Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
File:                     oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json)
Hash identifier:          yn+JHBXtlThjWqpBQ8dnxk/AEuANlW5njqbu26LsXEw=
Subject key identifier:   A9:BF:A3:CC:03:20:15:66:4B:79:85:9F:B9:E1:CF:AE:60:D0:1C:54
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0DD8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
Manifest number:          0D97
Signing time:             Sat 25 Oct 2025 01:04:36 +0000
Manifest this update:     Sat 25 Oct 2025 01:04:35 +0000
Manifest next update:     Mon 27 Oct 2025 01:04:35 +0000
Files and hashes:         1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: 017EbU1c3AjZgr804Lq44918nOFFEXpogtJUEkBLQBs=)
                          2: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=)
                          3: 1B68AA0C46C411F0AE592FF5DAE4EC9C.roa (hash: QPJ/pgy5MDLWjEUGppoWDCqEirKoVOtAK5W3WyI3dAw=)
                          4: 0A71212446C511F0B3816D7DDAE4EC9C.roa (hash: lv7fLpV1Z39qFrGvYE0On9CzDUQDfcH7arejVv2X+68=)
                          5: ADF5650846C511F0973FEB81DAE4EC9C.roa (hash: 7CYfsacbUXhjLqOsEIQOYe+QrprQCfUiJVwPCRh/kdM=)
                          6: 604112CC46C411F0BB8EB378DAE4EC9C.roa (hash: oScXiYHUFpyKfI5HMFQh9nsi/SHG0VE3rIhh+0Ip3Q0=)
                          7: A50DC96846C411F0942BA07ADAE4EC9C.roa (hash: sHNAOfb/q+PcCzpw6rvPqasqMwLSMx1FINw08PTtxic=)
                          8: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=)
                          9: 81BE337A46C511F0BFE7DC7FDAE4EC9C.roa (hash: pVcKVq48gEV8Go0LDZVguyDOkfFxzydQPYrOqsO5Mxs=)
                          10: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=)
                          11: FBDC85FE280211EFA2470CDD7CDC24C2.roa (hash: N2LzgJndLmvz3cDIsfFkVtUTemoZkwL0xxlWsp4hwb0=)
                          12: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=)
                          13: 3FFE158246C411F0B4746278DAE4EC9C.roa (hash: JSi407PI78anMYfv+AOzcoeUknjbbweW9RVZYH6HG+Q=)
                          14: E931058846C411F0A1757E7BDAE4EC9C.roa (hash: EayQcb/gQt7YJ6Dhe3VUfGA8I0JKQX96b3m2dF4aJWU=)
                          15: E631424846C511F0802C0082DAE4EC9C.roa (hash: XDAB5XeuUP/8wavFXKpAQBTJhSuFwoK6JGeU6nezG7o=)
                          16: 4EA8246E46C511F089D87F7DDAE4EC9C.roa (hash: qjyPFtl59ffxyefqLmWJlRsBfN31sPgRtcOSrX+rkQE=)
                          17: 7A55532C46C311F0A855E5F0DAE4EC9C.roa (hash: rHdSgUS+SlwggCoWJZgjF6rhTUxpB3fhFGFetcNmcsE=)
                          18: DACADA1046C311F086D2CAF2DAE4EC9C.roa (hash: cCmcwJlgiJprQTyGetPh+w7SGAOJEFqm9EdH0ShanAk=)
                          19: 0D7A512846C611F0B4EAD183DAE4EC9C.roa (hash: +ER0d9RIe4bpJeWakTcMzMs/D2X/K+RHUk8EHXUsSzI=)
                          20: 2A6685A046C511F0B86F727DDAE4EC9C.roa (hash: HCT4XLH64I5ImsqzEiVDAlrxg3B90jJrq1xSnA/3dFo=)
