Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File:                     hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier:          QOsVoOmrVHUoBWDtzDDAZW+W6ko+QqM52IfO8GtFnZQ=
Subject key identifier:   4D:9F:59:11:8F:D1:BE:E8:F5:2F:EA:45:8E:1D:99:90:5B:4D:83:7B
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       06B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number:          0680
Signing time:             Sun 19 Oct 2025 02:23:35 +0000
Manifest this update:     Sun 19 Oct 2025 02:23:34 +0000
Manifest next update:     Tue 21 Oct 2025 02:23:34 +0000
Files and hashes:         1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: EtagYNdaFIS6puDudYqv5tYwdwNFz7ElRiPQFWLMJp4=)
                          2: 226E4C7E6F7011F0B3F1A4B8DAE4EC9C.roa (hash: 9codvwYd9Br52IJrts3hHS83FnqqAlQAiRm1pH0EcUQ=)
                          3: 15C50C50FC6B11EB9A564508D8A014CE.roa (hash: edvjHiFr4+tEmm64tF6z1Z3h19PfKmEG5a35CcgMLjw=)
                          4: 3B0BC528A8E011F08381ECAFDAE4EC9C.roa (hash: p8rygDaqMlfKM5+mFXH3h51l6FuqzUHfYdCJkipQXZk=)
                          5: 26FAD3C49F6411F0B33CA3BFDAE4EC9C.roa (hash: hNSRelLTbTrq5jFytICLmCpJINckDyawV0X+PkX4+j8=)
                          6: 2DF66802A48011F0BE03EEDADAE4EC9C.roa (hash: 0mGTNTPDmMnNbcUKybxv+SjjJhFpDKD/VU09yMxkTpA=)
                          7: 6F610D6EB15211EFBDDE33A8762E951A.roa (hash: hU8BoAyDFHgCQ5xHdbCUfglrlvg4aN+lgDNHGzvLeys=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 02:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Oct 19 02:23:34 2025 GMT
            Not After : Oct 21 02:23:34 2025 GMT
        Subject: CN=68f44ba7-ec10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2b:fb:e6:13:c8:d0:5b:64:85:30:29:19:12:
                    5a:38:a3:8a:fa:57:14:c3:99:30:1a:1e:3e:10:74:
                    26:c6:d1:60:7b:27:f0:4c:21:34:55:07:37:a2:9e:
                    b3:3a:91:53:25:a4:fd:ac:f4:af:54:a4:e5:ea:4c:
                    76:ee:17:55:a7:46:9d:62:64:44:9f:31:f8:ee:42:
                    c0:40:a0:c3:2c:65:5f:d2:aa:a0:5f:25:14:fd:05:
                    ff:4b:b2:df:a4:05:d0:e2:6a:d3:bd:02:ed:14:f4:
                    4b:9c:24:cd:4e:81:86:bf:e7:be:e1:89:ef:15:23:
                    48:b9:db:ba:95:3d:2f:e6:40:55:1e:94:00:08:d7:
                    96:f0:f1:a0:88:41:7c:bd:da:14:2b:08:f0:35:ec:
                    66:c3:5c:f1:58:d7:9e:1b:ba:87:8d:21:03:82:d5:
                    9e:ab:27:15:6f:53:e7:43:e8:e5:b8:19:ad:97:96:
                    9f:86:29:a9:67:74:a0:35:1f:bd:32:3b:09:40:98:
                    69:81:6e:0a:49:c8:46:21:16:e4:7a:7b:9c:22:f8:
                    6c:9d:79:d7:82:da:ee:e5:30:dd:f3:a9:59:0d:f6:
                    d6:d3:c7:ca:da:a9:24:09:e2:be:15:bf:8c:1a:83:
                    09:de:f8:d9:93:dc:06:8f:1a:19:c1:bb:0c:8a:41:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9F:59:11:8F:D1:BE:E8:F5:2F:EA:45:8E:1D:99:90:5B:4D:83:7B
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:eb:e6:6a:88:3d:46:b8:3d:a0:09:01:7e:0d:13:6d:03:
         f3:29:f6:e7:56:71:82:d8:bc:4d:72:37:6a:2a:d0:27:50:e8:
         7c:be:c1:7c:30:38:93:82:3b:83:9e:ac:39:aa:6d:35:f6:ff:
         87:35:69:36:8d:11:b0:ab:a0:72:42:e7:11:04:9c:11:5c:a7:
         99:89:02:9f:30:09:8e:c9:1d:cf:d7:63:a0:9c:43:d7:86:56:
         cc:f5:4f:67:3b:ba:5f:5b:e4:bb:48:66:84:71:1b:93:02:96:
         9d:09:aa:33:dd:0c:f2:17:ad:48:5f:50:86:ef:5d:c9:9c:58:
         7b:28:53:c9:fa:6d:f4:8b:f9:79:fd:ff:77:7b:de:8f:21:2e:
         fc:1f:97:7e:db:4d:16:90:10:44:30:a7:66:7f:2e:ab:1d:52:
         6b:11:1e:e8:e2:ec:0f:53:32:8d:81:2b:2d:09:4b:6f:12:2e:
         01:99:66:a8:9d:70:18:2a:e2:f7:b7:da:3d:f7:c9:37:5b:3d:
         8d:39:3a:52:1f:e1:ef:a6:73:76:25:1e:47:a7:d6:8d:19:e3:
         27:57:6a:c8:66:7b:1b:05:fc:0f:fd:70:da:ca:76:8f:34:21:
         e0:99:53:18:22:de:4f:e6:3d:80:82:37:25:3c:e0:9c:0a:2b:
         9e:78:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:52 2025 by rpki-client