Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft (raw, json)
Hash identifier:          tMp3WwAVeCRWYDP1NomjVt9nal+AYWEG93pYQZFVqqM=
Subject key identifier:   7C:CD:A9:9B:CA:A6:9D:DE:C6:02:07:09:F3:57:A7:A8:9C:71:2E:AA
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Certificate issuer:       /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial:       05FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
Manifest number:          05FB
Signing time:             Mon 20 Oct 2025 02:27:12 +0000
Manifest this update:     Mon 20 Oct 2025 02:27:12 +0000
Manifest next update:     Wed 22 Oct 2025 02:27:12 +0000
Files and hashes:         1: fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl (hash: naexoAwehfJNbRnzAW5i3Nd772r8303ccM0ZJjXz6fs=)
                          2: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (hash: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Validity
            Not Before: Oct 20 02:27:12 2025 GMT
            Not After : Oct 22 02:27:12 2025 GMT
        Subject: CN=68f59e00-fcb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:b4:2c:bf:f8:9f:89:a5:22:47:1b:5f:23:
                    29:6a:12:c9:39:81:a9:78:63:22:ca:b8:59:70:d1:
                    99:e8:f8:c6:a5:42:c3:02:7a:2c:5b:bf:2a:f0:26:
                    1d:04:50:8a:5f:05:21:90:59:15:26:58:c8:1f:3a:
                    89:ff:8f:7e:fc:63:f2:31:6e:ed:1b:e8:27:35:24:
                    4a:4e:df:c7:27:7a:a8:4f:c0:d8:b4:89:fa:54:da:
                    ce:ca:9a:22:7c:72:9c:3d:ff:6b:71:2f:fe:f0:66:
                    e9:e4:80:e0:db:66:18:cc:db:30:0c:f1:d2:ae:08:
                    f7:c1:d3:14:17:0a:09:e5:4e:ce:30:b8:52:aa:c8:
                    a6:67:d2:b9:0f:8b:60:51:20:d7:0a:00:3b:f9:30:
                    95:3d:5e:27:d6:f7:0a:7a:d1:ef:24:23:64:f2:4b:
                    36:cf:32:16:55:be:17:94:db:1b:8c:ad:50:37:79:
                    e0:bd:1a:cb:98:43:e3:44:36:2e:44:fe:35:80:c9:
                    c7:af:7d:a6:5a:05:72:f6:83:42:a0:d8:cf:c9:b3:
                    62:ae:24:31:b8:ab:62:af:dc:f7:e3:f2:19:d6:08:
                    c4:7f:30:9d:c5:d4:11:19:6d:05:ea:bb:ec:e8:0c:
                    96:c2:0e:04:96:26:a2:38:2a:b6:ea:83:06:ee:e4:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CD:A9:9B:CA:A6:9D:DE:C6:02:07:09:F3:57:A7:A8:9C:71:2E:AA
            X509v3 Authority Key Identifier:
                keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:34:2a:6b:f7:1e:d9:ca:eb:c8:26:26:da:ce:d1:20:28:58:
         df:6f:eb:89:c6:90:89:cb:4e:c0:31:cb:fa:be:00:c9:4d:91:
         e1:29:3e:3b:e9:19:fe:d3:c8:e2:19:cd:28:6a:30:74:7b:3f:
         c8:92:ab:b0:20:85:9b:e2:c4:be:b8:6b:a3:b0:24:d8:00:22:
         d8:0b:8d:72:23:4c:99:83:bb:02:41:38:d7:88:ce:74:37:68:
         40:79:ad:27:57:81:c4:bb:68:65:44:7e:13:0d:ee:eb:fc:6e:
         9f:1f:fd:47:ac:81:3d:89:64:95:d3:fb:5b:b4:18:7d:58:1c:
         cf:98:e7:e4:0f:30:42:02:e2:21:ba:97:2f:e9:b1:c9:5a:8f:
         2b:e5:f9:03:f4:26:22:9f:b1:db:1c:b0:41:ae:cc:ec:08:24:
         2c:7c:89:7f:e4:0a:7b:48:19:db:6f:1c:4d:0e:21:f9:ea:dc:
         b3:a1:ce:10:d2:b7:ac:eb:28:d8:f5:62:20:88:dd:07:63:13:
         f5:10:c7:0b:4a:ad:b7:40:60:8b:a2:85:b7:4b:44:c4:64:e6:
         72:88:f7:93:5a:e9:61:6b:0c:ea:de:ef:43:fa:10:f7:f2:3a:
         14:23:47:c6:fc:50:8e:fd:a1:fe:64:99:66:74:f8:21:32:be:
         2d:e4:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:42:07 2025 by rpki-client