Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
File:                     4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft (raw, json)
Hash identifier:          +73SC0n6tWcAa9rz0QTDj7A9Tq9oVjAU8ymVPPPfU2o=
Subject key identifier:   DF:F3:03:5D:8B:CE:BA:12:D4:7E:AE:54:01:EB:AF:D4:C5:A8:C3:ED
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Certificate issuer:       /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial:       02C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
Manifest number:          02BB
Signing time:             Mon 20 Oct 2025 04:02:28 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:27 +0000
Manifest next update:     Wed 22 Oct 2025 04:02:27 +0000
Files and hashes:         1: 4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl (hash: DFs0whFogASVwW1UGt5ZvPn+5P33fNmOGttEcaciLS4=)
                          2: C60C59567D8711EF97D7ACB4762E951A.roa (hash: qjux6GhSq9uX5DCNJbFQuyrkaPLVantCfSfpdQCqZvM=)
                          3: 963E345AAA6E11F092CBEA92DAE4EC9C.roa (hash: pST0iqM1LIDeTWfpvZG5M6dsTHwi1B1szH8dsYd3DBU=)
                          4: 2257925CAA6E11F0A6F76B90DAE4EC9C.roa (hash: oxEm9UctpCtTUrbHITbDcrkM+rBf2+aSQrb3SqlA3kA=)
                          5: 24A9CB30596E11EFA89A0E7E762E951A.roa (hash: eSokWiFbXZKHYJAeMCSCb+kdTU9P/gdQpCGsPx3aeF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3A58AF, serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
        Validity
            Not Before: Oct 20 04:02:27 2025 GMT
            Not After : Oct 22 04:02:27 2025 GMT
        Subject: CN=68f5b454-17e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:67:98:9b:98:d4:77:92:22:ad:f4:4b:12:
                    a0:b6:80:9f:10:11:89:ce:3b:30:d2:ce:b8:7a:6d:
                    90:80:81:67:a8:99:cd:b9:eb:f4:42:10:cf:b4:ed:
                    4b:c8:88:13:55:0b:4b:7d:c6:08:9e:f5:24:7e:1e:
                    72:b5:d5:32:59:ac:7b:f0:86:29:bb:ee:95:01:af:
                    8b:4e:a8:01:9e:2a:91:38:3b:89:e5:eb:93:90:29:
                    b8:a4:ae:8a:d6:9f:3b:ac:70:a5:ff:85:5a:d3:fd:
                    ca:5f:df:78:79:99:34:e3:22:ff:38:fc:18:67:46:
                    75:3b:82:d1:ba:b4:f7:b7:51:24:92:76:89:ba:23:
                    45:7a:7e:01:9e:e0:d0:1b:91:a8:55:65:fe:bf:e1:
                    4a:c9:58:c0:29:8d:db:8e:43:8e:50:e7:7b:c9:13:
                    fc:c9:0a:7c:6d:90:c1:13:34:c9:b1:b4:2c:90:35:
                    44:b4:75:8b:b4:29:b9:0a:56:50:6b:1f:ba:87:a1:
                    6f:c1:64:5f:8c:69:3c:02:6d:51:bb:d2:4e:ac:c4:
                    87:59:06:6c:14:98:3c:dc:d2:76:e7:b9:8d:64:eb:
                    56:24:f5:0b:cd:8b:59:84:d6:56:4e:28:f2:7d:6e:
                    a2:4f:4e:90:34:e2:8d:e2:87:36:f3:70:35:0e:90:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F3:03:5D:8B:CE:BA:12:D4:7E:AE:54:01:EB:AF:D4:C5:A8:C3:ED
            X509v3 Authority Key Identifier:
                keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:45:f3:8c:b7:39:23:03:48:d7:b5:09:9b:5a:12:7f:18:02:
         9b:53:9f:af:32:ea:b3:4c:17:bc:a5:aa:38:02:bb:3d:43:e9:
         75:86:36:07:64:c9:e9:9b:7b:07:e6:cd:5c:63:1b:69:38:1b:
         d6:15:c4:5d:52:52:4b:7b:98:be:2d:dc:02:04:5b:b5:ab:29:
         0e:46:7c:34:d8:ad:6e:35:64:8d:3d:11:a9:91:95:c5:c7:8e:
         04:ca:69:b6:3b:b1:25:f8:20:6c:da:ae:13:bc:93:d1:11:6d:
         fd:20:62:0d:f1:68:dc:3f:92:cf:de:7f:ce:af:83:c0:12:c3:
         d5:ec:8b:0f:0e:b2:98:80:3a:fb:db:e1:22:37:6f:a7:ed:ec:
         61:d3:e6:0c:84:e5:7e:c3:2e:3d:20:8d:4b:09:fb:6a:e0:6f:
         ce:63:c9:66:d9:f2:31:37:39:17:52:95:97:af:dd:b7:56:81:
         96:4c:bb:15:e2:e4:f1:11:db:0f:b9:b0:9c:9c:be:75:9a:42:
         b5:01:14:70:89:83:55:7e:4a:cf:74:6c:31:d0:e5:58:c7:a2:
         1e:43:09:35:b6:77:8e:5b:08:84:f6:f5:3d:ed:9f:47:84:3d:
         6f:75:91:4a:dc:9b:16:f7:d7:cd:7c:cb:65:19:d9:2d:90:c3:
         47:8e:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:04 2025 by rpki-client