Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
File:                     FVNwAi5GD0z62wu7AyLauREShM4.mft (raw, json)
Hash identifier:          P0coTqIgLqyZIBSzZ8pNmKRu/IJ4BVcpueVsNgF2DD4=
Subject key identifier:   50:A3:D8:BB:FA:8D:0D:1C:0E:03:79:68:7C:F0:BB:92:8F:92:32:D2
Authority key identifier: 15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE
Certificate issuer:       /CN=F361E5BDAF/serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
Certificate serial:       0F21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
Manifest number:          0F20
Signing time:             Mon 20 Oct 2025 00:50:26 +0000
Manifest this update:     Mon 20 Oct 2025 00:50:25 +0000
Manifest next update:     Wed 22 Oct 2025 00:50:25 +0000
Files and hashes:         1: FVNwAi5GD0z62wu7AyLauREShM4.crl (hash: cKAPUlWPykK4wwE5OyTKE/mnWG2eNldQd3EETEHHBt8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3873 (0xf21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E5BDAF, serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
        Validity
            Not Before: Oct 20 00:50:25 2025 GMT
            Not After : Oct 22 00:50:25 2025 GMT
        Subject: CN=68f58752-e0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:90:49:e9:5b:50:40:23:b0:fa:17:8a:71:
                    0e:d2:05:5e:ef:aa:38:18:e2:cb:be:f4:8a:93:72:
                    da:78:3d:29:aa:ab:e9:27:51:c8:8a:7b:be:f5:04:
                    72:7d:be:8e:05:0c:f7:77:f1:66:4d:d9:2c:02:c6:
                    2b:24:dc:81:b2:70:9c:43:44:01:2e:83:16:a9:98:
                    ab:6f:60:d5:ee:33:c8:7f:1b:a4:d1:1e:1a:47:5b:
                    98:6b:6b:03:bb:16:48:42:e2:f0:21:7f:53:9c:2a:
                    f5:ff:ff:ee:57:80:c1:ce:4f:8f:f5:3b:4e:30:76:
                    ff:3b:03:f9:97:57:74:ca:b1:2d:93:52:30:93:0f:
                    e9:d5:48:08:8b:10:6e:c5:73:06:5d:93:4c:ae:3c:
                    2a:b2:69:f6:a6:e4:01:9b:4c:a3:68:3d:1c:27:f4:
                    bf:57:70:4c:ba:f0:d4:bb:2b:d7:9c:31:bc:54:7f:
                    2f:44:24:ef:c2:98:29:4d:e5:70:74:9c:ae:94:c0:
                    0f:61:b8:4c:aa:58:c0:95:d3:09:20:30:44:0b:96:
                    6d:6e:59:b2:d6:00:bf:4c:87:f6:de:c9:6d:f4:22:
                    2d:c8:1a:4a:e4:bb:67:7c:7f:5a:89:47:bd:5b:84:
                    ca:08:01:00:b0:91:6a:f3:91:7d:07:b7:ff:41:41:
                    0c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A3:D8:BB:FA:8D:0D:1C:0E:03:79:68:7C:F0:BB:92:8F:92:32:D2
            X509v3 Authority Key Identifier:
                keyid:15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:3b:42:17:83:dc:7c:a6:c1:36:9c:c7:5a:82:48:a1:48:38:
         ea:4b:55:d6:25:27:a5:f4:6d:e5:26:9e:15:14:b3:7d:43:f3:
         7e:b2:ae:44:cb:2b:46:35:01:6e:2c:06:8c:9a:4d:de:94:01:
         33:17:94:bb:e4:ec:80:9b:f7:6a:c7:83:6c:26:a7:ca:0e:61:
         07:fa:e4:61:a1:f0:90:f6:85:50:d5:5d:33:ff:60:8f:43:54:
         76:18:7a:6a:f7:21:4b:01:b1:86:e8:e0:da:df:a0:0e:1b:97:
         09:4a:d1:1a:3d:96:b0:6c:d4:6e:c6:eb:59:a3:5d:7c:ae:37:
         46:43:30:64:88:da:52:b7:62:9b:ec:95:3f:e7:be:73:07:7d:
         f7:6d:d1:1c:b4:3f:15:af:b5:6a:96:8e:49:ae:e7:3a:fe:3e:
         2c:06:dd:04:f8:01:13:99:b9:1e:55:dd:85:47:19:60:ed:4b:
         b6:d3:2f:2a:3f:3f:eb:00:1a:6c:f1:1f:eb:27:70:83:c7:db:
         a6:71:29:1d:7a:97:57:35:26:0c:e7:b8:97:58:bf:a7:2e:ec:
         f1:8b:7e:18:f1:3e:66:0d:5e:8e:c7:a4:f1:14:b1:26:e1:99:
         8f:d1:f4:5f:62:1b:d2:b1:26:16:bc:15:2c:33:ef:45:f6:fc:
         96:24:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:56 2025 by rpki-client