
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          qNWn82cpowgZOZ06eCDy3B4NAd7KyvfcVA5Mn4uiCN8=
Subject key identifier:   65:88:6C:D6:DC:4F:7C:E2:B7:67:98:83:46:AE:33:5B:BA:59:91:56
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       02B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          02AE
Signing time:             Tue 04 Nov 2025 05:17:41 +0000
Manifest this update:     Tue 04 Nov 2025 05:17:40 +0000
Manifest next update:     Thu 06 Nov 2025 05:17:40 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: wvJ0uaQpmWGTx6Fp1bkeIr4gzGQuTrO6lz/3EUIn7bk=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Nov  4 05:17:40 2025 GMT
            Not After : Nov  6 05:17:40 2025 GMT
        Subject: CN=69098c75-c3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:65:9d:85:40:34:4c:4f:c8:10:5b:8d:c6:e8:
                    c2:e2:ad:53:ea:2d:5e:a4:16:ea:85:69:43:9b:d1:
                    bc:8f:f2:1e:88:5f:a0:0c:7c:eb:39:40:16:34:e7:
                    4e:96:cb:85:c1:c0:fb:fd:62:b6:6d:c4:7b:a5:ad:
                    90:4e:ad:c0:f2:b6:1c:d6:37:26:32:9d:68:db:a5:
                    89:cf:5e:0a:f6:a5:92:7d:b1:4c:bb:c1:3c:51:bc:
                    9a:89:7d:3e:67:1e:c6:20:a4:79:53:fd:1b:68:00:
                    07:45:75:5d:d8:7e:2f:2a:f7:6b:8c:3b:d1:3d:43:
                    c6:3e:4b:c8:48:9e:07:5c:08:d4:99:d0:01:5d:7c:
                    12:d2:78:e8:9f:dc:63:db:35:0f:85:a4:72:be:d3:
                    fb:5d:5b:c3:66:3e:73:80:5f:24:c5:2a:c1:68:de:
                    fb:9a:de:de:60:1c:a1:74:be:c9:11:a6:03:ce:7b:
                    81:a8:e3:53:e0:28:29:aa:ec:3b:95:6e:ab:c1:20:
                    42:cc:55:39:7f:49:c9:5d:40:d5:40:b0:99:94:07:
                    d2:dc:6d:f1:04:b8:f8:21:fc:a9:bc:f3:54:48:ae:
                    ac:b4:fe:65:cb:88:b3:90:63:e4:d8:1d:72:06:d1:
                    26:66:89:ea:6e:2f:4a:8e:d8:9d:b8:d3:3c:87:d5:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:88:6C:D6:DC:4F:7C:E2:B7:67:98:83:46:AE:33:5B:BA:59:91:56
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         01:f1:36:f5:d6:99:ed:61:42:83:88:bd:73:68:74:ca:c8:2e:
         49:63:c9:1f:55:29:41:f8:dc:2b:89:b6:d9:8f:68:8e:c1:21:
         9b:94:9b:ce:bc:7d:39:92:7a:85:6d:43:cb:2b:f4:36:2f:16:
         0f:63:2d:88:3f:2d:e7:36:0c:ba:52:a9:7a:83:c7:09:ee:de:
         fa:db:08:74:fb:4e:e0:af:1a:04:4f:4f:47:09:83:d9:d2:71:
         05:30:5b:33:f5:01:35:96:f8:7d:c5:ca:20:ff:59:1e:42:55:
         74:72:95:fc:2f:95:1c:40:c6:d3:1b:15:62:86:a3:79:5b:7a:
         d2:26:b9:c8:c7:8c:bc:d0:36:53:0b:07:e5:8d:54:76:a3:ea:
         db:e4:98:5d:84:b8:02:ee:09:8d:73:08:14:af:bb:79:f9:bd:
         4f:db:20:f5:33:67:f2:dd:4a:da:52:9d:09:41:da:10:e8:74:
         61:dc:04:53:3e:a5:f8:5b:12:c0:79:44:59:e3:43:2d:92:d8:
         d3:b4:e3:7c:e1:39:14:b4:ca:4d:6e:c3:db:a8:a0:92:5d:5f:
         94:eb:9c:6d:6e:01:5f:c7:1e:e2:03:2f:8f:48:e6:dd:83:f9:
         cd:0e:c7:e1:a0:0f:5b:0d:91:e3:07:49:f8:2f:43:b9:6b:60:
         42:26:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:55:18 2025 by rpki-client