                          21: B1D3717646C311F0BC7CC5F2DAE4EC9C.roa (hash: 9gcYwTjOWCFIZzi9rrNFrBl+xybAESXQxu1TkihsHTc=)
                          22: FCB7B1FC46C311F0AF749CF4DAE4EC9C.roa (hash: bSmxkooizIHzzHtegnD2xMlI/oPcsLP2bS8+oceldxA=)
                          23: C3C3FC5646C411F0957A397BDAE4EC9C.roa (hash: 6TBdH95t3nXF10Bz+Ap697yfZQbWnupWY7c4A0SeikU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 Oct 2025 00:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3544 (0xdd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Oct 25 01:04:35 2025 GMT
            Not After : Oct 27 01:04:35 2025 GMT
        Subject: CN=68fc2224-3281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:1c:c5:7d:f9:b3:dd:c4:2e:c7:f5:07:6a:
                    7e:03:0b:a2:29:05:9d:a5:90:8b:c6:d6:14:d8:89:
                    dc:46:47:6d:58:59:37:24:a0:12:7c:11:97:fc:c2:
                    1e:bd:13:27:84:fb:84:a8:bd:30:38:19:ab:f8:dc:
                    43:62:d9:24:81:12:bb:1d:99:7b:72:5f:c1:44:36:
                    8f:01:22:28:f7:16:7b:d5:11:4e:0e:f5:86:99:a6:
                    96:7b:6c:ab:7f:fa:2d:e9:59:fb:ab:4c:91:72:05:
                    ca:1c:c7:eb:7f:ca:c3:ee:29:fd:08:d0:b8:75:0e:
                    1f:43:31:95:73:57:79:9a:86:72:62:0f:4d:a0:40:
                    41:62:90:db:bc:07:54:f8:f1:ea:e6:03:c9:a6:4b:
                    c4:3d:a3:0c:44:aa:77:3a:a5:16:07:3e:ae:1e:a9:
                    c1:27:8a:6e:eb:41:c7:c6:74:96:b8:b0:0c:63:bb:
                    f1:a0:e4:ad:3e:09:f5:af:56:90:29:f5:16:dc:02:
                    6d:c9:69:d7:79:9a:ad:0c:39:28:fa:fa:15:e3:e8:
                    d5:12:a0:65:bb:b5:fb:46:3f:f5:bb:13:dc:cf:91:
                    56:e2:c0:7d:44:a9:ef:f4:63:11:98:cd:58:97:5e:
                    1b:6d:6b:db:f3:6f:d6:5f:bb:4d:cb:d9:ef:93:a1:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BF:A3:CC:03:20:15:66:4B:79:85:9F:B9:E1:CF:AE:60:D0:1C:54
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e1:85:44:aa:8b:53:72:4d:7d:35:77:0b:ec:36:c3:04:89:
         df:f8:ec:d7:ec:a1:80:5e:8e:8f:11:13:77:96:79:59:71:1e:
         8b:9f:7c:11:7e:e6:f5:d8:68:28:a3:8e:1b:d7:da:b8:6e:96:
         f3:8a:c0:f9:d0:bf:5a:04:87:02:7d:15:c4:8c:b3:74:d0:8e:
         52:4d:ab:c6:b9:c3:e5:9f:59:4c:c7:d9:2a:3f:8e:d7:38:b5:
         40:1a:bf:96:cd:dc:32:c1:ff:d9:7e:ab:37:d8:eb:2f:f0:2a:
         ea:40:0a:d2:da:a9:06:6d:d9:dd:8e:74:15:47:d0:4b:15:d4:
         71:b9:82:43:78:5b:21:fc:72:5c:74:28:d1:14:c0:d3:8d:53:
         d0:03:7e:f7:c7:db:5f:e7:95:37:31:e6:c1:ba:26:21:b9:3c:
         1a:06:3a:00:64:20:c5:e9:25:97:3b:dc:b2:90:61:11:8b:a7:
         5f:4e:13:89:c6:ea:d9:73:ec:77:f4:33:d3:8f:75:29:fc:98:
         00:11:50:2c:c9:c1:7a:a2:be:f9:d0:78:e5:b3:60:01:37:af:
         b0:ad:c7:3b:bb:64:80:18:40:04:a2:59:bb:39:17:3c:0a:f2:
         64:76:29:2a:84:36:59:ac:8c:d8:58:c4:97:76:43:7e:b0:93:
         be:e9:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:04:21 2025 by rpki-client