Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          3vz8e6Z3eEzFbCPIk4+LpamldX8Y8UKtlRjmcJbvs7o=
Subject key identifier:   1C:41:93:D1:B4:C3:A9:E2:84:7F:95:76:F5:F6:3A:58:1D:DE:13:34
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       0471
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          0471
Signing time:             Mon 20 Oct 2025 03:07:20 +0000
Manifest this update:     Mon 20 Oct 2025 03:07:19 +0000
Manifest next update:     Wed 22 Oct 2025 03:07:19 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: Unilkkq1s/5OWz56y4af6M3iMTCaHKN6BOPITNqeXOo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: Oct 20 03:07:19 2025 GMT
            Not After : Oct 22 03:07:19 2025 GMT
        Subject: CN=68f5a768-35e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:6c:75:da:a2:46:31:97:86:4e:cb:96:cc:
                    5e:47:72:c3:fd:7f:df:45:7b:4d:5a:af:04:3d:6d:
                    57:07:25:6d:45:e7:13:e3:3e:73:99:1b:55:5f:e5:
                    d7:ed:ea:ee:c1:c7:0d:59:cc:5e:fb:34:39:09:dc:
                    f5:7d:b1:9e:c2:35:97:b1:67:b1:db:bb:4b:7d:a8:
                    be:f5:94:7b:fa:ec:4e:ac:e1:a1:96:bd:4c:57:aa:
                    0b:b5:67:49:27:6e:c8:29:dd:5d:a7:79:2a:7a:58:
                    48:0f:c2:66:dd:6c:35:2a:50:2c:b2:c4:cf:b5:57:
                    ca:b7:0c:96:1c:9c:8c:c5:1d:b9:d9:34:5c:e3:62:
                    b6:de:5c:56:ef:80:34:d4:05:6a:67:f1:8f:2e:86:
                    da:fe:78:1d:c1:b0:2a:a8:f3:ae:28:37:7c:60:7d:
                    e1:f3:a0:04:92:02:bf:7e:c4:46:86:3e:11:5b:33:
                    c5:7b:00:79:99:ae:86:0b:61:d7:4c:b7:ff:64:a9:
                    98:e2:87:73:9f:15:70:16:d7:bb:cd:d6:be:e4:9c:
                    ec:16:9b:be:9c:ca:26:a1:68:ee:81:f8:8d:fd:ff:
                    ef:ee:9b:58:9b:25:cd:81:7e:bf:ff:29:a3:33:67:
                    bf:05:ba:d9:ca:30:18:87:e6:c1:5c:b5:9d:fe:50:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:41:93:D1:B4:C3:A9:E2:84:7F:95:76:F5:F6:3A:58:1D:DE:13:34
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:01:64:46:ab:1c:89:95:aa:13:8c:11:46:35:df:1d:c9:cc:
         c9:e3:f5:a8:cd:9a:1c:53:c5:64:1b:ca:ca:8b:47:0b:52:e8:
         fc:ee:b3:6a:96:7e:f1:95:a8:50:09:75:df:2b:9d:23:f7:b3:
         fb:16:0d:c2:12:33:35:f5:06:11:63:72:21:0d:24:7e:8d:ed:
         d9:58:75:92:dc:8e:c0:de:89:18:99:cc:07:ee:88:e8:f5:32:
         39:4f:6f:6d:3a:4c:cd:0b:bc:10:5d:cd:27:da:08:41:db:ee:
         fa:92:53:0e:b4:4a:59:62:93:e0:70:27:a5:e9:08:8f:24:8a:
         69:85:60:eb:da:d0:fc:0a:b3:e4:2d:5a:f6:0a:88:79:ec:05:
         97:d0:ba:ef:d2:49:6b:6f:ff:d4:39:24:08:45:9f:35:61:a6:
         45:ec:1d:87:15:5d:7a:d5:f3:fb:49:6e:fa:93:31:96:21:11:
         42:17:02:10:eb:ff:dd:e9:55:5d:b4:00:be:bc:9a:fd:41:31:
         41:4e:7a:0d:7d:38:e1:db:8a:14:c5:cc:41:a3:f9:a9:50:36:
         c0:0b:c6:59:4c:b9:91:95:63:3d:b6:8b:fd:13:e7:b6:6a:18:
         30:ff:fa:fd:52:cf:7d:3c:76:63:b2:88:d5:1c:83:0d:8b:be:
         8e:95:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:08 2025 by rpki-client