Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          3r88A24j3rGjwLuPzBg4svpoMz5/9BxOakG12VeKEU0=
Subject key identifier:   86:E0:29:9D:F8:01:9F:FF:EF:E9:72:E5:1C:04:F0:88:1F:51:C2:7E
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       07C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          07BD
Signing time:             Mon 20 Oct 2025 01:53:48 +0000
Manifest this update:     Mon 20 Oct 2025 01:53:47 +0000
Manifest next update:     Wed 22 Oct 2025 01:53:47 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: i3HUCz1H6BVEGetN8d44kocKo96l85GDej1OblvPaIE=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: Oct 20 01:53:47 2025 GMT
            Not After : Oct 22 01:53:47 2025 GMT
        Subject: CN=68f5962c-4608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:01:e4:77:72:a8:84:24:f6:2d:ac:53:ee:
                    39:6a:11:98:73:af:5e:50:53:4b:7d:1b:e7:0d:31:
                    4b:eb:1d:16:87:8f:b0:29:88:a6:cf:c8:79:6b:35:
                    0d:55:7d:10:f1:41:21:7c:64:54:ee:5e:99:25:50:
                    4d:d6:fe:6d:c7:59:8d:c2:10:26:90:1b:2d:84:43:
                    ee:12:4e:be:ff:1b:00:cc:75:c5:a2:3e:9e:1e:d1:
                    e2:f8:a6:fc:9f:e1:1e:8f:d8:59:3e:30:bb:da:17:
                    e1:4d:61:ba:7b:33:59:03:be:bc:ad:31:97:71:98:
                    6c:cb:c2:ec:2a:da:32:24:6b:22:51:43:9c:c9:6f:
                    0f:00:8e:23:73:71:ff:e8:df:8f:13:b7:2d:d0:bc:
                    f9:11:21:41:a7:cb:af:8e:a9:d6:85:3c:af:c4:c4:
                    e2:85:97:6a:3f:82:1c:79:11:17:77:b2:b3:61:27:
                    e7:ea:5b:72:08:e8:ce:ba:21:b5:4d:53:39:d9:90:
                    a2:df:b0:ac:96:f4:0b:cb:0e:64:0e:69:e8:8e:67:
                    8b:ec:5f:17:5a:ac:5a:c0:3d:cb:1a:01:dc:d5:86:
                    62:d6:1a:a9:a0:2c:84:0e:c9:3e:6f:f0:fc:8a:2d:
                    eb:d1:1d:bd:a3:97:d6:3f:fb:e7:c0:de:91:b7:ba:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E0:29:9D:F8:01:9F:FF:EF:E9:72:E5:1C:04:F0:88:1F:51:C2:7E
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:af:b2:40:7b:df:47:09:77:16:80:a0:6f:d4:92:92:8b:4d:
         74:4b:d5:f5:9c:e2:49:e6:5a:5d:d2:e6:e0:dd:cf:92:cc:d4:
         b1:fe:13:58:c1:a8:ac:00:79:51:e6:d2:12:c0:10:a5:d9:e7:
         ed:57:37:b6:6b:2b:17:05:c1:0f:79:a7:62:c3:39:91:43:18:
         18:09:c4:a9:8f:9d:5a:c7:ca:0e:ca:45:0a:05:ea:f3:8a:38:
         c1:02:27:92:85:fe:44:a3:8e:ab:2a:bd:73:5a:30:d2:f7:b2:
         cb:26:0c:7f:af:df:10:64:f2:2a:6f:a7:86:f6:54:a7:6f:aa:
         63:a0:04:e7:01:22:2c:bd:a7:5b:ba:9e:9d:fc:ad:fc:52:34:
         0a:f8:3f:16:af:83:28:2d:cc:95:07:8f:e4:38:ef:56:ab:fd:
         77:5b:9b:75:da:08:0f:52:3c:b0:81:ad:1a:f4:c5:1e:70:b1:
         73:f3:a5:56:73:5a:40:a0:31:1a:b0:2e:71:b4:7f:4b:8a:94:
         12:14:dc:2b:a2:7a:e2:0d:78:ca:1d:e9:a8:a2:ba:c1:f9:b0:
         fd:e5:cd:2f:df:06:b4:d1:77:a0:f9:b5:e1:d4:39:b6:5a:b4:
         0e:73:06:03:42:d5:41:93:47:d9:ed:63:f6:30:21:6d:b0:07:
         23:7e:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:42:37 2025 by rpki-client