Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File:                     XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier:          EH1FaWjKVigwnf/gYxj8xBpcTLaME6asv9y19DB5+m8=
Subject key identifier:   B3:5B:D8:2C:A5:6E:1B:9B:F3:35:23:46:A9:B1:D0:6C:88:AC:17:FA
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer:       /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial:       04A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number:          04A3
Signing time:             Sun 19 Oct 2025 02:58:28 +0000
Manifest this update:     Sun 19 Oct 2025 02:58:28 +0000
Manifest next update:     Tue 21 Oct 2025 02:58:28 +0000
Files and hashes:         1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: uHRzBzZnIFXnk0/HRSQ2E9Oh1Llc5nxMSkWS3YtZ7Q4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 02:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
        Validity
            Not Before: Oct 19 02:58:28 2025 GMT
            Not After : Oct 21 02:58:28 2025 GMT
        Subject: CN=68f453d4-a1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:69:9b:d2:db:94:ac:e3:7d:03:39:37:b5:60:
                    2c:67:5d:56:2f:3a:9c:20:01:46:53:6f:2c:aa:73:
                    97:61:01:19:e9:34:26:0c:da:5e:5d:f9:0e:40:74:
                    61:9c:bc:0e:e4:85:5c:e7:26:81:21:24:1b:ec:d4:
                    d4:a2:85:38:46:7c:ed:f4:0d:fa:35:ba:19:43:97:
                    0d:85:bc:a6:7e:b3:b9:4a:df:2c:36:29:a5:2d:a0:
                    d7:81:72:5d:9d:9f:a1:2d:bd:b2:77:b7:e1:a2:f6:
                    83:77:c1:a3:a9:91:cc:9c:fc:5a:f7:29:bb:ef:3f:
                    9f:b8:f9:f7:7b:47:00:c1:e2:28:e3:2b:e0:5b:69:
                    0c:ee:75:65:e9:78:d2:c1:09:87:dc:d4:36:23:23:
                    19:11:f7:29:98:15:7f:02:39:4f:64:ca:0e:30:44:
                    28:c1:1e:e0:57:45:af:68:a9:26:d5:e9:d5:0b:99:
                    d8:77:1c:c2:14:68:e3:0b:87:e8:ef:6f:a8:e0:95:
                    25:06:e1:c5:39:25:fa:4b:43:74:53:a1:e3:34:46:
                    bc:50:29:e6:59:f5:50:70:48:61:a9:31:1d:af:e3:
                    83:f4:99:d8:4f:dd:7e:6c:64:ab:f7:61:5d:6e:af:
                    57:f6:10:59:6b:aa:4c:22:6b:61:a8:29:1b:1d:5c:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5B:D8:2C:A5:6E:1B:9B:F3:35:23:46:A9:B1:D0:6C:88:AC:17:FA
            X509v3 Authority Key Identifier:
                keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:8d:46:01:15:11:1d:79:9e:9b:d8:5b:20:9f:64:cd:32:
         84:b2:f7:31:a1:73:20:8f:f5:28:59:9c:2d:aa:53:8b:e0:2d:
         09:c0:8b:e5:5c:83:1e:a3:60:af:a9:59:2a:a7:1e:86:cc:33:
         3d:80:99:e6:4d:7d:0f:ea:c7:9d:27:1a:ae:50:76:2c:ce:d7:
         c4:b9:35:88:d8:a1:bc:7d:a4:94:c6:a2:45:91:1f:74:93:0c:
         46:7a:f8:90:c4:13:a0:81:19:7c:c1:46:8d:ed:ff:75:52:5b:
         4f:70:fa:41:78:46:48:9a:70:1c:1c:44:23:e9:c4:86:a1:38:
         35:27:3d:b5:53:bf:2c:fb:75:2d:6b:ab:9e:7d:ea:77:f7:24:
         ca:96:23:85:23:11:aa:0e:5b:55:79:44:34:01:c1:71:cd:18:
         67:33:23:ee:2b:ff:8b:26:6d:ad:77:bb:94:26:b8:d9:42:0c:
         93:cc:b1:58:0c:7d:d5:5b:e4:4b:6d:a9:06:7b:84:32:25:c6:
         d4:9a:24:f8:48:96:01:dd:fe:e8:ad:8f:99:59:ed:5c:82:17:
         bd:23:14:9e:ad:84:48:ca:34:6b:84:c1:ba:3c:44:71:32:8c:
         5b:7c:36:b5:d6:78:d1:74:25:02:78:09:60:9f:99:58:37:99:
         ad:41:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:54 2025 by rpki-client