Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
File:                     3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft (raw, json)
Hash identifier:          +YAiMT7phaoDMVVBVW4N1NMBfLaXupQyltp6qJzYsEo=
Subject key identifier:   58:EF:2C:C4:16:2C:0C:16:12:87:BF:07:1A:48:A8:3F:C5:63:46:91
Authority key identifier: DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4
Certificate issuer:       /CN=F361609CAF/serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
Certificate serial:       0808
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
Manifest number:          0807
Signing time:             Mon 20 Oct 2025 01:48:07 +0000
Manifest this update:     Mon 20 Oct 2025 01:48:06 +0000
Manifest next update:     Wed 22 Oct 2025 01:48:06 +0000
Files and hashes:         1: 3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl (hash: 0pT1a081Vf8fAv2PKk230eazRIV8i/etPpZ5hzOGpzo=)
                          2: D7A1ECB283EF11EA9BA97462F8AEA228.roa (hash: TlTBwqHEQHiLLbQaXNnmF5UgaA5f3WCBAPGr0I+b64I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 01:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361609CAF, serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
        Validity
            Not Before: Oct 20 01:48:06 2025 GMT
            Not After : Oct 22 01:48:06 2025 GMT
        Subject: CN=68f594d7-c5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:6d:34:58:2b:0c:f5:68:ad:28:e8:3a:cf:
                    32:55:5f:5c:57:a2:88:ec:79:c6:dc:2b:a5:06:ac:
                    25:58:93:5f:65:08:42:72:a7:53:62:01:8f:c2:64:
                    fe:51:c5:12:7d:22:d2:20:1d:f8:1a:f7:b4:85:d2:
                    f2:4e:47:e0:8d:e0:f0:02:89:b2:4f:44:d0:9d:38:
                    cd:ef:3b:a7:30:cc:fa:45:dd:cc:f2:0d:7a:27:da:
                    43:80:45:68:26:60:57:ae:f5:67:45:0a:3f:f4:f6:
                    8e:64:a6:cc:17:ca:24:b3:56:21:e8:03:d3:03:67:
                    41:e2:a1:4e:36:3c:e6:48:01:50:c3:cb:e0:84:3b:
                    91:25:eb:44:bc:39:8f:ff:a0:ea:85:75:3b:a3:40:
                    b3:86:88:3e:59:df:8a:ac:fd:a0:d2:a5:21:f9:17:
                    b7:f9:47:58:49:e0:db:f4:73:34:61:70:22:1d:99:
                    47:86:ff:cf:86:f3:c1:e0:99:27:c8:5c:b8:63:21:
                    bf:5d:a6:cb:67:38:52:8b:9d:b6:91:8c:49:ea:ca:
                    2e:57:b5:07:25:6d:77:f8:80:a1:08:69:b8:c0:22:
                    fc:c0:ee:85:78:ea:a4:71:eb:43:23:86:8c:f3:fb:
                    e8:e3:62:32:ed:fa:5c:cb:ac:ee:6a:98:bb:8c:a1:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:2C:C4:16:2C:0C:16:12:87:BF:07:1A:48:A8:3F:C5:63:46:91
            X509v3 Authority Key Identifier:
                keyid:DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ca:7d:54:6f:6a:71:83:cc:d8:00:82:c2:84:1d:24:66:b9:
         be:51:63:94:2a:7e:9f:81:b9:37:b1:14:1a:11:f5:e3:06:16:
         cd:ee:d7:01:c2:ac:20:14:7a:f9:d3:66:d6:12:a4:cb:5d:0b:
         96:2d:b9:4e:ae:74:8d:44:0c:7a:80:c6:be:d6:29:d1:2c:ed:
         c1:e9:0f:0b:94:aa:5c:7c:92:3a:a8:bb:53:90:50:c7:3d:aa:
         02:79:3a:ff:13:48:ba:cb:ec:0e:99:50:1b:52:f9:04:00:be:
         43:48:32:85:ca:a8:71:b1:c0:0b:30:67:e9:3c:6c:9f:95:01:
         cd:4e:c8:97:3f:55:fb:8f:8d:9a:d0:4e:f5:2b:e4:c2:fa:fb:
         92:a0:72:85:7c:66:e9:4c:1b:fd:d2:12:27:b1:09:67:6a:09:
         db:d4:15:b7:a4:d5:29:04:42:9e:7a:91:55:83:02:9a:c8:08:
         cb:0b:95:66:09:a5:6f:8c:3b:3a:61:53:83:81:9e:08:3a:0c:
         2f:7a:72:15:99:31:99:14:49:c7:53:01:f7:97:e8:8b:ee:0d:
         62:5b:e4:88:26:cc:83:6b:82:74:2d:75:b7:49:df:dc:43:33:
         25:65:f7:82:ef:30:ce:e6:04:a5:6d:69:9f:09:ea:d9:9a:d0:
         6d:d3:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:10:42 2025 by rpki-client