Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
File:                     4CGdWkzYWCxPN-LQ3dcGt369n2w.mft (raw, json)
Hash identifier:          aZuyUh2ymTH+LgKeAm61YsDHSS5TSL418iRTXyjdbjs=
Subject key identifier:   08:31:3F:E7:E9:77:A0:0C:ED:00:C1:00:3A:72:16:62:25:F7:BA:93
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Certificate issuer:       /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial:       0544
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
Manifest number:          0538
Signing time:             Tue 04 Nov 2025 04:00:34 +0000
Manifest this update:     Tue 04 Nov 2025 04:00:33 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:33 +0000
Files and hashes:         1: 4CGdWkzYWCxPN-LQ3dcGt369n2w.crl (hash: SsM8gC7rr05q3a3bqCoOJlUDHa2vYeSRijQa6AbPaPk=)
                          2: 43499CAEE06111EEAD369C57775412E6.roa (hash: BqZi3Jf+58/WulzjWYWd6LnvU4vDKMabeieGFixEMoQ=)
                          3: B3406C3EE06311EE9DC9645B775412E6.roa (hash: ogaYGhijbZfnfBJbAW8m4J3DjXL9JovFwrfT8ageG8c=)
                          4: DB465DA6B4E311EFA8F972A4762E951A.roa (hash: 5Ro/c8k2EIEZwXt4asg5FxzHwnNASkytkLZTM9VOEcs=)
                          5: 9F17036CB4E311EFA49155A2762E951A.roa (hash: 2C24tlmlmQoVBKJcwa/9lKskZnvpTPiXWbc/dzfOkws=)
                          6: 107A839AD49C11EE8138FA6E775412E6.roa (hash: NbPQB72+8cMeXRD62I/wbwttaa2xbNKWZ7NyDUoCiQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
        Validity
            Not Before: Nov  4 04:00:33 2025 GMT
            Not After : Nov  6 04:00:33 2025 GMT
        Subject: CN=69097a62-8304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:49:19:ce:36:cf:2b:9e:09:0d:f0:74:be:
                    45:08:bd:3e:33:05:a7:60:d2:fa:73:fb:a7:3d:1d:
                    3c:1b:48:dd:f6:06:de:77:5f:64:de:f3:0b:16:3b:
                    bd:7b:0d:af:0a:41:4f:7f:b8:bc:3c:61:0e:d7:10:
                    77:db:11:d4:f7:b6:9d:3b:ba:02:dc:1f:e3:a1:b6:
                    3f:71:01:7e:a9:8e:c9:dc:62:45:8d:87:54:d4:ed:
                    a3:86:fc:c3:30:8c:88:75:d6:6d:58:f6:ea:04:52:
                    04:40:73:5c:45:6e:ca:80:b6:bb:35:05:b0:ae:9c:
                    d7:7c:51:33:2c:67:5a:e5:bc:16:ea:f1:1a:f9:00:
                    37:0f:5f:f9:84:68:c7:7e:94:68:c2:4c:7e:b5:27:
                    05:ef:df:7c:1a:46:a8:5b:a5:5f:5d:a7:84:29:69:
                    fb:28:9e:15:1d:09:fd:ba:23:34:2b:e4:3c:c8:d8:
                    95:3a:dd:44:1b:a2:70:25:9f:09:e6:5d:c2:c2:96:
                    05:af:ff:a2:19:5c:30:3a:ff:f4:95:ad:c1:a2:27:
                    b3:9c:e3:f9:06:58:00:4e:ea:f1:83:97:ee:ee:87:
                    70:c5:b1:62:17:06:cf:fa:91:4e:4d:4e:68:b5:5b:
                    85:46:8b:cf:b5:4a:7c:91:e6:a4:53:cf:5a:06:36:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:31:3F:E7:E9:77:A0:0C:ED:00:C1:00:3A:72:16:62:25:F7:BA:93
            X509v3 Authority Key Identifier:
                keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:59:00:64:1e:8b:d8:00:07:6c:80:26:c2:5f:cc:6e:27:
         b1:67:de:cc:a7:a7:84:b8:76:2a:ce:96:1e:3b:9c:ca:0f:25:
         b7:8c:a1:f9:f6:d0:7a:08:23:0e:e3:29:58:76:95:02:ef:ff:
         1a:44:7a:39:16:d2:8c:cb:0a:9b:43:be:d8:ac:e7:2a:72:d9:
         fa:8a:4e:74:f6:83:65:0d:14:a3:3b:99:8c:58:5d:80:be:c9:
         64:15:58:e2:57:70:6d:a2:de:16:9d:12:75:e4:3b:4a:70:08:
         70:d5:fa:dc:5d:f7:e8:62:5e:e4:02:31:df:83:7c:09:d9:ae:
         72:40:05:a7:4c:dd:b7:25:eb:41:91:8c:84:10:b0:d1:62:f5:
         4d:80:02:4a:b6:5a:7b:3b:d8:fa:e8:25:c0:3f:9a:99:de:c4:
         85:05:6d:b5:7c:62:eb:d8:18:58:2a:0b:d0:5d:1d:78:d5:91:
         d2:7b:84:9c:0f:6f:6c:7c:31:d4:e5:1a:ca:8b:77:16:92:83:
         6c:0a:c6:c4:ce:fa:b4:8f:dc:19:17:61:cf:02:91:a5:5b:eb:
         bb:49:4a:a0:9e:bc:6c:84:da:e2:e3:04:ff:5b:22:10:42:85:
         12:a5:4b:3a:c7:86:e0:f8:e2:cb:01:b6:48:37:af:53:71:3a:
         99:61:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:40 2025 by rpki-client