Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier:          ZAs5vr8g4zjCPfhcax9xRAldwYgO/RbLgUHRMYeNrWA=
Subject key identifier:   50:F8:2D:F6:6C:FF:03:AE:FB:0A:5D:59:D1:72:38:F0:82:12:62:B3
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer:       /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial:       01A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number:          01A3
Signing time:             Wed 17 Sep 2025 04:26:50 +0000
Manifest this update:     Wed 17 Sep 2025 04:26:49 +0000
Manifest next update:     Fri 19 Sep 2025 04:26:49 +0000
Files and hashes:         1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: qngyArOv99uTky/R7jvlwgZZsHli6KoSlk69r+ljWqI=)
                          2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Validity
            Not Before: Sep 17 04:26:49 2025 GMT
            Not After : Sep 19 04:26:49 2025 GMT
        Subject: CN=68ca3889-e481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:0c:c7:0a:82:ea:b0:23:bf:53:1a:1c:a3:
                    f0:dc:95:05:fc:98:f5:f2:23:be:e3:86:cc:ca:30:
                    88:ca:cb:0e:c4:8d:1a:56:24:f3:3b:5c:08:6f:b7:
                    d6:f1:4c:d0:2d:70:b1:dd:56:0b:3c:58:8d:25:f7:
                    c2:18:33:3a:43:ef:5a:e9:f1:e0:79:92:76:cc:d0:
                    c8:63:90:01:91:a7:a4:34:db:d4:a6:a2:06:0d:b9:
                    55:35:92:4c:dc:31:12:67:b8:5c:1b:ec:80:a2:0d:
                    22:4d:27:82:5d:1f:f2:ed:54:fb:70:11:fb:9f:4c:
                    6a:72:af:42:74:2e:3f:ae:9b:87:4c:21:18:ce:9b:
                    d4:76:ad:78:bc:f7:5c:60:18:1d:36:1d:29:c5:59:
                    34:0e:cc:21:0d:1c:1e:80:14:79:c9:5c:f8:ab:97:
                    c6:85:fb:a2:28:7e:39:1f:d1:16:29:d1:3b:80:69:
                    10:30:96:de:ce:89:1f:7d:94:c6:71:f9:e0:fa:2a:
                    1a:ae:39:6b:a9:99:14:30:24:72:3c:75:21:d6:c1:
                    6c:f6:bf:0f:64:37:91:da:92:b2:12:28:cb:29:38:
                    b1:0f:1b:d4:02:05:51:f1:62:a5:4e:21:e8:22:e1:
                    35:8e:c8:1c:6b:3f:d7:bf:00:3f:7d:d5:9d:cf:22:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F8:2D:F6:6C:FF:03:AE:FB:0A:5D:59:D1:72:38:F0:82:12:62:B3
            X509v3 Authority Key Identifier:
                keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:8b:2b:ca:6f:50:63:b9:4c:ad:20:7b:dd:93:63:ad:a0:
         b9:47:89:ab:c9:f3:a6:37:53:fc:14:75:84:6a:37:04:c0:7d:
         be:a4:f1:40:84:fa:1c:b2:69:a7:1f:2b:c1:ce:5e:36:13:2f:
         d0:7e:34:df:7c:8d:fa:df:d6:3f:47:1c:83:5c:23:17:d9:37:
         c8:50:2a:38:83:ed:bf:88:8c:49:99:70:b2:13:c0:d8:58:58:
         e9:a8:fd:ed:42:aa:80:a2:c0:18:3f:4b:ef:75:5b:da:a2:cc:
         26:39:b9:d6:c2:4b:da:04:87:87:00:79:37:85:12:d6:b3:43:
         63:60:22:a9:97:bf:c2:ba:f3:b8:d9:b9:78:6e:1d:c1:ca:4f:
         d8:64:80:b8:c8:4c:04:b8:b8:44:5d:7b:f3:b1:28:64:5a:a8:
         0c:5e:e9:27:e8:4d:d7:04:52:84:fe:f4:3e:95:de:20:aa:f3:
         8e:49:ef:02:3d:ed:16:fb:3a:2e:c6:4d:22:a6:99:94:f3:03:
         78:fe:20:79:e7:2e:fe:d2:54:5d:75:a9:46:19:55:d6:16:7c:
         96:b5:f9:5c:7b:42:56:cb:17:9e:d7:67:5e:a1:8c:8e:05:cc:
         8c:d2:f7:35:49:60:92:9f:7f:28:a3:ee:cf:90:3f:c0:5e:17:
         df:54:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:26:17 2025 by rpki-client