Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          bY8/s7zOdgYIciaLB76hQSmv6+zzZTC+GWTStIPnW1Y=
Subject key identifier:   46:84:2B:07:19:E2:9A:C5:C0:6E:40:C6:2C:1D:E3:4B:0C:BE:04:77
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       0269
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          0269
Signing time:             Sun 19 Oct 2025 04:08:14 +0000
Manifest this update:     Sun 19 Oct 2025 04:08:13 +0000
Manifest next update:     Tue 21 Oct 2025 04:08:13 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: LxsVD3l2ctDTK5Ni2fhc8MkGIZYbQfOs+9TIXJrSehY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 04:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Oct 19 04:08:13 2025 GMT
            Not After : Oct 21 04:08:13 2025 GMT
        Subject: CN=68f4642d-c708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:a4:ae:38:78:5f:f0:10:9d:47:22:fe:5f:
                    29:d6:e3:c6:01:89:03:6f:66:59:d2:16:02:5e:03:
                    2d:f1:f2:f6:1e:0e:33:b4:cd:71:7f:6f:ad:c6:a6:
                    46:ab:fe:05:49:0a:f9:ea:cb:e6:28:6c:39:47:4d:
                    08:a8:8c:ba:13:be:37:33:ba:01:08:d6:9a:b3:04:
                    b2:e2:60:12:8c:15:4d:9c:d7:65:d8:d8:39:d1:9f:
                    d0:94:8d:57:66:08:08:25:13:2b:48:5d:5f:44:ba:
                    f0:91:95:20:90:8a:c6:5b:c6:6f:08:77:c6:23:fd:
                    fa:9c:21:30:8a:93:75:db:b2:38:30:ec:ae:b0:28:
                    64:b4:60:76:77:1e:2f:d3:c1:5d:cf:2a:16:1a:c8:
                    51:2e:3f:74:7d:af:27:0c:d5:2f:7b:fb:da:b0:9c:
                    0a:90:dc:d9:53:00:85:08:f8:68:4e:75:13:61:de:
                    2e:c1:fc:35:f4:da:4f:98:a1:b8:1d:92:f5:3f:d3:
                    06:8d:83:30:81:6b:5d:9f:c9:0a:8e:8c:ff:8e:9d:
                    9b:b0:99:63:e8:6a:22:4d:3e:91:34:c0:3f:0b:6d:
                    13:87:76:81:8a:d0:b3:fe:4d:16:69:d5:ea:a1:8d:
                    c4:e6:46:e7:75:00:10:fd:12:ee:02:ab:31:14:80:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:2B:07:19:E2:9A:C5:C0:6E:40:C6:2C:1D:E3:4B:0C:BE:04:77
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d1:06:24:98:6d:fd:b3:7f:44:35:d4:57:05:8a:1a:aa:9b:
         d2:ca:bf:f0:ea:c8:eb:9a:02:e3:8d:99:0b:ae:5e:63:91:50:
         62:62:6d:ff:05:c6:53:72:f5:d2:78:35:f3:82:28:7f:4f:aa:
         99:d7:99:35:34:c8:f9:50:74:f4:eb:62:b9:26:d2:cd:a8:76:
         39:f3:8b:45:a8:8a:82:90:93:a5:f7:9f:5e:1e:20:52:f2:13:
         72:b6:19:82:e4:78:b1:86:20:ff:69:e3:a9:f6:4a:fc:96:d6:
         b4:77:f8:eb:5d:79:81:85:28:2f:a8:da:f0:0e:0e:d8:af:a9:
         fc:14:68:5f:8d:2e:ce:34:79:ac:53:ba:7d:3d:06:35:8c:19:
         97:12:21:32:4c:f2:fc:d5:81:1c:38:a2:0a:b4:99:27:b5:40:
         cc:e5:bc:3f:f9:cf:e8:af:f6:e9:4f:ed:ab:02:49:7a:85:3d:
         a3:c2:ce:72:0e:89:a1:e9:e3:14:d4:67:e7:24:98:89:f6:9f:
         d7:08:4f:ea:d1:03:01:5d:53:94:e0:7d:ab:7b:66:0c:31:2b:
         78:43:8b:2e:7b:10:0d:75:a4:f2:9c:22:55:d7:ae:79:92:b9:
         94:36:c0:07:80:4e:7a:ef:fd:7d:fe:96:15:9b:81:21:91:8b:
         eb:48:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:21 2025 by rpki-client