Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
File:                     Wo8buWCAiFj8QkqfycBtSBLbpck.mft (raw, json)
Hash identifier:          OXsGQDNhnbB5g2BxUd8KHOFp0Elh/Q3w3ns1ZlIBNSs=
Subject key identifier:   4E:02:5D:BD:5B:96:07:FE:0A:28:F3:7D:DB:4C:20:CB:46:33:19:19
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Certificate issuer:       /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
Manifest number:          14
Signing time:             Thu 23 Oct 2025 05:17:57 +0000
Manifest this update:     Thu 23 Oct 2025 05:17:56 +0000
Manifest next update:     Sat 25 Oct 2025 05:17:56 +0000
Files and hashes:         1: Wo8buWCAiFj8QkqfycBtSBLbpck.crl (hash: sWNuz+EnGTZY1ouZ1kQVqWTZ59oBf4A2g6dKjfo2WK4=)
                          2: 6BB0CB74A5A711F088912BE0DAE4EC9C.roa (hash: kB1JbNoc3dBbzjmuhT2h2aENGY9tktmvJCxAT5G6HGQ=)
                          3: C12F71DCA5A611F0BB0100DCDAE4EC9C.roa (hash: w1R/Z75m4LwLFTF/R9uWaQzBzmjS2340Mo7wnJRbDMU=)
                          4: A76D8A26A5A711F0A78F18E4DAE4EC9C.roa (hash: 6CaRM2rDr+QwVYyHhyo41L4CTKodqz58c3JN0Cxc7P4=)
                          5: 8C8563DCA5A711F094950AE4DAE4EC9C.roa (hash: uGJxn0kxFVH+xnXPU0sjbovtNrHfisJTKGGgqWfUSLs=)
                          6: 4C01EE48A5A711F0986AEDDFDAE4EC9C.roa (hash: A7s5OPs1SpF17uQimMrgNTFUslRSjoE44d+zkAoaVyc=)
                          7: 24DDD1C4A5A711F09981CADFDAE4EC9C.roa (hash: VMl5oou874hFWogxEQIYM0u11ETAx2cwP1WKWFliKgk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Oct 2025 00:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
        Validity
            Not Before: Oct 23 05:17:56 2025 GMT
            Not After : Oct 25 05:17:56 2025 GMT
        Subject: CN=68f9ba85-6b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:c4:ae:8c:40:84:ab:e2:d7:88:35:43:25:
                    b4:ea:f6:33:3c:cb:82:43:e6:d7:03:a6:9d:dd:47:
                    3a:11:4b:0e:b0:01:df:64:fe:14:96:8a:1a:c8:35:
                    0e:9a:fc:a5:56:32:1d:77:64:6f:92:ec:d2:62:a7:
                    ce:0e:ad:7b:8a:73:fe:94:f7:a2:bb:0b:4e:4f:59:
                    71:fb:12:e5:27:b6:9b:36:25:e9:ba:b7:70:32:4a:
                    21:f9:34:13:f8:af:df:6d:aa:04:75:47:af:3f:a1:
                    5e:b7:01:a2:01:82:94:7e:01:fe:41:a7:f9:59:c9:
                    24:02:89:7a:f8:c8:ae:2d:78:62:bb:2b:7c:e4:a3:
                    eb:5a:a5:3f:63:ee:8c:92:cc:d0:05:8a:2a:79:f1:
                    03:b4:17:95:60:1e:34:e7:82:f0:62:55:a3:69:21:
                    97:1a:0e:00:c4:d4:bb:db:fb:1b:7a:ce:c5:b0:9d:
                    39:04:5d:62:c6:81:40:f6:ec:ac:89:2a:33:a6:af:
                    6e:fe:64:a2:25:80:83:63:66:ea:f5:b4:58:c6:61:
                    f7:69:e9:83:6d:73:15:2f:51:43:04:68:12:d5:d6:
                    22:51:5c:3f:d0:13:8c:2f:cb:79:8e:46:eb:68:b1:
                    e7:41:6d:da:dc:a2:17:be:53:0e:3c:ff:6a:8f:8f:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:02:5D:BD:5B:96:07:FE:0A:28:F3:7D:DB:4C:20:CB:46:33:19:19
            X509v3 Authority Key Identifier:
                keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:60:fa:73:5f:d1:17:9a:30:c4:ea:4b:82:53:e9:de:63:
         f0:14:79:de:c6:40:c1:94:46:8f:e8:2c:1e:a7:c4:b0:b6:c5:
         0f:1b:7d:5a:93:f8:45:f6:df:4e:1f:00:8c:60:a4:52:33:0f:
         58:b5:aa:cb:1c:fd:ad:2a:fc:57:36:35:d6:36:80:1c:6a:bb:
         e2:03:86:c5:e5:46:99:74:9c:8e:4b:a5:3a:20:24:58:0f:11:
         eb:f4:5c:2b:93:cf:c8:75:ad:67:b8:30:4d:bc:bd:17:83:d5:
         5e:99:b5:05:d3:e8:68:96:dd:26:3e:0f:8f:28:01:08:e7:8f:
         a9:93:df:41:bb:c8:0e:d7:c4:24:1f:f9:b3:48:93:03:92:a4:
         b9:53:11:43:5c:ec:26:1c:da:13:67:7d:3d:d7:5d:19:5c:49:
         5d:7f:6f:fe:26:a3:fa:d5:94:82:91:0a:7f:d5:7d:1a:96:56:
         65:4a:cc:7b:0b:75:30:bc:f9:f6:6a:a6:de:5d:38:09:46:b2:
         3f:b7:ba:42:a5:ef:34:37:47:68:fd:bd:db:7d:ba:a6:67:bd:
         4b:99:e9:48:1a:4f:75:9c:f9:1a:08:aa:91:43:d8:e4:d0:10:
         fb:5d:08:9e:00:a9:16:e9:1a:41:43:5f:fc:ea:b8:7d:57:ed:
         e9:f8:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:38:47 2025 by rpki-client