Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File:                     5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier:          XLMNc0qNhXhOKhrycIWEX9tS3mLo2nQAsCZ1eStbfks=
Subject key identifier:   B9:96:81:AC:6E:30:10:8A:5B:5B:F4:2C:A8:9F:6D:F8:6A:B7:B5:CA
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       0E6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number:          0E6B
Signing time:             Thu 18 Sep 2025 00:58:13 +0000
Manifest this update:     Thu 18 Sep 2025 00:58:13 +0000
Manifest next update:     Sat 20 Sep 2025 00:58:13 +0000
Files and hashes:         1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: 0S8GoGXPrwuXChgoxb9vJ5wwKaRAIJwyZJ36ekKrB9E=)
                          2: 97EFF9FE41C911E6974C3715F8AEA228.roa (hash: PV1x2NuqP503+6sU0r3JzrSccMtiDFB0mgrEAngyzh8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3693 (0xe6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF, serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Sep 18 00:58:13 2025 GMT
            Not After : Sep 20 00:58:13 2025 GMT
        Subject: CN=68cb5925-3c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:0c:3e:40:03:ec:e7:f6:1d:5d:bc:42:3e:
                    f2:b5:43:51:6a:58:36:18:26:0f:b3:fa:c5:3b:69:
                    9e:0c:7b:76:7a:0d:00:76:1a:52:7b:cf:a9:39:cc:
                    f7:6d:c4:64:c1:f8:61:2f:e9:9e:f8:f5:dc:1e:9d:
                    6b:97:c2:43:e7:da:a3:c3:ea:c3:2b:02:3b:09:4c:
                    47:97:f2:f4:94:3e:c2:2a:c7:48:de:99:9b:ee:5b:
                    14:4c:e1:66:d0:c3:eb:03:ea:67:95:e4:f4:48:03:
                    7c:83:9e:c1:ec:9d:09:80:60:08:82:04:10:5a:44:
                    87:27:32:62:12:f9:da:8f:47:7b:af:fd:e0:08:a0:
                    9f:be:1c:8d:04:d5:3e:31:17:a4:68:63:a9:4f:e0:
                    12:cf:03:8d:9b:ff:2f:cd:fa:2d:e3:ee:fe:07:a3:
                    92:07:fb:be:cf:e2:47:4a:8a:ea:43:26:2f:f5:58:
                    0e:e7:e4:98:c8:f4:e0:2f:a4:4d:c7:b2:00:80:63:
                    e4:df:06:ec:59:9f:2f:cd:8c:3c:f1:4c:2c:b4:a4:
                    f2:a8:0e:f1:f3:ad:4e:61:f8:3b:6a:9d:df:66:00:
                    57:55:9d:03:1c:96:d6:6f:43:bf:a6:6a:2d:ec:b3:
                    c1:c2:14:fc:ac:89:9d:38:f6:57:b1:c6:de:91:45:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:81:AC:6E:30:10:8A:5B:5B:F4:2C:A8:9F:6D:F8:6A:B7:B5:CA
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:67:0a:d4:4d:a2:11:c4:0c:51:7c:d6:cc:15:0f:22:09:
         4f:4a:77:ae:82:e6:ec:a2:60:f5:7a:9d:f0:8c:33:ac:20:f2:
         8a:2e:ff:41:f5:5e:89:de:12:af:60:55:c5:19:37:49:20:e7:
         93:b9:1d:d6:f2:5d:40:79:c4:39:94:a8:55:52:55:cf:15:df:
         fb:02:a3:85:c8:6e:0e:24:11:8a:0b:0b:76:66:fe:f6:72:6d:
         d9:47:9f:28:7d:cd:0b:cd:0d:27:2f:28:ba:35:f9:f7:16:d7:
         b9:82:f8:9e:b9:28:04:da:94:45:00:e4:c2:08:98:e2:92:97:
         83:9c:74:cb:3b:5e:0d:50:5e:b2:ec:78:08:60:65:34:36:55:
         37:78:d6:68:91:63:b8:6e:9e:2f:15:89:79:e2:d1:2d:98:f2:
         9c:ef:be:ec:2b:ba:94:fc:f4:88:1d:7f:4a:ac:29:7d:4e:de:
         44:24:96:27:9b:f6:95:db:7d:70:f1:26:2b:08:d3:d7:8d:d9:
         14:a8:e7:d6:f2:04:1f:ee:6f:73:5c:08:f9:bb:42:44:24:54:
         94:f7:fd:e5:bd:13:e3:3e:36:41:16:87:ea:c5:3f:7a:64:d2:
         5d:18:1e:46:e3:34:31:e9:65:20:2a:4d:bd:d7:dc:49:f0:4b:
         8f:46:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:58:12 2025 by rpki-client