Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          qna2wH7GY+E/LJVhGfSQyGQbUMF7JllDJqui6Jged+M=
Subject key identifier:   A3:D6:D9:CB:BC:FE:86:62:9F:CC:68:F7:8A:E0:29:52:33:D8:95:50
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       05A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          05A3
Signing time:             Mon 20 Oct 2025 02:37:19 +0000
Manifest this update:     Mon 20 Oct 2025 02:37:18 +0000
Manifest next update:     Wed 22 Oct 2025 02:37:18 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: I/EdyTINAzKXcu+TNyOIX3gzEbU/2mHOD/liUTxsqLI=)
                          2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Oct 20 02:37:18 2025 GMT
            Not After : Oct 22 02:37:18 2025 GMT
        Subject: CN=68f5a05f-ff3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:38:5a:4e:5f:b3:7e:95:7c:e5:c9:ac:47:
                    7a:79:79:c0:fb:94:5f:f0:48:2e:e7:0f:3e:ac:ad:
                    67:27:a8:b0:91:51:9d:2e:75:bb:9e:1d:f6:99:27:
                    09:e2:9d:2f:a0:30:11:a2:10:af:af:ea:37:2b:b6:
                    ef:83:40:a5:6a:31:1f:d2:4b:29:d0:97:b7:50:2d:
                    48:15:9c:f7:8e:37:94:42:6c:dd:8d:10:5d:d5:62:
                    a7:f6:cb:ad:52:d3:76:ff:48:50:7e:9c:0d:b4:a9:
                    f9:04:a3:6e:d0:08:e9:9a:9c:ca:0f:84:67:fe:4f:
                    d3:b5:c8:8e:ec:d2:f9:31:6b:40:cd:0c:ac:31:fa:
                    c9:f5:2c:f0:8b:c1:1a:72:e6:e7:1a:d7:1b:d0:50:
                    03:6b:c8:c2:3b:0b:26:64:6c:c3:87:57:a3:e1:58:
                    04:88:dd:86:70:e1:8c:8b:bc:f0:be:26:0e:99:97:
                    92:5e:99:39:59:37:75:08:6a:da:24:f2:9c:8d:eb:
                    52:17:09:93:5f:a4:01:b7:ce:a3:35:da:b3:7a:25:
                    76:c9:2e:df:a5:6a:97:93:fc:e0:2e:21:6e:7a:0c:
                    60:17:67:c9:e5:fb:86:46:c5:7a:5e:92:c8:ef:4f:
                    c5:9f:25:26:12:1f:29:22:19:7a:84:27:d3:a9:33:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:D9:CB:BC:FE:86:62:9F:CC:68:F7:8A:E0:29:52:33:D8:95:50
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:63:3e:be:83:8d:c8:00:03:34:3c:14:b6:cc:3b:c3:1b:66:
         9e:91:84:d8:aa:9d:56:d0:28:82:66:ec:29:19:df:11:d6:4c:
         28:e2:1d:96:9d:10:f8:4f:c7:e4:d5:60:c0:a5:06:58:1f:5b:
         83:d1:9e:ed:87:42:62:57:7a:0d:01:67:87:0a:df:27:02:19:
         f3:13:52:84:83:80:22:dd:af:00:c1:e6:0d:71:05:65:55:f8:
         dd:f8:21:cd:56:2e:0e:cd:68:77:3b:18:73:73:ff:1b:0e:7d:
         50:36:af:ea:9b:92:ca:5f:6a:2e:22:ef:ce:17:6d:dc:53:1c:
         0d:d4:f4:0e:d8:82:18:a1:91:0a:13:e9:95:c0:b5:0d:38:03:
         0f:73:62:f6:0f:fe:3c:32:5e:c9:d1:d2:8b:e8:af:99:44:42:
         b3:9e:94:86:25:b1:06:2f:19:77:d1:49:cd:a1:fb:df:9b:bd:
         d5:81:ec:5d:8f:74:b2:ff:25:d6:b7:db:42:c6:b8:56:85:b5:
         ff:f5:47:9f:2e:01:63:c9:be:54:67:86:cc:bf:2a:bf:27:bb:
         3e:37:6c:a0:6e:d0:d9:c3:81:c8:e0:90:01:34:2d:01:b5:4c:
         22:7a:09:d4:eb:15:cf:ec:56:3c:2c:e8:1d:53:8c:c2:89:8e:
         f3:92:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:31 2025 by rpki-client