Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File:                     aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier:          +Vas+or5dDRfJNFxO4aFcY5q19Ra9nEmAuwb+uJbG3A=
Subject key identifier:   47:09:3B:AD:81:D0:25:6D:EE:DE:CB:B0:6B:95:12:EB:0E:DC:04:72
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer:       /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number:          B1
Signing time:             Mon 20 Oct 2025 04:59:39 +0000
Manifest this update:     Mon 20 Oct 2025 04:59:38 +0000
Manifest next update:     Wed 22 Oct 2025 04:59:38 +0000
Files and hashes:         1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: /Lbu5ncsnPehOGR0FvbP1nHEUef2CLJ+wptZQM5/zYs=)
                          2: ED854A8624C811F0B4D15694DAE4EC9C.roa (hash: KyIxaodmc2Nf2dSIBbZZRE5rqK1fV8FCMAMx88jtkk4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
        Validity
            Not Before: Oct 20 04:59:38 2025 GMT
            Not After : Oct 22 04:59:38 2025 GMT
        Subject: CN=68f5c1bb-2764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:cd:8f:61:d1:85:b4:c0:0a:7c:3f:28:50:
                    eb:08:c3:ea:3d:39:53:89:17:92:08:b8:75:60:ab:
                    fc:a5:2c:28:2c:07:1e:1c:03:da:35:89:40:c2:67:
                    f8:ef:06:dd:54:20:2a:ab:21:0a:e1:b2:19:ea:e7:
                    e8:19:dc:1c:3a:6d:3f:79:93:2c:f0:5e:37:9f:ff:
                    d5:11:e4:2e:70:ad:76:16:8a:2f:e1:34:08:aa:35:
                    5d:1b:d3:94:be:a3:d1:ed:53:ad:bf:0e:24:eb:9e:
                    cf:46:0b:a8:43:48:7c:5d:9b:be:db:67:d3:d9:3f:
                    15:9e:6a:81:53:72:b0:06:e5:8f:09:9c:39:82:9e:
                    23:b2:ec:14:20:01:1d:68:b5:e1:39:1d:86:d3:66:
                    bb:64:56:1c:b6:a4:fe:b0:f0:81:7a:87:27:9b:b7:
                    c4:56:f6:e2:a7:49:2f:0a:ca:bf:c8:63:11:cf:99:
                    85:9f:11:bc:7a:6b:77:6b:f9:1a:3b:7b:af:1f:8d:
                    46:69:00:c4:f7:0d:d1:29:21:ee:13:2f:60:67:8c:
                    c4:9f:a8:cc:a7:1d:04:72:fa:df:fd:51:30:12:5e:
                    cf:62:36:db:7d:57:4d:6d:69:92:c3:92:38:3c:2e:
                    6e:d3:3b:c8:72:da:0d:43:44:b3:0e:fe:04:a8:b6:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:3B:AD:81:D0:25:6D:EE:DE:CB:B0:6B:95:12:EB:0E:DC:04:72
            X509v3 Authority Key Identifier:
                keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:90:0b:9a:86:ed:7d:67:51:ec:2c:7d:98:8e:45:d5:6c:fd:
         8c:45:db:46:b3:5c:3c:e7:1f:40:97:29:26:5d:2b:76:31:22:
         fb:ad:e6:ef:d5:b2:38:f0:f1:17:7e:2a:e1:6f:62:88:15:c9:
         15:fc:78:79:7d:03:1c:34:eb:dc:60:b8:9a:97:34:fd:71:84:
         7b:36:c2:be:39:dd:f2:c6:0d:83:a6:4c:4b:26:9f:bb:22:11:
         b6:26:93:c5:a0:27:73:cd:06:e6:06:19:1c:fb:da:82:4f:be:
         06:a0:78:87:3d:68:fa:04:46:23:69:c3:3c:bd:42:bf:b0:ba:
         25:bf:cd:9d:7b:6f:45:82:0d:a6:ca:ba:65:2b:51:6c:1b:26:
         3d:b9:a1:a8:80:1c:6b:c7:75:43:cb:3f:02:4a:dd:e7:83:6d:
         83:db:a8:26:90:80:2b:6c:d9:bc:56:e7:df:3a:e1:42:b7:81:
         bd:01:10:23:99:3b:c5:fe:36:0f:34:b2:65:ba:6f:36:d1:c5:
         55:03:67:cf:48:cd:6f:c9:91:30:09:17:dc:67:64:ac:d7:72:
         da:88:82:9e:d3:9d:27:da:5b:c5:12:5e:df:0e:a1:1c:c5:97:
         32:55:4c:55:e7:26:d7:fb:fd:46:e9:a3:83:41:db:f6:ee:21:
         be:65:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:56:54 2025 by rpki-client