c7:e9:64:0c:
                    6c:86:7a:33:5f:8f:60:42:35:37:13:f5:d8:9d:22:
                    c2:19:d4:44:02:73:39:f1:5d:ee:05:4f:34:b8:66:
                    32:58:e4:5b:8f:86:8c:db:16:34:8d:28:5e:89:30:
                    df:a9:16:4b:0a:e8:64:9d:bd:d6:82:9f:31:e5:90:
                    06:6b:ad:d6:f0:f1:77:48:8b:7b:6b:cc:7b:a7:1e:
                    1d:05:98:b5:99:2f:1f:03:fb:6b:db:59:97:d7:1e:
                    a3:7f:02:2d:56:92:3f:c4:26:c9:a4:48:4e:46:f4:
                    00:89:5d:e5:10:04:20:b5:a0:07:dd:ae:19:56:09:
                    2e:78:4d:47:4e:81:62:57:15:7b:1d:f3:5a:27:ca:
                    ef:b6:fe:09:c4:2b:ca:a1:52:ba:2a:f9:a4:c6:d4:
                    56:74:67:eb:9c:0a:71:f8:e6:c4:37:10:27:16:d9:
                    73:16:0f:8d:92:c9:11:0d:95:d4:b9:bd:aa:24:f5:
                    af:b8:b1:d2:18:3e:3d:5d:ba:20:81:97:04:11:82:
                    23:7b:a6:aa:83:db:6c:85:79:36:78:e0:0e:52:0e:
                    0a:85:98:18:16:c8:f5:c5:64:9e:04:b4:d0:82:fd:
                    0a:9f:0f:b5:b6:be:a9:76:07:a7:ff:30:6d:36:ca:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:B7:9B:6B:73:71:31:B5:2D:43:6B:B9:83:F8:B1:77:14:41:55
            X509v3 Authority Key Identifier:
                keyid:6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:77:b3:b5:8e:3f:f3:24:16:d8:6c:d7:c2:37:b3:37:e5:
         4a:e3:7c:98:0e:6c:37:f1:e7:ce:0d:68:4f:b3:40:f4:4e:3a:
         ea:f7:fe:ca:01:41:92:23:4c:a2:a9:f8:c6:1e:74:18:89:8d:
         af:cc:99:85:78:d4:6c:b8:98:14:59:11:cd:06:f4:99:ca:5f:
         6d:57:93:7c:4d:4a:e5:9c:18:ba:1a:35:53:63:d6:39:ca:7e:
         65:09:00:3b:bd:2b:7a:a8:e4:cb:41:f4:d7:c8:ea:56:ea:65:
         82:9b:e8:2c:c8:a8:16:d4:a6:c9:6e:94:88:b8:cc:af:00:b0:
         7d:9e:cb:f5:d3:a3:1a:35:ce:10:b8:b8:30:10:e2:2f:d4:46:
         19:e3:3e:b6:06:32:cf:3c:a5:c6:8d:e2:72:96:bb:14:da:0c:
         9a:7f:45:8e:c4:d7:81:6f:ff:b0:fb:ea:57:7a:40:21:be:c4:
         86:97:45:0f:d0:82:83:b5:a8:ba:28:f0:d3:86:1f:dc:a8:4e:
         e2:6c:1e:f9:cd:5b:a4:31:e3:61:3f:22:23:21:c5:5b:43:5b:
         a6:67:4b:32:b8:f0:56:bc:ae:88:66:62:79:42:f9:33:51:fc:
         06:6e:ff:f9:c9:62:66:93:2b:87:66:9a:64:4a:88:98:60:1e:
         07:29:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:07 2025 by rpki-client