Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
File:                     Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft (raw, json)
Hash identifier:          Ms4xZ3Uq4k65LN26MyJstMZQ/EnBt0+IItGTQI5sMqE=
Subject key identifier:   40:33:1A:F0:A8:A2:8B:DB:08:31:2D:6F:8E:DC:FC:38:43:08:DD:24
Authority key identifier: 3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43
Certificate issuer:       /CN=F36F18B8AF/serialNumber=3E887E856814833141F8D0F664ACAF6C4A305D43
Certificate serial:       086D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
Manifest number:          086B
Signing time:             Sat 08 Nov 2025 01:43:13 +0000
Manifest this update:     Sat 08 Nov 2025 01:43:12 +0000
Manifest next update:     Mon 10 Nov 2025 01:43:12 +0000
Files and hashes:         1: Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl (hash: QjAFVPOSMxOJ7pMl/h6zyf5XYhwdAb0X83XPilgQBPg=)
                          2: 8859EF00498511EABE163653F8AEA228.roa (hash: QVI82FLm1BSma7kxHblG+4W4pZzP5tIprd7dKYd5Sbc=)
                          3: 5C5FDF40498511EA92A20A53F8AEA228.roa (hash: xsQiPdSl+w9J+k6KG8KqiILkw0rtSox5Rr9IOhOA934=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F18B8AF, serialNumber=3E887E856814833141F8D0F664ACAF6C4A305D43
        Validity
            Not Before: Nov  8 01:43:12 2025 GMT
            Not After : Nov 10 01:43:12 2025 GMT
        Subject: CN=690ea031-1123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:2c:18:f0:34:b0:82:20:a4:7e:01:13:e5:
                    98:f6:14:90:a1:66:83:96:7f:83:64:fd:c6:76:bd:
                    d8:2b:0e:f2:5d:1b:4a:6c:70:04:36:f4:8a:35:26:
                    c2:ab:d9:ae:66:94:4b:9a:b4:d3:91:09:dd:c6:0f:
                    e8:d7:62:e4:0e:99:f4:c0:cf:7b:34:4a:de:30:b8:
                    92:20:fb:32:77:c5:46:6a:6e:f7:f3:61:35:ef:9e:
                    be:bd:8c:3b:d1:a8:25:40:d3:b4:21:00:fb:7e:10:
                    49:26:78:ce:94:63:d0:f2:e5:89:61:84:03:f2:df:
                    7c:ad:df:26:50:4f:98:c6:c9:0f:14:c4:33:d7:ce:
                    69:d2:90:68:3d:17:cb:21:bd:d3:25:86:f0:f5:67:
                    25:64:4a:f3:a3:4e:25:d9:d6:01:e5:93:6f:e1:95:
                    4f:fa:3f:f3:1f:54:22:f7:d3:86:47:8f:e0:5e:1b:
                    cf:88:fb:51:c0:d2:58:e8:7e:e0:8f:6f:3c:c9:13:
                    be:40:05:95:85:99:30:4f:1b:38:c7:fe:43:39:5b:
                    27:bc:3e:1b:2b:62:41:37:37:c9:69:af:b6:9d:69:
                    1f:3a:5b:8b:d8:c8:95:6a:26:ab:14:44:2d:17:22:
                    e9:7d:ab:69:ef:52:f5:20:3e:41:f3:70:4b:33:5a:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:33:1A:F0:A8:A2:8B:DB:08:31:2D:6F:8E:DC:FC:38:43:08:DD:24
            X509v3 Authority Key Identifier:
                keyid:3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9b:74:67:5b:b2:3e:7e:25:aa:5d:5e:aa:60:78:4a:f3:96:
         93:2d:6e:76:86:7c:bc:d3:c1:5b:7b:f9:ff:96:58:8a:49:7f:
         00:28:1c:db:6d:22:b0:8b:2c:5c:d7:01:99:09:73:c1:52:ba:
         eb:f6:d5:6e:e8:6f:8f:7c:6f:24:07:9b:e5:25:f0:97:ee:4d:
         c7:cc:ec:69:2a:61:c1:18:4c:81:d3:9a:b7:bc:9d:4e:4f:b0:
         f0:4e:f2:dd:20:fe:53:cc:81:de:ff:5e:9b:99:27:0f:49:fd:
         ba:d4:9d:60:f9:00:7f:7b:85:a2:27:87:69:43:6a:a1:81:f5:
         7c:80:5a:11:a2:0c:4b:07:76:ab:81:cb:64:75:f2:57:c3:c5:
         67:a8:f5:32:66:35:bc:9e:ac:28:db:d7:38:a5:3b:66:4d:16:
         fa:52:7a:37:b6:ac:f1:30:a1:ec:f0:8b:14:54:f1:06:8f:fc:
         23:e2:7a:20:f5:61:3b:22:1d:68:13:c3:11:8c:76:c6:2f:88:
         58:36:cb:fd:a3:b5:9f:bb:fe:6c:1c:80:0f:3e:03:38:40:22:
         b4:57:f7:6f:7a:c2:e2:8b:2c:3d:c0:e5:e7:d1:53:32:01:b9:
         f9:d1:14:87:30:ef:b7:fc:e7:97:7c:69:cd:16:60:9d:84:7b:
         1f:57:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 20:12:17 2025 by rpki-client