Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
File:                     qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft (raw, json)
Hash identifier:          rnUap4ZC5GfPywYUcHIU8WNOEJfs0R4R80dnuZPxn1M=
Subject key identifier:   50:F4:22:84:BE:E0:8E:52:18:68:99:2D:BF:BF:45:1B:41:0E:05:6F
Authority key identifier: AA:C5:5D:12:34:D3:B7:F6:EA:76:38:18:40:92:11:72:39:91:72:62
Certificate issuer:       /CN=F367E4D9AF/serialNumber=AAC55D1234D3B7F6EA7638184092117239917262
Certificate serial:       027F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
Manifest number:          027E
Signing time:             Mon 20 Oct 2025 04:07:27 +0000
Manifest this update:     Mon 20 Oct 2025 04:07:26 +0000
Manifest next update:     Wed 22 Oct 2025 04:07:26 +0000
Files and hashes:         1: qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl (hash: yv3nvjQhZiv4S1pDgt4R/4C2NxGrZw09eDDR59Xo9Cc=)
                          2: B8E765D0C4D311EEBA5AF067775412E6.roa (hash: b0IzaXHkBIGfBIdqoNnOyRPJUQsYRBOGUhp6wp/+Nvw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E4D9AF, serialNumber=AAC55D1234D3B7F6EA7638184092117239917262
        Validity
            Not Before: Oct 20 04:07:26 2025 GMT
            Not After : Oct 22 04:07:26 2025 GMT
        Subject: CN=68f5b57f-020c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:0b:09:c5:57:17:d0:a9:93:50:c3:8f:87:
                    32:ad:19:4c:30:38:ce:cb:a2:97:ef:fc:6b:c5:bf:
                    40:66:3a:26:7d:4c:ee:9c:6c:4d:14:dc:d2:0d:7c:
                    c8:fa:a0:ff:10:a4:c3:27:26:cd:74:c4:d2:b3:13:
                    ff:14:45:54:48:97:83:06:55:07:f2:d9:d6:bd:1c:
                    05:dc:19:91:1b:6f:23:70:9f:18:91:ef:12:cc:6f:
                    61:fe:b1:e0:6e:d7:2a:f3:96:14:f3:65:d1:d7:78:
                    19:bc:36:03:60:fd:28:d7:aa:fe:3d:e0:d6:44:1b:
                    96:de:f1:8d:20:f4:34:a8:0c:ad:53:ca:bb:7b:49:
                    b0:1b:df:ed:9e:b9:41:c7:e3:c7:5a:0b:46:eb:8e:
                    71:b9:c5:33:32:d2:cd:25:ee:59:8d:d3:7c:75:e1:
                    c0:86:ec:0f:36:a3:d4:e4:3d:f0:7f:75:e7:05:db:
                    d9:25:86:92:a4:ad:af:cc:c8:bb:a8:65:09:02:e3:
                    72:55:36:95:50:12:4c:ad:f7:bc:ef:b3:06:9d:ad:
                    eb:2d:34:ec:05:ea:5e:85:40:e5:c0:0f:d3:0f:a3:
                    e3:39:63:29:09:6b:6e:70:7e:75:76:cb:d6:0f:70:
                    ff:58:f7:48:d0:35:9f:d7:89:ae:fd:08:f6:86:4c:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F4:22:84:BE:E0:8E:52:18:68:99:2D:BF:BF:45:1B:41:0E:05:6F
            X509v3 Authority Key Identifier:
                keyid:AA:C5:5D:12:34:D3:B7:F6:EA:76:38:18:40:92:11:72:39:91:72:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:96:2b:c1:c8:bc:48:e6:7e:32:6a:fa:ab:63:74:11:93:74:
         40:88:a1:33:45:57:59:b1:a7:85:56:2a:81:14:4a:ef:5e:d1:
         ef:4e:ec:ea:41:20:a7:e0:30:64:50:be:01:15:c2:c5:cf:31:
         0f:f7:85:92:d4:51:e8:34:5a:3c:6c:a5:a9:92:5e:47:06:a4:
         62:63:4e:e7:d9:ac:34:ed:7a:dc:71:ac:90:6b:ec:8b:27:73:
         44:21:53:0e:b9:06:53:f0:ae:ae:d7:66:8b:69:bd:a8:86:11:
         24:7b:7c:d9:58:5c:e9:fa:bf:e0:97:3e:ee:45:aa:45:40:54:
         b3:e7:d9:64:42:43:e5:ee:fc:6d:13:dd:82:1e:4b:e2:bc:79:
         b2:64:25:5a:0e:dc:1a:42:13:ca:f1:e2:1f:78:3d:e3:3b:dd:
         36:c4:02:5e:f2:74:07:9a:dc:35:2c:ed:1a:da:32:af:39:0b:
         b6:49:9b:23:4c:94:4c:18:89:04:87:be:b6:c9:43:32:94:dc:
         66:08:ba:4b:1c:f4:7e:b8:b4:07:a2:92:d8:ff:87:47:5e:ef:
         65:40:46:02:34:7e:8f:83:a0:39:07:8c:07:ec:24:f6:d4:7b:
         90:a7:24:a1:55:35:61:c0:73:9e:eb:01:4e:6f:8f:44:6b:3d:
         60:0a:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:16 2025 by rpki-client