Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          aoMCRQ9JaGEysf9cFwnwfbJyCIhYo5MtsoGhGAFXxBU=
Subject key identifier:   78:CD:55:D7:1F:26:E1:A9:B3:56:3A:B5:AD:2C:65:90:DC:D1:58:6B
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       0807
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          0805
Signing time:             Mon 20 Oct 2025 01:48:58 +0000
Manifest this update:     Mon 20 Oct 2025 01:48:57 +0000
Manifest next update:     Wed 22 Oct 2025 01:48:57 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: VtKbrk2jdu4pWTbNuNQNLLY6ZUXFJ0mGSlnPB1S2K58=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
        Validity
            Not Before: Oct 20 01:48:57 2025 GMT
            Not After : Oct 22 01:48:57 2025 GMT
        Subject: CN=68f5950a-9370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:a5:03:51:73:38:99:6d:1d:95:36:58:21:
                    a8:40:23:d5:42:90:5a:54:e3:ae:24:a2:c1:45:fc:
                    10:74:6d:0e:25:37:40:75:f9:87:01:94:01:9d:5c:
                    a5:ed:82:b5:8d:f1:a5:db:62:89:54:13:06:29:27:
                    e3:2b:f9:92:be:8d:53:ac:7c:5a:24:69:f6:43:b5:
                    bb:d8:ac:9d:8d:b3:8e:50:e9:6e:8e:a8:2d:d4:45:
                    27:cb:e9:6b:19:08:34:ec:f8:7a:71:90:35:57:e4:
                    ea:5b:54:24:03:3d:4b:d0:b1:53:c3:6f:6c:e0:e5:
                    88:62:4f:33:5c:c4:ca:86:ea:07:e6:86:83:f1:87:
                    1c:db:00:b8:93:b1:20:12:e8:9b:a5:a0:41:f6:a1:
                    2d:c0:17:49:eb:00:1b:d4:f5:f4:c1:af:57:c6:30:
                    76:8d:bf:26:87:17:d9:a8:ff:12:4b:9f:84:aa:45:
                    6f:8e:02:74:43:8c:28:53:6f:09:22:8d:ba:1a:9e:
                    f8:26:34:30:ed:a4:0b:4f:85:7e:86:a2:8b:75:e3:
                    49:de:3f:61:44:8a:54:9c:52:fa:ae:9b:4d:ac:bf:
                    b0:2a:c7:86:2a:d4:ff:6f:38:ce:58:c0:42:c3:b5:
                    d4:e0:a1:7a:70:b6:0b:85:2a:da:a6:82:ff:57:fa:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CD:55:D7:1F:26:E1:A9:B3:56:3A:B5:AD:2C:65:90:DC:D1:58:6B
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:85:d0:63:3b:f2:8b:8e:1a:67:78:7a:fa:f4:b8:f6:1d:be:
         a7:6e:e8:01:92:79:27:07:84:a5:68:d1:e2:8d:2f:80:df:b0:
         b8:3d:dd:2a:df:92:95:4d:65:8e:03:26:4f:b4:f0:c0:72:86:
         a0:31:70:8c:f8:fc:57:85:84:b4:37:b8:0c:fa:e7:f0:78:64:
         3c:9e:67:02:35:16:f4:c9:5d:ba:ed:6a:51:ef:cd:4c:6c:6d:
         98:0a:b2:73:45:6a:93:ec:73:8c:5b:96:3d:cd:55:8b:13:fa:
         53:8e:a2:82:89:a3:15:25:90:5f:b5:9d:c1:dd:0b:e4:61:07:
         9e:09:ee:00:84:37:b6:3f:28:bc:44:45:44:10:69:8d:10:9c:
         39:e3:6c:98:55:35:00:f2:d1:44:59:6c:cb:8a:b6:db:80:ce:
         79:53:4c:1d:5b:9d:03:be:ed:63:b5:44:42:77:cd:6a:97:4a:
         d1:3d:fb:f4:ec:a1:3a:b2:68:fd:06:54:78:6c:ab:83:6e:4d:
         c0:76:c4:51:16:10:e0:aa:d5:dc:f8:05:f3:57:9f:60:bb:88:
         b9:ba:f6:c7:17:c1:9a:02:52:97:b8:22:97:a5:08:82:5e:25:
         22:db:67:74:cf:b7:8e:38:37:37:02:f8:9f:13:8e:b2:89:86:
         26:38:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:54 2025 by rpki-client