Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File:                     hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier:          zhdvMqqKf6y8cY9vwkC9JtkvgWUhjWAAUqIc/qVoqjk=
Subject key identifier:   E2:48:A4:9E:CB:D1:99:88:38:E9:21:B6:D3:FB:D2:73:17:CC:97:5E
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer:       /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number:          02A0
Signing time:             Tue 11 Nov 2025 08:19:31 +0000
Manifest this update:     Tue 11 Nov 2025 08:19:30 +0000
Manifest next update:     Thu 13 Nov 2025 08:19:30 +0000
Files and hashes:         1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: SRskMKL4d9LUzrS7WQhSgdRsvMIw/sYrrCPqheOW+/E=)
                          2: 0145205ABE9F11EEAB4694AB775412E6.roa (hash: nCtysz82HWpQKRVxjrkp1CPdrS4qO3BX0cqzzKNO/pQ=)
                          3: AC3D4D08BE9E11EEA64FBFAA775412E6.roa (hash: WfYokYZnTAkyut9ZfwPk7g8ZUxso2I/ndS+zQRque/A=)
                          4: 6CE0579ABE9E11EEBC7C69AA775412E6.roa (hash: kSDEs7oP+jey7M4wMBUDf1oTjGdLGimVQ2c+G5EoTkc=)
                          5: D3C327DABE9E11EE993106AB775412E6.roa (hash: JBKixCSDBI+8M+eUfX+NbM+TcRDwKlbGQLGKTvvPJkw=)
                          6: 8F2451D0BE9E11EEBA8196AA775412E6.roa (hash: 4AAd/b+kE9JKp63Wlhwua7XjTGFImGjuMiypLHiKkR8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 13 Nov 2025 08:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
        Validity
            Not Before: Nov 11 08:19:30 2025 GMT
            Not After : Nov 13 08:19:30 2025 GMT
        Subject: CN=6912f193-e0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:ac:41:85:74:03:c8:a1:ad:34:2f:26:27:
                    38:1d:67:16:aa:28:74:ac:a8:f3:2f:5d:7c:3a:e4:
                    b2:86:15:60:d6:c7:a0:c5:ba:0f:53:33:29:6f:48:
                    91:d8:3d:a1:89:5d:fe:af:92:70:e1:5f:f6:e2:d0:
                    76:d1:c5:e8:81:ee:24:69:6f:35:35:f2:cb:4d:3d:
                    01:2b:99:e5:9e:ca:fb:54:9f:a5:b5:04:67:22:ce:
                    16:50:dc:8c:f9:0c:d9:b7:d0:f7:f7:b8:99:4d:c1:
                    61:84:5e:f1:6b:5b:fe:9a:9a:9f:8b:33:04:75:52:
                    1a:7e:10:8e:7b:98:9c:19:60:cf:19:91:1b:39:c8:
                    ee:7f:cc:fe:8f:2d:88:95:41:36:eb:e8:01:d3:68:
                    69:c5:9b:3a:1a:3d:46:a0:da:84:fc:10:6f:e4:b0:
                    6c:f0:ad:d1:13:d1:bb:32:7e:22:39:e7:db:d8:e8:
                    67:5c:0e:ef:8a:e6:95:68:c6:49:d7:df:75:75:c9:
                    54:c8:bf:6f:dd:d1:91:11:f0:ab:ca:97:8c:da:a1:
                    d1:d5:90:31:d0:24:20:b5:36:6b:e6:58:4f:fe:61:
                    eb:a2:af:71:a6:ad:f3:c2:a1:97:6b:45:c9:48:1d:
                    f8:3e:80:ca:4e:56:23:89:ed:11:99:75:2b:e1:80:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:48:A4:9E:CB:D1:99:88:38:E9:21:B6:D3:FB:D2:73:17:CC:97:5E
            X509v3 Authority Key Identifier:
                keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b0:28:b4:df:d8:a5:5c:6a:3b:fe:af:25:e4:da:00:35:06:
         40:29:78:8e:98:d5:84:62:42:24:24:d9:08:d8:e4:0a:35:c2:
         a1:11:db:c3:fe:92:d1:2f:6e:2f:35:a1:79:92:1d:cd:af:6a:
         68:af:e2:b4:57:59:e0:70:6b:96:9e:4d:9e:76:af:fd:ca:9f:
         98:04:d6:bb:6f:0a:11:63:22:bf:48:a3:fe:fe:8f:74:94:0e:
         0c:ce:87:92:a3:e9:e9:b1:43:73:f3:2a:1f:de:88:62:8f:00:
         a7:fc:cc:67:cf:ec:c5:b3:64:0d:53:df:8c:99:81:9f:35:cc:
         6e:72:0d:78:c3:9a:4a:40:db:46:78:dd:bb:8e:04:c6:dd:c8:
         97:63:14:42:96:a8:f1:53:ae:15:22:7f:47:0a:e3:bf:e6:8c:
         e5:13:90:a6:e0:9c:4d:4c:0f:e3:40:16:5c:a9:3d:e2:9b:fd:
         a4:77:88:6c:18:23:81:35:a5:ed:14:50:9f:a1:e5:67:f1:8a:
         43:49:91:23:61:6e:42:46:fd:6d:9d:f1:3e:74:f4:75:df:d5:
         21:04:51:5d:da:ce:53:08:c4:b8:a1:38:63:3f:66:91:d7:e6:
         a3:ac:d2:e4:b3:de:3f:01:e2:7b:28:25:c3:b3:cc:79:3b:94:
         5d:32:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 02:13:13 2025 by rpki-client