Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          7/H1ybSNh10VkoJ52b5L5btYJAnY+32LrcwbPRmDGis=
Subject key identifier:   FC:22:C6:79:1A:10:62:B9:B5:06:1B:12:6B:27:34:D2:B9:59:13:FF
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       05F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          05F6
Signing time:             Mon 20 Oct 2025 02:28:39 +0000
Manifest this update:     Mon 20 Oct 2025 02:28:38 +0000
Manifest next update:     Wed 22 Oct 2025 02:28:38 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: lR+7kDjmBF5d1VPofQPCf+KHj+Lz4ZiAZvp1EX9ebik=)
                          2: 951EA1701F7811ECB1D1961AD8A014CE.roa (hash: 1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=)
                          3: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          4: E739D1BE1F7811ECBE14071BD8A014CE.roa (hash: XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Oct 20 02:28:38 2025 GMT
            Not After : Oct 22 02:28:38 2025 GMT
        Subject: CN=68f59e56-2f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:69:96:f9:4d:55:31:60:5b:51:be:f7:5a:f4:
                    b3:30:10:c8:f3:2d:90:b9:ce:d7:3d:7e:cc:76:d7:
                    f1:b7:17:6c:60:f7:3d:36:d0:3c:b7:bc:5a:fe:0c:
                    d5:cb:8f:0a:09:fa:3e:0a:b5:26:a7:93:e0:24:f7:
                    10:9a:e6:d0:ec:13:d5:43:4f:8b:3b:40:b8:a7:50:
                    a8:42:6c:26:85:40:da:35:18:2d:15:2b:fc:db:b2:
                    e3:d4:63:40:f9:3f:ea:8c:4e:38:9f:12:c5:a4:b6:
                    1a:65:96:fd:e5:dc:a7:65:e4:10:70:29:f1:62:36:
                    01:e0:63:0f:5e:01:79:36:8a:fc:1a:47:c4:2e:23:
                    cd:0f:a5:19:8f:ff:7f:03:b3:78:b2:1d:81:ad:1d:
                    c5:50:af:07:c0:bb:32:ce:5a:0c:df:fb:80:53:91:
                    96:34:96:4a:62:4a:96:ae:ff:58:e1:10:0e:e7:4e:
                    7c:5f:57:00:31:22:93:74:cc:ba:8b:12:1b:60:66:
                    81:97:18:e2:d6:b4:8e:00:62:6c:4b:48:dd:9c:76:
                    9c:97:11:97:4f:e1:45:11:a1:4d:18:84:d9:39:d9:
                    17:28:f7:c6:ff:14:52:ac:9b:98:60:a6:f8:7c:f8:
                    da:95:44:57:2a:8e:61:3b:aa:b3:12:e1:69:a2:6d:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:22:C6:79:1A:10:62:B9:B5:06:1B:12:6B:27:34:D2:B9:59:13:FF
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:98:d8:a5:10:c1:92:2e:1a:81:96:49:bb:8e:32:20:5f:
         37:8e:f1:5a:24:89:c0:be:58:9b:43:1b:6d:fd:65:0f:58:ec:
         4f:53:e6:f9:8e:cf:55:22:33:28:4a:00:7d:bf:64:62:af:42:
         5f:cc:d6:db:48:2d:01:51:0d:6c:58:94:8a:e5:70:69:9c:1a:
         82:7f:46:a8:59:9d:8a:4c:e9:00:b2:26:5e:21:79:69:3c:1f:
         e4:bd:2d:fd:10:5c:ba:3d:9f:f7:ec:1d:73:83:2f:f2:e0:23:
         55:ae:08:28:aa:8a:88:24:db:4b:8b:f5:8a:69:46:b1:94:dd:
         1a:16:2e:b6:cb:f7:fb:78:db:f9:d1:aa:70:e6:b0:2d:88:97:
         72:4b:7c:1e:a2:8b:9e:c5:b1:bf:b3:74:6a:ce:5b:36:6c:ff:
         9c:44:5d:97:15:df:ce:16:0e:60:c8:c5:5a:6f:5b:d4:fe:ef:
         b7:0c:ca:4e:77:f2:61:9d:1c:f1:e2:33:c2:5a:75:5a:e7:bb:
         27:3d:6b:45:71:4f:03:44:dc:4b:8e:d5:9f:61:d0:18:fc:3d:
         d9:18:de:98:58:c6:51:c8:61:d2:87:66:c8:de:23:b2:78:a7:
         cb:76:50:ce:9f:aa:03:ff:e1:3b:75:94:87:7b:cf:b1:1e:60:
         23:29:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:38 2025 by rpki-client