Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          lt/pzqEvad8npO29XMChFx0OEjIP9UWB+ZyM08adDgY=
Subject key identifier:   37:ED:DB:2F:11:74:A2:7F:1E:80:77:7C:69:F4:4D:9C:69:ED:4F:37
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       0752
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          074F
Signing time:             Sun 19 Oct 2025 01:57:27 +0000
Manifest this update:     Sun 19 Oct 2025 01:57:26 +0000
Manifest next update:     Tue 21 Oct 2025 01:57:26 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: ApBhtG7tUMvXNvcjWAnDoYQfPjDJ63haxmS6kb5fTXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Oct 19 01:57:26 2025 GMT
            Not After : Oct 21 01:57:26 2025 GMT
        Subject: CN=68f44587-2d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:30:c9:a6:b1:52:d1:4e:88:0b:fb:30:d0:
                    9c:ef:c2:80:ee:8e:39:a7:a7:75:e5:89:25:0e:45:
                    70:f7:24:9f:fd:d8:44:e5:70:02:45:8d:50:56:f7:
                    92:94:ef:cb:53:cf:dd:93:64:9a:0f:9f:60:a9:0d:
                    d7:a8:c3:70:62:8e:b6:69:a0:14:10:bc:a3:1c:cf:
                    49:b7:50:c4:20:bb:bb:60:41:76:a4:9d:24:14:37:
                    97:35:45:8b:1d:51:e4:a3:22:81:83:2b:8e:9d:65:
                    f4:5b:e1:0c:6d:42:15:f2:d9:87:7a:bc:d9:ea:c5:
                    f2:97:fe:10:d0:db:9f:d7:b8:23:25:3e:d4:90:0e:
                    dc:ec:f7:bf:59:57:c6:59:04:76:e3:f3:af:c8:9b:
                    9e:d0:75:0d:7a:9e:f5:41:2e:94:db:aa:49:59:13:
                    3c:57:5c:07:c9:19:1d:ec:a3:a4:01:63:1a:f0:9f:
                    0e:bb:32:4f:59:f7:aa:52:7e:80:17:a3:6b:d4:42:
                    df:bd:b6:c8:10:1d:3c:80:ed:4d:c2:36:7f:d5:f6:
                    00:dc:32:35:25:02:d7:3a:5b:7c:ca:30:e1:9d:34:
                    76:94:85:ef:e2:f0:97:9e:0f:4a:7b:bb:7a:a1:7f:
                    39:42:a1:a5:03:be:46:e1:20:18:67:51:50:b7:ec:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:DB:2F:11:74:A2:7F:1E:80:77:7C:69:F4:4D:9C:69:ED:4F:37
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:4d:47:95:16:2d:77:06:7e:7f:97:8a:4a:89:5b:da:b9:
         16:08:aa:3f:46:19:60:d3:9f:d0:d7:0b:c4:84:46:2c:02:4a:
         9d:07:d2:64:49:c4:91:ef:b8:b6:7a:02:12:7f:ec:94:59:0b:
         84:b4:b5:1e:60:d0:52:f0:92:09:ba:08:32:7c:44:03:78:5d:
         13:a7:0d:af:38:95:ba:d6:db:38:0b:17:de:19:05:02:ec:3f:
         1c:0a:cd:61:be:f0:69:52:9d:9c:44:78:64:07:27:f8:e6:d6:
         d6:36:25:49:8c:34:58:8a:63:b8:0c:be:38:0c:a4:0c:5f:40:
         7d:fc:5e:2d:10:35:72:31:17:b9:32:cd:5b:ee:ab:64:ec:e9:
         88:47:12:06:55:18:68:e6:0d:c6:c3:e1:ba:d5:32:88:e5:7a:
         07:ea:a5:66:9a:51:5f:37:c7:20:b0:4b:d5:32:b3:70:20:1d:
         a5:bb:91:f0:48:53:c4:0f:75:ef:41:ea:7e:c6:b8:24:da:86:
         28:4c:88:40:f0:a5:f4:9f:1b:d2:98:8e:c0:8c:72:69:b6:87:
         3d:df:bb:f0:76:f9:1a:d5:43:45:9a:91:9e:1c:4c:b6:42:bb:
         25:d1:63:d1:47:7c:45:65:76:90:15:41:53:89:0b:7d:c2:f8:
         0c:94:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:35 2025 by rpki-client