Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
File:                     FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft (raw, json)
Hash identifier:          1jwfqPXA7fDi1cOGZSWHrj4pGSLm6Rp2UUDiYp0/kr8=
Subject key identifier:   AE:C5:4E:F6:E5:15:74:DA:F7:71:19:E0:34:A7:92:36:ED:04:F4:3F
Authority key identifier: 14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
Certificate issuer:       /CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Certificate serial:       05A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
Manifest number:          05A6
Signing time:             Mon 20 Oct 2025 02:36:44 +0000
Manifest this update:     Mon 20 Oct 2025 02:36:43 +0000
Manifest next update:     Wed 22 Oct 2025 02:36:43 +0000
Files and hashes:         1: FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl (hash: aX1UDSAGQQtoh2xKzqVE4e/MxidstQFdZoocYeXCWoc=)
                          2: F737A0385C1C11ECB7F224705A40D577.roa (hash: 18NMLFQs/eN8MBDmoRWcN8d+TjVQtf8Ttvo8aeXvWZ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1447 (0x5a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660137AF, serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
        Validity
            Not Before: Oct 20 02:36:43 2025 GMT
            Not After : Oct 22 02:36:43 2025 GMT
        Subject: CN=68f5a03c-9213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:6a:f3:34:2e:5e:81:73:bd:c2:7a:2d:94:
                    ae:76:7d:61:e0:e1:5d:97:17:c6:0a:99:9a:6e:e2:
                    69:fd:39:5d:f9:b0:06:9e:26:e8:87:fd:0d:40:7e:
                    c9:8a:b4:2f:56:be:1f:95:94:14:c4:5f:2a:ee:b9:
                    29:af:c1:f2:f2:d4:4f:63:33:af:68:f0:f4:3e:5a:
                    b6:c4:11:b7:22:49:4e:cf:7c:61:d7:60:74:ad:89:
                    4e:6d:03:ad:85:58:87:34:57:2f:cb:94:eb:bb:3a:
                    7c:03:62:5f:79:3a:a7:1c:b3:db:a7:2b:d3:c5:0f:
                    81:94:ad:e0:5b:33:e6:fc:6b:15:b5:d2:d3:c6:fa:
                    86:80:2e:a1:7a:35:2f:19:13:5a:8e:d0:fd:be:c1:
                    69:a2:5f:cd:24:3b:e8:06:a7:ae:f6:f6:95:63:79:
                    e7:a7:0a:da:66:0c:6d:d3:02:65:6f:eb:22:9e:1e:
                    0c:bb:ab:e8:e4:07:9e:93:87:3e:60:c8:fd:91:e3:
                    9c:9c:37:6d:24:bf:c8:73:a4:82:f1:67:1a:79:22:
                    f5:5f:45:8d:64:a9:58:40:be:06:5f:97:73:0d:88:
                    37:0c:3e:f1:24:a7:e7:c9:95:cc:a0:5c:1e:71:ba:
                    0b:8e:21:db:2d:7b:aa:b4:cc:17:8f:d1:f6:fa:14:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:4E:F6:E5:15:74:DA:F7:71:19:E0:34:A7:92:36:ED:04:F4:3F
            X509v3 Authority Key Identifier:
                keyid:14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:00:38:19:a6:e5:5e:08:88:ac:8a:89:d9:bf:61:0a:d0:50:
         92:2f:f1:6a:5a:56:a2:a1:00:21:51:eb:06:fa:7c:0e:bd:f1:
         b0:23:b1:9f:ef:28:a1:53:2d:ca:a5:72:17:58:2e:dc:72:62:
         24:7b:f4:af:22:02:87:14:a2:f7:3d:7c:a5:16:fd:a0:6d:be:
         16:ba:fe:33:46:a2:45:3a:03:a8:93:7e:2e:6b:cd:0e:70:ae:
         10:d0:e7:19:62:4c:cf:64:ea:e6:d4:46:5e:a3:2e:7d:40:1f:
         6c:59:19:fd:65:ab:d2:0c:4b:b2:32:40:d9:a2:06:25:6a:60:
         45:13:07:f5:00:bf:58:b5:4b:c2:17:e8:3a:f5:d3:4c:e3:de:
         df:4a:ae:0c:2d:5d:3c:af:5d:37:8e:62:9a:61:27:e3:d8:31:
         eb:8c:f4:ef:96:47:d4:bc:a2:7d:8c:8f:9f:70:a2:df:c2:a8:
         58:ae:7e:54:5f:43:55:79:81:96:af:d5:54:f3:92:b6:50:4f:
         77:15:4d:5a:16:67:f6:18:48:01:c5:cd:16:d2:3d:9b:3a:7f:
         ba:4c:ae:b1:b3:c9:65:d1:38:d3:4e:e6:b5:69:20:6c:7d:18:
         cc:dc:b3:c9:83:22:93:07:ae:2c:b1:81:06:f3:81:e3:a5:64:
         33:68:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:17:55 2025 by rpki-client