Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          LCn/zQzUuVzqCLrzImcfVK83MUTbpDsrC8VwCb1TiGM=
Subject key identifier:   CC:45:B2:4B:54:02:5A:9E:DC:AF:63:53:B5:69:0B:E7:3D:C4:DF:EE
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       0611
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          060E
Signing time:             Tue 11 Nov 2025 06:43:33 +0000
Manifest this update:     Tue 11 Nov 2025 06:43:32 +0000
Manifest next update:     Thu 13 Nov 2025 06:43:32 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: zNNJOSL60wtgTMLUBMDq5DXmccvRDZn+BQt9Z53EAJU=)
                          2: 951EA1701F7811ECB1D1961AD8A014CE.roa (hash: 1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=)
                          3: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          4: E739D1BE1F7811ECBE14071BD8A014CE.roa (hash: XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 13 Nov 2025 06:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Nov 11 06:43:32 2025 GMT
            Not After : Nov 13 06:43:32 2025 GMT
        Subject: CN=6912db15-6a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:91:b6:b8:cc:7d:ea:8e:cc:72:3c:39:eb:
                    2d:e2:1c:59:f6:18:04:9b:ff:b9:ef:f0:a8:ec:93:
                    d4:2b:74:88:82:89:54:78:01:e1:f7:11:f7:55:7b:
                    15:3f:25:d8:46:eb:7f:f4:56:0e:a3:18:39:d8:cc:
                    9f:d9:78:42:12:5f:92:7d:dc:45:45:99:4d:19:73:
                    31:08:b2:4c:66:f1:46:e4:de:b7:ab:27:96:f2:9f:
                    2b:ef:2f:0f:51:c2:6e:b4:dd:aa:62:0b:43:f1:4b:
                    30:c2:4d:0d:6f:d5:5b:52:fe:74:01:e2:8f:57:a8:
                    be:41:f9:cc:11:0a:3e:0d:29:8b:ec:00:2d:af:f3:
                    1e:1d:85:5d:cd:78:58:6d:c9:c8:d7:57:85:b1:65:
                    c7:94:af:d0:43:1b:d7:26:95:6a:68:0d:c0:03:f2:
                    05:e1:69:38:de:80:50:63:32:0d:93:35:83:4f:79:
                    26:b1:22:a0:a4:bd:dc:85:b4:11:87:c1:f0:1e:0a:
                    4b:cf:21:d5:a8:dc:73:c0:87:53:29:93:30:8c:bb:
                    2c:af:96:9e:de:c5:ed:c6:e0:cc:aa:63:25:1d:0b:
                    e2:44:75:b2:b5:f4:4f:85:87:bf:d6:1f:6c:a1:f4:
                    85:f2:c2:a8:f0:77:20:70:00:44:a1:f3:fa:72:ca:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:B2:4B:54:02:5A:9E:DC:AF:63:53:B5:69:0B:E7:3D:C4:DF:EE
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:db:60:b8:fb:c0:2e:a4:49:35:44:a4:38:12:a7:f4:86:73:
         cc:e8:3d:94:0b:16:1c:4f:cc:10:63:0f:53:3d:d9:1a:8d:34:
         b6:55:53:bd:23:47:8f:f8:ef:5b:6a:af:e2:dd:2a:54:a3:2f:
         37:6d:41:4b:c2:c6:ba:66:0a:be:fc:33:3c:4f:83:c5:9f:84:
         c1:17:08:d5:32:42:84:16:fd:d8:24:e7:e6:5c:61:10:b6:30:
         fe:fe:ee:77:83:5b:e1:80:c3:dc:69:5b:c0:71:8a:9f:35:09:
         17:48:8f:8b:ed:f6:95:61:cf:46:b5:df:af:c6:d8:de:a4:99:
         3b:ec:af:fb:0b:6b:a4:cf:33:2a:89:a8:14:93:16:45:0d:90:
         b2:73:1c:d7:c7:74:5d:ef:99:3b:3e:88:1d:36:df:d0:0d:bd:
         7f:59:bc:a0:04:9b:a2:bd:29:26:17:9d:e5:36:28:8e:21:e2:
         c9:a9:0d:02:ff:d5:e3:37:66:6d:9b:7c:a7:39:e2:d3:87:4f:
         bf:00:aa:98:ff:c1:d6:b1:e3:4f:53:bf:1a:fc:d9:32:22:e7:
         6c:8b:17:b7:f2:c1:ec:1b:10:af:cc:bc:ff:de:4e:5f:03:6f:
         58:bf:83:81:ad:b9:6a:1a:cd:96:27:69:bd:c7:60:22:43:cf:
         7e:0e:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 22:23:54 2025 by rpki-client