Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File:                     XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier:          KP4BQb8kvQ18Vm9CNN8JT5PtM6JlJ27XK0RIboTqZ6c=
Subject key identifier:   08:AC:56:90:A5:B1:F2:B0:EB:17:BE:3E:E3:EA:54:3D:EC:84:AF:FB
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer:       /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial:       04EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number:          04E8
Signing time:             Mon 20 Oct 2025 02:52:05 +0000
Manifest this update:     Mon 20 Oct 2025 02:52:04 +0000
Manifest next update:     Wed 22 Oct 2025 02:52:04 +0000
Files and hashes:         1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: +deSW9qhGIbLRWLFDUYCHPAI/mNiz+v3xHQgwAlZ1z8=)
                          2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 02:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
        Validity
            Not Before: Oct 20 02:52:04 2025 GMT
            Not After : Oct 22 02:52:04 2025 GMT
        Subject: CN=68f5a3d4-86db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:f3:2e:98:fa:c8:53:4a:54:74:b8:7f:7a:
                    f7:3c:f3:ac:bc:3c:53:33:8d:f7:8e:9b:8a:95:ed:
                    b3:3b:f6:1d:b9:45:0b:32:1d:e7:e3:16:10:00:dd:
                    13:37:bb:7e:98:48:7e:1b:33:7a:1f:c5:5d:a2:9e:
                    ba:e2:69:ef:5e:c3:74:3f:44:b2:7a:8d:c6:cd:7b:
                    23:ed:93:6e:70:49:0b:72:d4:7f:07:cf:e1:8f:ed:
                    4b:41:96:5d:af:ca:c7:80:4e:eb:5d:b8:57:ba:cf:
                    48:92:bb:8f:03:4a:ee:3f:3a:67:4b:ce:69:60:8a:
                    5e:4a:91:04:2f:86:56:dd:52:0e:c3:34:d6:a2:42:
                    be:80:e5:06:d8:b6:9b:04:04:b8:09:53:c6:cc:7f:
                    46:e9:fe:72:5b:bb:d3:a5:a2:4e:74:e8:6a:9c:c4:
                    23:b6:0a:49:b3:5c:2f:32:36:44:72:96:81:da:0e:
                    7a:00:4d:06:4a:55:17:1e:64:f2:d0:05:9d:ec:a3:
                    90:72:72:4c:bb:a9:01:42:2e:ed:1e:9d:12:de:e5:
                    ca:5d:d6:40:55:97:1a:64:7d:83:d6:af:e9:7b:87:
                    1e:98:d8:30:cd:05:28:ef:4f:03:1d:a1:d1:17:3b:
                    e2:95:91:6e:7f:d2:12:e8:f5:be:65:18:0f:6a:be:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AC:56:90:A5:B1:F2:B0:EB:17:BE:3E:E3:EA:54:3D:EC:84:AF:FB
            X509v3 Authority Key Identifier:
                keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:51:9f:8a:c4:11:ab:71:65:4d:be:85:33:dd:71:3a:1c:40:
         c0:cf:72:e4:28:1c:dc:ae:ab:12:48:2e:50:3e:3a:80:14:ed:
         bb:59:a4:c2:e4:9c:d3:63:ac:18:50:be:78:b8:76:cf:39:e1:
         88:7b:8b:cd:46:f6:ec:5d:b0:4f:80:6e:1d:08:ad:4d:fe:4a:
         43:e4:9b:de:68:62:29:8d:31:31:c5:fb:ad:af:6c:62:b6:b3:
         46:ef:ab:aa:e9:b7:ce:4c:d1:23:04:81:d3:48:44:c8:bf:35:
         9b:ae:82:e7:31:c7:33:6f:2a:12:ba:4c:8a:0a:f9:9e:35:64:
         a3:75:5e:1e:8b:d5:09:1b:43:86:52:b9:09:e6:2d:07:5b:79:
         02:cf:7a:16:90:ef:55:f3:75:38:65:e1:e0:43:14:7f:89:8d:
         9e:4b:cf:dd:f5:37:47:ca:8d:b1:0b:5f:c5:37:d0:1e:61:95:
         29:fc:75:0e:40:40:e0:00:59:a3:46:ff:7c:7f:14:e6:d5:23:
         b6:66:95:9e:e5:5c:c5:fc:f5:cf:6f:31:e7:8f:15:63:2f:45:
         05:d5:a8:a6:95:55:92:af:ec:fd:a6:8f:39:56:56:94:77:e4:
         f7:1b:6b:d7:3f:c4:51:ca:c3:dc:e5:7a:9b:32:de:3f:09:5f:
         4f:c5:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:26 2025 by rpki-client