Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File:                     PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier:          yP8UaSmiwNzjD3uJcUcO9/JIiNDfZaUNM1FVum0EF3Y=
Subject key identifier:   62:5E:F2:E0:6D:EE:B0:D6:CC:20:69:E7:35:ED:08:DA:F3:CD:55:E5
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       0507
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number:          0504
Signing time:             Mon 20 Oct 2025 02:48:22 +0000
Manifest this update:     Mon 20 Oct 2025 02:48:22 +0000
Manifest next update:     Wed 22 Oct 2025 02:48:22 +0000
Files and hashes:         1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: pF+R5DH2oSUHqfC3xHdvVvszAYJUPZxSAn2rHEc/PLI=)
                          2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: Oct 20 02:48:22 2025 GMT
            Not After : Oct 22 02:48:22 2025 GMT
        Subject: CN=68f5a2f6-c9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:f5:20:dc:7c:1b:2a:0a:d7:c2:03:82:44:
                    92:6e:c7:92:6c:f1:d6:f1:c5:c4:30:0b:2b:57:83:
                    05:1e:61:db:f3:6a:88:a7:49:b9:1a:66:97:c9:80:
                    d6:d1:d6:76:95:1b:0f:4f:3e:5b:29:4d:e0:69:a4:
                    86:09:49:39:fa:66:b6:b3:1d:c5:b2:8d:f5:1c:2c:
                    f9:44:81:e7:a7:39:04:57:b9:ed:ec:20:25:4c:92:
                    d4:04:53:b2:53:b3:a8:a4:66:10:15:28:80:e9:bd:
                    c4:c9:36:10:fe:b8:18:e9:56:70:82:56:8b:aa:1e:
                    e1:29:88:eb:7e:58:90:ef:bf:82:51:86:4d:52:5d:
                    04:a2:57:69:32:93:b4:38:23:37:53:d9:60:6d:c0:
                    21:6a:6e:46:b5:c7:92:6e:a9:9e:fd:a1:3d:5a:f8:
                    ae:f3:c3:2f:b5:16:50:45:e0:18:ad:1e:e7:eb:bd:
                    d5:0b:cb:81:fe:b1:7f:e8:3a:16:17:06:0c:5a:65:
                    9b:22:7d:60:c0:7d:2b:20:06:e5:b0:52:ea:1c:e6:
                    84:d8:8d:02:bc:5a:53:ab:25:f4:e8:51:b5:e7:62:
                    cb:af:6e:1f:0d:0a:e6:df:30:3a:b2:5b:a2:de:de:
                    06:62:07:65:59:f1:ff:50:3d:ad:11:34:c4:69:b9:
                    12:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5E:F2:E0:6D:EE:B0:D6:CC:20:69:E7:35:ED:08:DA:F3:CD:55:E5
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:22:76:9a:78:c6:ec:fc:0b:a7:84:42:d6:cb:22:24:c1:
         1a:a5:4e:95:3b:e1:04:81:c3:5f:df:09:39:18:3d:1b:6b:ec:
         1c:49:5c:88:d3:16:ec:0d:d0:c8:d1:e1:00:10:f0:c7:06:f3:
         1c:0f:d1:cf:a8:35:a7:1f:16:7d:3a:bb:36:c9:94:d1:23:f1:
         36:20:1e:4a:22:26:76:0b:c7:ad:a2:97:d3:67:1f:cc:22:5e:
         bc:e2:ea:2b:03:69:75:22:3b:c8:ee:c6:df:53:1e:d5:0a:28:
         71:73:20:bb:c8:3a:53:a8:4c:a4:87:5d:13:b1:75:1a:ef:ce:
         23:69:08:62:fc:40:45:bd:32:c0:8e:70:f9:be:f1:c8:03:c8:
         57:2f:76:12:27:05:63:b9:37:9e:3d:84:83:d8:12:c3:38:8f:
         4e:82:fe:7b:ba:8d:05:52:27:33:99:a6:2b:78:1f:19:2f:12:
         c6:58:a7:c8:f0:2b:02:15:3d:46:97:24:1f:6b:fc:2e:7a:a1:
         ad:66:f6:83:d5:2d:58:47:7d:70:20:ea:ff:3d:79:e9:8c:e1:
         08:67:50:e3:a2:bf:27:7f:a4:29:67:20:49:46:36:73:7a:2a:
         aa:4a:69:60:36:27:d9:d6:53:47:56:db:56:8b:15:82:92:11:
         10:99:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:42 2025 by rpki-client