Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier:          qykZHhMpVwhOxoRn+TW5QmA4ExF/nILEAdgXe2zs7UQ=
Subject key identifier:   AE:F2:C9:08:DB:2A:93:29:A5:C2:A7:45:CD:33:F8:78:4C:62:F1:F4
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer:       /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial:       06DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number:          06D3
Signing time:             Mon 20 Oct 2025 02:04:53 +0000
Manifest this update:     Mon 20 Oct 2025 02:04:52 +0000
Manifest next update:     Wed 22 Oct 2025 02:04:52 +0000
Files and hashes:         1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: A6ALzntvfX4OYD7s9WiduIeROnNUHtTfmW39RYLC2PU=)
                          2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
                          3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
                          4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
                          5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
                          6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Validity
            Not Before: Oct 20 02:04:52 2025 GMT
            Not After : Oct 22 02:04:52 2025 GMT
        Subject: CN=68f598c5-ade5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a0:30:82:cc:fd:6f:4a:6e:19:82:66:d3:f4:
                    81:1f:24:9d:e5:4a:4c:2d:8e:93:8c:c5:92:7c:5e:
                    9c:4d:06:ba:04:c8:e8:f5:88:db:52:2e:12:e4:e8:
                    76:e0:2a:25:ab:0f:f9:e2:83:d5:05:e3:12:a7:ea:
                    9a:5e:6b:8f:97:ef:78:a6:90:a5:d5:bb:34:f6:58:
                    03:c5:6e:0d:70:a2:34:02:1e:f9:28:14:0d:3c:f8:
                    ea:94:f2:9e:0d:9f:7a:0e:5e:47:80:76:bc:57:b3:
                    f5:1d:79:f8:80:9d:de:ff:54:5c:c6:0a:04:42:e4:
                    48:09:ab:6d:e9:0a:95:ad:50:8e:a1:da:af:6c:42:
                    30:3d:b6:d4:e6:a9:39:cb:e5:0b:3f:6e:f5:26:c4:
                    1a:ce:bd:83:27:f0:86:b0:14:5c:df:52:df:b1:5c:
                    b0:2b:de:6d:ca:48:a3:10:8d:95:64:61:0b:62:2a:
                    02:80:57:38:09:de:23:80:57:18:53:f2:79:03:c0:
                    ca:2c:60:c0:85:3b:23:e0:b3:63:40:4b:30:4b:08:
                    7a:51:bf:24:92:b8:a7:79:b2:9b:e6:71:c5:3b:c4:
                    ae:02:52:a1:aa:e4:56:74:62:2e:6c:b6:dc:0c:f1:
                    1b:32:d9:e3:44:83:53:6f:8c:f1:e0:76:e0:60:f6:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:C9:08:DB:2A:93:29:A5:C2:A7:45:CD:33:F8:78:4C:62:F1:F4
            X509v3 Authority Key Identifier:
                keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:ed:68:78:d7:66:c2:e1:f1:eb:a7:ff:fe:a0:37:ea:2a:
         2e:5d:86:d2:d6:e8:09:df:b0:e3:4b:c6:40:cf:91:a0:35:3c:
         31:86:d5:6d:2d:c4:99:48:89:5f:b1:7b:fc:32:d0:bc:85:f4:
         06:38:6d:ff:1a:9e:55:bd:fc:21:d4:95:71:be:fa:87:17:e7:
         d7:74:85:99:9c:35:04:8a:b7:e5:84:15:46:a1:9e:8b:91:e4:
         fe:a5:27:c3:92:5c:56:4d:75:05:5f:52:78:aa:1f:31:bb:ea:
         ef:e8:6d:a7:00:87:b5:76:b4:24:ca:e1:96:7b:d4:c1:bd:dd:
         bc:09:04:c9:b6:e1:98:b0:33:47:5a:fd:75:15:f9:98:75:90:
         36:e2:65:0a:3a:6e:7e:2d:7d:e2:b8:2f:37:9e:2e:ac:9d:c5:
         43:56:cf:32:0a:0b:b0:b1:a2:40:6d:cf:b2:ed:b7:5e:b9:8f:
         8d:60:73:1d:11:a1:4d:8a:31:dc:33:e7:30:94:48:bc:67:7a:
         eb:08:09:3d:31:a0:23:9b:37:45:b4:a8:58:3e:53:dc:3e:fd:
         0d:71:d8:0f:d7:55:be:e1:f0:16:3b:4d:2b:5c:75:f7:97:7c:
         91:fe:e5:e4:8d:3a:40:97:4f:dc:9d:09:61:76:e8:2f:12:0f:
         bc:fe:28:4c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzJDRkVBRjExMC8GA1UEBRMoODAxNzY0NzAwNUI5MTkxNDIwQzk5MUIxQUUwNzk4
QjVBQ0ExNEQwQzAeFw0yNTEwMjAwMjA0NTJaFw0yNTEwMjIwMjA0NTJaMBgxFjAU
BgNVBAMTDTY4ZjU5OGM1LWFkZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD7oDCCzP1vSm4ZgmbT9IEfJJ3lSkwtjpOMxZJ8XpxNBroEyOj1iNtSLhLk
6HbgKiWrD/nig9UF4xKn6ppea4+X73imkKXVuzT2WAPFbg1wojQCHvkoFA08+OqU
8p4Nn3oOXkeAdrxXs/UdefiAnd7/VFzGCgRC5EgJq23pCpWtUI6h2q9sQjA9ttTm
qTnL5Qs/bvUmxBrOvYMn8IawFFzfUt+xXLAr3m3KSKMQjZVkYQtiKgKAVzgJ3iOA
VxhT8nkDwMosYMCFOyPgs2NASzBLCHpRvySSuKd5spvmccU7xK4CUqGq5FZ0Yi5s
ttwM8Rsy2eNEg1NvjPHgduBg9j+9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrvLJ
CNsqkymlwqdFzTP4eExi8fQwHwYDVR0jBBgwFoAUgBdkcAW5GRQgyZGxrgeYtayh
TQwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyQ0ZFLzUwMEIyOTkwODI4NTExRUI4MEM3RUY3OUY4QUVBMjI4L2dCZGtj
QVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dCZGtjQVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzJDRkUvNTAwQjI5OTA4Mjg1MTFFQjgwQzdFRjc5RjhB
RUEyMjgvZ0Jka2NBVzVHUlFneVpHeHJnZVl0YXloVFF3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtj+1oeNdmwuHx66f//qA36iouXYbS
1ugJ37DjS8ZAz5GgNTwxhtVtLcSZSIlfsXv8MtC8hfQGOG3/Gp5Vvfwh1JVxvvqH
F+fXdIWZnDUEirflhBVGoZ6LkeT+pSfDklxWTXUFX1J4qh8xu+rv6G2nAIe1drQk
yuGWe9TBvd28CQTJtuGYsDNHWv11FfmYdZA24mUKOm5+LX3iuC83ni6sncVDVs8y
CguwsaJAbc+y7bdeuY+NYHMdEaFNijHcM+cwlEi8Z3rrCAk9MaAjmzdFtKhYPlPc
Pv0NcdgP11W+4fAWO00rXHX3l3yR/uXkjTpAl0/cnQlhdugvEg+8/ihM
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:16 2025 by rpki-client