Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          R93y3D4N+Qw1Q0KuPnzMtTmFhlu4pkTgnN7Ljyhxpco=
Subject key identifier:   C2:15:5C:D5:8C:A8:4A:B1:2A:BE:0C:2C:98:2C:AB:46:1A:70:F5:B1
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       0306
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          02FB
Signing time:             Tue 18 Nov 2025 03:58:09 +0000
Manifest this update:     Tue 18 Nov 2025 03:58:09 +0000
Manifest next update:     Thu 20 Nov 2025 03:58:09 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: rjUpGbsJvqosHGAE+3vpSOHo18CaeItLMTpPqm0xHtA=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 20 Nov 2025 03:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
        Validity
            Not Before: Nov 18 03:58:09 2025 GMT
            Not After : Nov 20 03:58:09 2025 GMT
        Subject: CN=691beed1-8ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:53:39:9a:ef:79:af:90:4f:49:72:f9:0f:ef:
                    06:d4:56:4c:95:b1:f8:fe:bc:a8:4c:e5:0f:1d:c8:
                    a1:d5:2c:61:b8:02:39:5c:c5:4d:77:b0:7b:1e:ca:
                    5a:fa:f9:4b:7d:16:2a:90:15:a1:63:c6:72:70:ba:
                    a4:6f:cc:12:f7:64:0d:7d:af:ef:69:cc:cf:b4:bb:
                    d4:4c:d8:d8:21:51:29:e7:16:1e:ae:a0:f6:4b:66:
                    2e:8e:bd:9a:9f:88:c0:08:16:48:ed:b5:b5:36:b8:
                    1a:fd:6c:c9:5a:81:91:52:dd:e9:51:77:29:c9:4b:
                    d4:8c:12:ea:50:b2:19:a4:7c:7f:07:03:30:a2:31:
                    f5:ca:68:f4:01:d1:64:8f:8f:2c:48:57:4b:59:4e:
                    35:dd:7a:2a:e3:6a:bd:75:75:84:0a:a4:45:df:8b:
                    58:b1:5c:00:dc:ed:e8:10:78:10:84:b4:49:7b:60:
                    20:91:f4:34:79:ff:49:ab:e4:07:08:31:18:df:49:
                    ac:00:50:fa:52:23:cc:a0:6c:ae:e3:34:3b:7b:b9:
                    f8:08:64:c3:91:d5:f9:05:be:60:f0:65:9e:1c:81:
                    d0:35:e9:ed:59:1f:ed:55:a3:99:37:2a:85:cc:2f:
                    fa:02:05:ee:52:61:c3:5d:b0:ce:b7:71:b7:fd:47:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:5C:D5:8C:A8:4A:B1:2A:BE:0C:2C:98:2C:AB:46:1A:70:F5:B1
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ef:3b:5e:89:d5:d8:cc:2d:ef:0c:21:01:19:0d:1c:86:a3:
         36:9f:88:82:20:8d:87:34:30:fe:ea:d9:06:ed:9b:17:62:8e:
         49:72:4b:5f:72:ba:ad:d3:f2:b3:d3:79:8e:0f:0d:b4:f1:4f:
         73:ca:f8:c0:f8:66:4c:1c:0d:28:68:a9:8b:5a:ab:44:1c:3f:
         4d:4a:0d:b1:a0:75:88:fd:54:ef:6f:2e:08:ff:2d:21:df:be:
         0a:34:14:b6:a9:30:8b:d4:09:d8:6e:3a:6c:8a:0a:cf:f6:7e:
         a1:98:35:b3:57:19:a8:1b:bc:26:78:cf:6f:9b:1c:b5:6c:0c:
         d5:6c:f4:0b:b3:04:06:e6:b3:97:0d:86:23:37:d3:2c:a9:c7:
         3d:d5:f1:cf:58:ec:03:56:70:a8:28:eb:b2:ca:a6:55:aa:50:
         7b:f7:5a:0c:e0:44:ae:de:e2:fa:f9:67:25:0e:90:f7:ee:3d:
         02:3d:76:d0:d3:9e:e9:1b:82:c0:12:3c:28:42:b7:57:c1:33:
         ca:d2:02:09:3c:c8:52:bb:f3:c7:49:f2:d0:b1:26:db:5c:40:
         5b:9c:36:14:75:c0:f6:a0:93:37:62:fd:fa:78:50:cf:54:2b:
         10:d5:f1:0b:c4:16:2d:a3:b6:25:12:c0:82:d3:62:a3:2d:a8:
         ca:3a:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 11:08:52 2025 by rpki-client