Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
File:                     Zc12cqY4S1k4r9xciu-vQzS6KcA.mft (raw, json)
Hash identifier:          kALb6DkX/aQRVMqCLGqVE8f35fMzwYcLIGANOT/Wrsc=
Subject key identifier:   DC:F1:FE:41:26:BB:02:A2:04:1C:60:72:E8:F4:6F:3C:AC:E9:E4:46
Authority key identifier: 65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0
Certificate issuer:       /CN=F3695A2AAF/serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
Certificate serial:       0281
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
Manifest number:          027F
Signing time:             Sun 19 Oct 2025 04:04:43 +0000
Manifest this update:     Sun 19 Oct 2025 04:04:42 +0000
Manifest next update:     Tue 21 Oct 2025 04:04:42 +0000
Files and hashes:         1: Zc12cqY4S1k4r9xciu-vQzS6KcA.crl (hash: 69YjJDBoFrKyz+J4QyOE8hUaqaVLTAgtNRH02af31Xo=)
                          2: FABF9778404F11EF82E76870762E951A.roa (hash: LBsqO52AIum2DnzkQ0UyfHJJgoQtKMXAuqtuxKPonQw=)
                          3: CB0BD6A8573811F0B498479FDAE4EC9C.roa (hash: hP8TCFSZ+MtSaLGQDJ2mcF7zKJ8CzUHgiIB+ELSv+Qo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAF, serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
        Validity
            Not Before: Oct 19 04:04:42 2025 GMT
            Not After : Oct 21 04:04:42 2025 GMT
        Subject: CN=68f4635b-cbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:32:4e:70:e8:3e:e5:fb:cc:5c:fc:23:f0:
                    23:5d:c0:96:bc:25:01:fb:48:59:b3:68:d5:de:c2:
                    d6:4a:f9:6c:f5:a1:5f:80:91:28:c8:26:5d:69:a6:
                    32:df:8c:e4:61:20:7d:e1:dc:13:7b:91:ce:0f:4e:
                    e9:97:96:46:b2:ad:ce:5a:ce:b0:2d:13:fe:d9:bb:
                    46:c3:29:a4:38:b8:df:b1:0e:69:ab:ac:00:53:38:
                    9d:a0:80:5c:1d:8a:4e:19:40:33:ef:2d:58:50:13:
                    e9:14:ce:93:03:12:ad:e3:7d:f9:68:5f:48:09:0c:
                    cf:31:ad:ed:f4:9d:63:a4:93:c1:b8:da:a3:4f:60:
                    b8:b5:15:04:88:e7:a5:2e:e0:f1:8f:90:81:8f:b7:
                    34:b9:60:b3:83:80:5c:81:ea:3e:08:57:95:e2:4a:
                    9a:d9:a2:be:38:f8:8d:89:62:68:07:7b:a5:cc:b7:
                    d0:e6:5b:af:f1:6c:84:87:0c:d5:65:db:fe:21:94:
                    a5:af:0c:3b:76:7a:28:27:57:ea:62:a2:3d:27:fb:
                    1a:13:66:68:ee:2c:91:1e:9d:28:58:df:e9:15:b8:
                    ed:92:c5:a0:9e:5c:02:50:2b:1e:d3:c3:92:6a:68:
                    6a:9d:84:6c:59:f2:bc:b0:e0:0a:d4:d6:a3:9c:fd:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F1:FE:41:26:BB:02:A2:04:1C:60:72:E8:F4:6F:3C:AC:E9:E4:46
            X509v3 Authority Key Identifier:
                keyid:65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:3a:ae:fc:42:0e:e2:7d:dd:56:f3:1d:7a:e7:f5:e3:ea:
         c0:a7:28:71:bd:81:d4:e3:ba:35:d6:47:b9:cc:69:d2:50:43:
         2e:cd:97:25:5d:6f:4e:14:7b:55:d3:6b:87:be:db:2d:7e:88:
         87:15:d4:05:51:ea:23:2c:31:6c:5d:a2:6a:6b:2b:47:46:8e:
         35:09:c3:94:a9:3f:9f:83:af:71:17:51:30:b2:ac:2f:24:fa:
         a8:1e:21:b6:33:4e:0e:64:e5:31:c3:5a:9a:0f:19:8a:d5:a1:
         f8:97:ec:2a:c6:65:f0:68:ea:39:df:0f:97:bf:18:aa:c5:7d:
         41:89:c2:bf:fe:65:77:05:a5:1f:b3:2f:a8:0e:07:96:e2:bc:
         30:32:54:23:a8:3c:b9:dd:83:90:ac:5f:5a:5d:ac:97:02:4e:
         f7:ff:85:7c:b6:12:b7:d8:8e:8d:10:60:72:f9:b2:e8:00:6c:
         b4:dd:44:ca:eb:08:ce:55:25:3e:f1:70:ba:3b:96:ee:ac:78:
         1c:76:79:d9:fb:22:4f:93:9a:8a:d0:ed:f6:0d:a7:d9:72:86:
         e2:2b:d5:4b:de:1f:a0:a8:87:60:4d:e9:49:88:a9:2a:35:61:
         c5:36:0f:5f:64:24:cd:d5:4d:c7:f9:3e:bd:f6:e8:74:89:e5:
         08:c4:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:59 2025 by rpki-client