Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
File:                     F43e-Ls8_k--ATuSO8iuItZFswI.mft (raw, json)
Hash identifier:          4o1ibGm2kcEe8GoSDjxpKdGPi9iPAf22TPsU30p0e1s=
Subject key identifier:   5E:EC:76:86:52:8C:A4:A3:F6:9C:75:45:93:E0:E1:27:D4:A3:04:53
Authority key identifier: 17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
Certificate issuer:       /CN=F365958DAF/serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
Certificate serial:       0128
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
Manifest number:          0120
Signing time:             Tue 11 Nov 2025 09:10:52 +0000
Manifest this update:     Tue 11 Nov 2025 09:10:52 +0000
Manifest next update:     Thu 13 Nov 2025 09:10:52 +0000
Files and hashes:         1: F43e-Ls8_k--ATuSO8iuItZFswI.crl (hash: BtbiFMA8WvVnsW0K82T93zCw5mqYjHKp9tPhtDMw158=)
                          2: 97ED3ED0F37211EFB23FFA43762E951A.roa (hash: FgbPNGuclB/D94qa7xSHa4fIjOIEEHBK2ubtWZfrs/8=)
                          3: 2B0D0D36F44411EF9C7CC663762E951A.roa (hash: 2Q8qL5N57SGyAwSmdLGbK9RkrcemAnA+9vfe4IdCPTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 13 Nov 2025 09:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365958DAF, serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
        Validity
            Not Before: Nov 11 09:10:52 2025 GMT
            Not After : Nov 13 09:10:52 2025 GMT
        Subject: CN=6912fd9c-20bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:49:ff:ae:25:d3:50:26:e3:94:86:fd:3d:
                    5a:4f:10:0c:35:55:0b:b4:34:56:bd:19:05:ad:54:
                    0f:4f:98:ff:3a:36:6f:77:3b:03:d0:94:84:5b:db:
                    31:b9:f3:45:f8:e1:9d:42:32:38:6b:a4:f5:65:e4:
                    5b:41:38:65:f2:b1:20:9e:50:ef:a0:dd:d1:e4:f9:
                    58:f3:cf:5c:42:81:b1:e2:3e:4b:b8:e0:1e:45:4a:
                    85:ef:e1:74:cf:78:8f:37:ee:c6:88:94:05:12:57:
                    24:bc:b1:36:a9:d3:a5:c6:11:12:25:91:67:b9:51:
                    d6:56:f8:5c:6f:4b:b2:45:6b:c1:75:2e:37:0d:6a:
                    36:27:35:86:32:8a:2a:38:c7:df:69:93:40:ca:76:
                    77:5e:fd:9b:bb:2f:1d:65:06:70:16:50:a7:15:90:
                    58:70:4a:0e:32:d6:80:cd:c2:d1:1b:a2:44:0a:7a:
                    04:15:b5:c3:ee:59:da:22:75:45:a7:85:9b:4f:1a:
                    26:db:33:64:c0:1c:0c:49:19:da:14:30:f0:a7:0c:
                    73:2c:38:e3:92:e0:19:b1:d5:b5:a8:c5:b8:98:5c:
                    9e:93:15:53:7c:b1:bd:b2:02:c8:f8:f0:30:91:a2:
                    2d:a2:ca:c9:2b:ac:4d:9e:6c:d7:2d:00:ef:03:ba:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EC:76:86:52:8C:A4:A3:F6:9C:75:45:93:E0:E1:27:D4:A3:04:53
            X509v3 Authority Key Identifier:
                keyid:17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:de:42:1c:26:d1:b8:b0:f4:6c:7a:2b:72:86:8c:47:e5:35:
         e7:ee:ae:3e:fc:e1:6a:26:7c:15:43:22:e0:d0:9e:75:51:ca:
         ac:63:8f:47:32:82:ca:2b:15:35:9c:cf:20:99:f6:ad:6e:a1:
         04:cf:a1:b2:ea:c9:93:bc:1f:e1:c4:1c:40:df:4e:81:e2:fc:
         bf:38:11:f8:15:c2:21:5c:23:22:41:22:73:3b:d9:da:06:c8:
         27:e7:3e:03:21:9f:8d:60:e6:45:2d:50:9d:20:01:3c:d6:3c:
         b9:e6:e5:82:c5:c6:a9:4d:d9:10:0b:ec:a0:e3:89:7b:e6:9a:
         23:e9:a3:fa:b5:07:a7:d2:c8:f5:8b:5f:cf:37:9b:7f:0d:06:
         13:60:10:6d:65:b5:80:34:e7:8c:91:f3:73:df:5f:8b:23:b8:
         ac:b8:f6:b9:7c:03:ae:28:0b:29:09:f6:89:2f:c0:83:52:b9:
         74:4d:81:41:99:be:9b:36:aa:41:d1:69:3a:10:a5:74:13:15:
         53:2e:cc:07:c5:0a:8b:68:0d:c5:38:07:37:8d:ad:af:2d:b2:
         1d:68:ee:33:d4:5e:9a:ed:dd:11:6d:a4:df:55:e5:cf:69:f1:
         33:df:1e:52:2c:0a:26:a1:02:8b:d4:b5:86:99:23:2a:93:02:
         fa:e6:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 21:09:16 2025 by rpki-client