Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
File:                     WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft (raw, json)
Hash identifier:          LpYZTJ9SoLm+/cWR5d+dK8L0tcnYPKgTDxqukAlIR6o=
Subject key identifier:   62:C3:D4:45:BE:B3:6F:73:27:71:01:AA:0D:28:2A:F9:A4:F2:C9:D8
Authority key identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA
Certificate issuer:       /CN=F36152D2AF/serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA
Certificate serial:       08FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
Manifest number:          08F8
Signing time:             Tue 21 Oct 2025 01:35:39 +0000
Manifest this update:     Tue 21 Oct 2025 01:35:39 +0000
Manifest next update:     Thu 23 Oct 2025 01:35:39 +0000
Files and hashes:         1: WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl (hash: bg+dxHeZXg4Bxcxr++0Ynap/cAu29DFiR4TwGwkM+1o=)
                          2: 3D014ACE245611EBBD1D0152F8AEA228.roa (hash: MFrTUFfbbj7vAa2jXdNr9UDEEnV6UTAgpBBSQ+XncRo=)
                          3: 21BD81763EC811EE8B7946734AD9E6FC.roa (hash: VtpPsjIQ6asKfxUhbuH75a5ObTnCjtxuvTF4JyOA/iw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Oct 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36152D2AF, serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA
        Validity
            Not Before: Oct 21 01:35:39 2025 GMT
            Not After : Oct 23 01:35:39 2025 GMT
        Subject: CN=68f6e36b-a260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:96:52:eb:ca:6c:46:03:66:83:d0:0f:e4:
                    58:c4:1e:66:6c:95:99:93:92:f6:e6:5e:dc:b4:26:
                    db:25:ee:37:7b:21:bf:a5:31:d9:d4:5b:11:3d:b5:
                    59:7f:27:82:ea:ff:08:d0:27:c8:bc:af:4f:f7:9b:
                    09:06:49:6e:55:b2:98:a3:40:74:bf:86:16:ea:fb:
                    62:0d:2b:0f:e5:0f:48:5b:fd:c4:24:20:9b:4c:11:
                    7b:4b:66:f7:e4:83:30:01:8f:5e:43:14:7e:00:ba:
                    92:bd:2a:b2:e9:a5:c5:a9:4a:a2:27:48:dc:73:62:
                    1f:e6:63:c4:50:92:7b:9d:1c:52:66:22:24:fa:71:
                    e5:eb:a3:22:b3:92:fe:1c:2b:1a:37:2f:76:2f:6f:
                    1a:f5:b7:aa:b3:de:cf:cc:58:b6:ae:1c:12:85:be:
                    89:1b:32:da:d6:0a:1f:b5:1c:3d:86:98:5c:0b:b5:
                    66:f2:ee:c3:43:a4:23:10:89:70:71:c4:85:87:b1:
                    7c:b5:14:a1:0f:f9:40:de:14:dd:90:6c:cc:c9:0e:
                    5d:7a:1f:f8:81:a4:f7:f7:1a:9e:81:36:08:bb:e7:
                    aa:aa:c2:ac:36:61:1f:48:8e:18:5d:3b:87:60:ff:
                    1c:6c:a8:7d:26:9c:51:1a:a7:c9:33:78:cf:fa:03:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C3:D4:45:BE:B3:6F:73:27:71:01:AA:0D:28:2A:F9:A4:F2:C9:D8
            X509v3 Authority Key Identifier:
                keyid:5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:27:21:f2:ef:d7:87:39:63:9a:c8:06:b1:c8:d7:91:2c:bb:
         c0:f5:a7:d4:48:5e:05:91:07:6c:0a:0d:c6:a9:78:a4:05:ec:
         b3:b6:03:59:8c:7d:47:9a:5c:8e:90:69:29:55:3f:91:e5:21:
         e7:06:ab:9b:1a:23:7d:1e:f2:da:dd:77:b0:65:00:3a:cf:b5:
         f9:0c:6b:35:b1:79:ef:29:f9:1d:f4:c1:8b:0c:85:cc:89:dd:
         9d:03:b0:5b:47:3f:00:e8:d6:76:9d:4b:e0:fe:a7:b2:f1:38:
         ca:a4:56:e8:17:1e:71:28:ff:61:84:e0:cd:ec:28:d6:a3:11:
         d5:67:51:a2:a3:39:db:17:2d:22:ea:b8:39:80:91:a5:ad:89:
         bb:6d:6d:7d:54:2b:99:4c:1e:70:ab:e4:e2:20:b4:23:3b:9b:
         f5:93:3c:82:03:18:e3:b0:f0:c2:31:c2:8a:87:93:23:36:31:
         56:89:7a:40:94:5f:cd:6a:91:c9:d7:c9:26:e2:78:28:f4:83:
         5e:50:89:4e:a4:95:0e:30:8d:8c:06:fd:4b:26:6c:97:71:0b:
         83:b6:a9:e0:b4:94:a4:9e:d7:48:ab:d8:8f:f3:f1:de:85:ce:
         ff:69:8f:7d:66:c2:a4:da:8e:4a:c6:21:26:81:3f:3b:c4:00:
         32:51:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:30 2025 by rpki-client