Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier:          6fXl57oQccmtS48M0h4xu18WfL9jAsG8WtpEYKP5VrQ=
Subject key identifier:   D7:9D:0F:1B:0D:F6:0D:25:79:14:77:BF:FE:3A:F1:01:51:C2:BF:15
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer:       /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial:       0262
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number:          025A
Signing time:             Thu 18 Sep 2025 04:05:05 +0000
Manifest this update:     Thu 18 Sep 2025 04:05:04 +0000
Manifest next update:     Sat 20 Sep 2025 04:05:04 +0000
Files and hashes:         1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: nkLdQxf88KEPLWQYp8p8ByQPRIOFKhLpSkRyprzk+oo=)
                          2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
                          3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
                          4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
                          5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
                          6: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Validity
            Not Before: Sep 18 04:05:04 2025 GMT
            Not After : Sep 20 04:05:04 2025 GMT
        Subject: CN=68cb84f1-b49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:79:c0:ae:45:ce:60:31:48:ed:1a:eb:bd:
                    da:10:ee:4a:22:ac:2a:06:df:33:bb:71:4d:ee:7d:
                    f1:9e:f6:17:1b:5c:11:45:ab:76:a3:53:e2:d8:4c:
                    5f:0c:f4:a2:9b:cf:df:09:91:08:1a:88:e2:32:95:
                    12:48:a6:0b:1b:34:f2:6f:8f:a8:36:f0:3e:55:46:
                    6e:27:61:99:97:b1:01:52:67:0e:89:6a:30:38:6d:
                    b1:cb:93:ec:34:d2:9c:43:47:c4:d6:1c:d3:8f:3b:
                    48:73:9d:4b:71:d7:ec:a5:8a:be:86:6a:42:66:7e:
                    21:4b:a4:ba:c7:04:f7:e6:58:92:35:ce:42:04:e2:
                    02:ac:1f:95:74:2a:e6:f8:0e:e0:a1:12:fc:b9:e0:
                    33:4e:60:01:d8:49:90:04:37:32:92:e1:53:17:ed:
                    c5:06:b7:d2:79:27:02:8a:1c:02:67:fd:19:10:8e:
                    31:f6:ed:af:b3:62:fe:94:ef:0b:65:a0:95:5a:aa:
                    72:c0:b3:14:eb:ff:6e:b9:cb:c2:6e:09:32:4e:da:
                    2b:65:02:b0:70:82:cd:31:a7:74:bc:dd:d7:16:7b:
                    d7:2b:35:80:85:46:9e:98:72:c1:e0:9d:7a:88:fc:
                    f2:44:28:03:0b:ff:6b:08:d1:4d:34:e2:ab:6c:86:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9D:0F:1B:0D:F6:0D:25:79:14:77:BF:FE:3A:F1:01:51:C2:BF:15
            X509v3 Authority Key Identifier:
                keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:99:09:1b:97:24:a4:54:10:20:c3:e1:05:0b:f6:f7:b8:62:
         12:4a:cb:f4:f2:69:13:03:71:7a:02:da:f4:c5:28:c1:12:59:
         07:48:fb:86:59:14:11:28:4e:1c:7a:49:cb:95:83:a3:48:66:
         b1:4c:d2:f7:b1:3a:f8:6e:c8:90:df:32:e2:7d:3a:41:2c:cb:
         07:54:c4:a2:42:51:09:ca:be:0e:02:f2:ec:1b:17:91:2e:68:
         6d:87:cc:1e:36:48:fa:6c:04:7e:fe:89:8e:38:55:03:b2:fb:
         56:89:df:27:7f:3c:2e:26:16:bc:19:e1:65:69:dc:19:97:72:
         24:13:c1:72:99:89:16:e2:b2:65:61:a5:a1:2f:2f:34:52:43:
         02:c9:1f:74:b9:1a:ae:bb:e4:c9:57:7e:16:bf:e3:52:85:cd:
         5c:c7:82:ec:da:a3:fd:d4:a7:3d:c2:10:e5:7a:6c:c8:c1:32:
         72:4b:55:34:85:67:36:83:f7:8e:00:81:61:ec:27:a7:dc:2f:
         1d:17:e0:4a:0d:e6:ba:52:fb:91:ee:80:3a:43:87:54:6d:11:
         49:52:a4:c3:be:fe:b6:3e:68:2d:b6:c5:0f:e5:d8:75:61:68:
         75:70:07:c5:a9:5a:43:97:5e:50:85:3e:10:d8:4d:c9:d1:1e:
         02:c4:72:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:02:33 2025 by rpki-client