Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          w2z5lWSsVBzr3/bS3eLXCwkS3N6Pqrr+GUPR66P3WSw=
Subject key identifier:   EC:F4:EB:5A:E4:CF:CE:2A:40:3A:56:F3:27:0D:7A:12:88:E6:A1:2F
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       0921
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          0915
Signing time:             Tue 28 Oct 2025 01:34:11 +0000
Manifest this update:     Tue 28 Oct 2025 01:34:10 +0000
Manifest next update:     Thu 30 Oct 2025 01:34:10 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: miYWzdStHmqK3xyL82rAL18hn8nhhHhWiLdwRnMjlqE=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Oct 2025 01:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2337 (0x921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: Oct 28 01:34:10 2025 GMT
            Not After : Oct 30 01:34:10 2025 GMT
        Subject: CN=69001d93-dafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:ee:de:92:65:f0:90:b5:a2:25:3b:2d:cf:
                    8e:32:92:a3:da:4e:07:21:cc:08:84:ec:76:b9:e3:
                    59:7c:f1:d3:43:f7:1d:37:d2:d5:e1:77:9a:a1:c4:
                    6d:ce:1a:82:7a:01:37:b4:da:03:e4:50:41:d5:73:
                    06:ae:d5:5c:96:ae:98:bf:f2:c3:b1:70:c9:6e:bc:
                    50:c4:b2:91:91:da:72:a1:71:d4:c1:be:f1:17:bc:
                    4e:a1:69:5a:f7:f3:3c:ca:68:e7:a6:c3:88:1e:bf:
                    da:5f:f6:43:18:d0:cc:21:cf:23:86:16:d1:d4:f4:
                    92:bf:53:c5:e1:b3:43:f0:e4:6e:cc:f2:27:c2:14:
                    3f:eb:10:dd:6c:04:8e:67:67:80:45:e4:32:b3:58:
                    97:9f:16:a3:7b:ee:2f:0d:cb:c0:71:00:db:84:d5:
                    9d:64:25:44:ec:84:92:94:3f:2d:9a:48:60:6a:85:
                    77:2f:8a:08:3d:3b:16:7e:be:de:1b:a7:24:10:90:
                    34:8a:2b:61:c2:47:a1:06:72:fe:cd:a8:f3:00:b7:
                    ec:e2:68:3c:3d:14:77:cf:8a:7f:cc:54:b6:00:31:
                    d6:7a:60:19:5f:97:1c:80:d5:6a:2c:cb:5c:50:13:
                    ee:7e:b8:26:44:07:5a:79:df:9e:70:93:f5:27:e2:
                    a7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F4:EB:5A:E4:CF:CE:2A:40:3A:56:F3:27:0D:7A:12:88:E6:A1:2F
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:8c:0f:26:e1:33:6f:31:f6:44:37:48:dc:7e:28:39:7f:
         01:11:a5:ef:ce:a6:31:bf:94:fd:3f:d6:16:7d:61:76:93:a2:
         14:a6:9a:11:97:c0:c1:8c:12:b0:92:39:74:06:10:31:a2:33:
         98:8d:6c:b1:b9:b6:e4:65:42:22:35:31:44:31:23:49:03:47:
         a4:88:3a:27:12:33:dd:44:5c:c2:46:be:89:94:06:d7:96:0c:
         a8:06:30:e3:79:e3:a2:59:47:4d:f7:06:eb:74:5c:23:e7:d8:
         af:7e:63:52:0f:fb:ae:c1:22:2e:99:10:28:2d:ac:ac:d4:e5:
         63:7a:7c:41:f4:fc:f8:6c:78:b8:34:2c:55:4e:2f:50:ce:95:
         18:c1:61:ca:95:80:1d:8c:7d:45:e1:d5:97:bc:61:a6:af:af:
         87:c6:ef:38:c9:aa:4a:a5:47:e2:03:3d:c0:a2:e6:51:f0:f2:
         f9:ac:62:45:ba:a6:97:f7:20:77:75:4e:a7:8b:b3:5d:94:3b:
         47:2d:8c:c8:4d:ff:0e:4e:dd:59:a3:9e:42:75:d6:6f:e3:b5:
         b0:dc:93:45:45:60:12:38:a7:07:43:15:1f:55:47:86:e3:56:
         dc:b1:08:b2:38:7e:be:8f:f5:08:d2:24:3a:d2:a7:13:46:01:
         b3:3b:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:49:34 2025 by rpki-client