Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
File:                     C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft (raw, json)
Hash identifier:          t+UPQuqa7mW3tif8Vcv3zObC0+JY+qe+JyP5aXgdW24=
Subject key identifier:   1C:81:2F:75:8F:88:50:20:91:59:68:08:0F:1F:BB:AB:E8:2C:0D:B6
Authority key identifier: 0B:9C:86:EB:74:2B:22:5C:FA:9D:FA:EE:27:87:17:9C:E2:CB:E4:89
Certificate issuer:       /CN=F362B5C8AF/serialNumber=0B9C86EB742B225CFA9DFAEE2787179CE2CBE489
Certificate serial:       02A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
Manifest number:          02A4
Signing time:             Tue 11 Nov 2025 08:19:06 +0000
Manifest this update:     Tue 11 Nov 2025 08:19:05 +0000
Manifest next update:     Thu 13 Nov 2025 08:19:05 +0000
Files and hashes:         1: C5yG63QrIlz6nfruJ4cXnOLL5Ik.crl (hash: frzicbWujUJqe3U3pqK8Xng/1fcUZMJw6x5gCs8zPxw=)
                          2: A6EE34B4BB6C11EEA3749758775412E6.roa (hash: FP4NgoM4ThMIgSh1uZNU2HWKydeuDiSmJjwUn9UkLfQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 13 Nov 2025 08:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5C8AF, serialNumber=0B9C86EB742B225CFA9DFAEE2787179CE2CBE489
        Validity
            Not Before: Nov 11 08:19:05 2025 GMT
            Not After : Nov 13 08:19:05 2025 GMT
        Subject: CN=6912f17a-5956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:75:f2:3a:57:f7:c5:47:74:79:d1:63:c6:
                    8c:e3:5a:ee:8d:39:7d:ee:c0:91:8f:00:11:a8:ea:
                    5c:3e:a4:d4:e6:40:da:07:a4:fc:44:1b:84:fb:e6:
                    05:30:05:9b:91:f4:0b:f5:e3:e1:c0:71:50:8c:06:
                    61:1c:01:fa:c4:3a:83:f3:ae:cd:94:4c:93:b5:5e:
                    fe:3f:e0:ac:4d:f6:63:bc:74:f5:5e:9e:c9:4e:1f:
                    9d:54:60:16:dd:b1:39:39:0a:73:47:79:21:a6:48:
                    e8:2c:f1:c0:36:54:2b:5c:b3:ce:3c:2e:ec:a1:2e:
                    82:e1:13:c3:c8:64:80:37:74:30:74:38:9d:37:11:
                    15:c8:36:a7:21:6b:c9:31:1d:2f:5e:74:72:be:c1:
                    49:9d:d5:67:98:d6:b0:57:f8:54:0a:ce:96:a1:6e:
                    4f:8f:58:24:70:db:b1:26:bc:65:d1:46:6a:3d:26:
                    7a:b7:04:4b:cf:26:97:9a:ae:72:2b:6a:07:96:19:
                    0b:e9:ff:13:cc:81:d2:7d:27:23:b6:3f:5f:9f:58:
                    1e:a2:93:3c:30:ab:f7:11:8d:d0:0a:89:86:6e:ec:
                    bf:8e:28:a2:d8:51:04:fc:10:e9:75:82:26:ae:4a:
                    96:75:10:11:3e:47:a1:f8:8d:ec:5e:4c:ae:bb:4d:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:81:2F:75:8F:88:50:20:91:59:68:08:0F:1F:BB:AB:E8:2C:0D:B6
            X509v3 Authority Key Identifier:
                keyid:0B:9C:86:EB:74:2B:22:5C:FA:9D:FA:EE:27:87:17:9C:E2:CB:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:79:fe:b5:79:c3:02:26:9e:c7:29:75:fd:cb:17:68:d6:c5:
         79:8a:89:d8:a6:73:ea:62:03:36:f9:ab:b1:af:5e:23:8c:11:
         f3:6e:5d:7b:64:5b:22:74:81:03:7c:46:34:b7:c5:79:de:14:
         b8:c8:5c:b0:e4:18:c6:f7:2c:72:c8:6b:1b:56:7c:0b:5c:af:
         d4:14:22:1e:3e:e1:66:5b:ff:36:7b:dc:13:1d:cf:20:61:04:
         0a:79:ca:c3:52:b3:34:47:c0:a7:fa:50:44:33:23:2a:90:65:
         0c:14:8f:38:e1:fc:5b:29:45:5c:95:43:16:32:e5:f4:43:77:
         25:16:00:d5:33:d7:cf:3a:1a:9b:ca:13:c2:5c:23:ea:a1:0f:
         1b:58:62:6f:0f:53:6d:6e:43:fe:d7:64:dc:f9:77:85:1d:19:
         3f:06:c3:dd:de:fc:8f:0f:f3:f0:8a:22:df:3c:16:f6:52:b2:
         a8:bf:0e:00:0b:61:7a:b1:3a:57:b6:26:f1:0e:99:86:0d:52:
         07:8b:45:55:22:9d:2d:26:8e:3b:8d:eb:66:c7:f2:47:de:22:
         71:7a:e0:63:fd:cc:cc:20:6a:21:31:2f:78:b7:16:2f:ab:86:
         c6:3a:e6:56:97:94:68:2e:a8:ac:8f:a6:5d:e9:46:c7:a6:0b:
         31:5a:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 21:09:30 2025 by rpki-client