Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          YEJjhZ5gOWafdQjKnwypVskcZ7+fspAiUmuTUPKr4y0=
Subject key identifier:   01:1D:D5:13:AD:6C:63:87:C8:6D:40:0A:22:FD:3F:BF:A6:FA:2A:C6
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       0182
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          0181
Signing time:             Mon 20 Oct 2025 04:42:36 +0000
Manifest this update:     Mon 20 Oct 2025 04:42:35 +0000
Manifest next update:     Wed 22 Oct 2025 04:42:35 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: K81Kr6MW11K7VJUATahoyAZ3IVxm1ohJYDpMx71U6A0=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Oct 20 04:42:35 2025 GMT
            Not After : Oct 22 04:42:35 2025 GMT
        Subject: CN=68f5bdbb-1318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:e0:2e:25:6a:29:b2:23:04:6a:45:d4:c0:
                    0f:90:3b:ed:2c:1b:2c:e9:0f:0d:9e:f6:7e:a2:29:
                    ee:62:f1:9b:2c:60:af:0a:2d:95:76:ee:13:34:0c:
                    2a:1a:98:9b:e3:63:95:26:bb:12:bf:71:50:a5:d4:
                    4c:e6:8c:a9:ad:f4:0a:8d:1a:bd:54:df:1e:02:46:
                    8e:8a:4a:65:e6:2a:d0:c3:3b:5d:eb:c8:21:26:69:
                    68:66:84:c2:9b:44:eb:e6:91:57:ee:db:e1:c9:da:
                    2c:1b:29:b1:95:e9:08:6c:1d:b2:a5:fc:ce:02:f3:
                    b8:2c:c0:2e:46:95:af:ff:09:df:7d:f5:b0:62:c7:
                    6e:b3:f1:3a:0e:86:fd:00:74:46:d6:52:71:8e:7d:
                    50:1c:0e:da:91:10:32:c2:a5:60:e6:fe:30:a9:94:
                    52:62:1e:1b:43:de:14:19:c0:bd:53:4d:97:2a:9b:
                    2a:ac:26:a5:5f:c7:bc:e5:97:d9:62:a3:f2:38:00:
                    8f:6c:77:42:d2:0d:a8:06:ee:b5:c4:27:fc:ad:97:
                    8a:bf:5a:44:95:d6:15:f9:c1:f5:88:63:f1:06:ba:
                    9e:5f:e2:3e:3a:16:b7:3c:3a:91:aa:3b:ed:a3:65:
                    5d:ac:f3:1b:a1:ce:ec:a8:3a:ea:40:20:6f:cd:d3:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1D:D5:13:AD:6C:63:87:C8:6D:40:0A:22:FD:3F:BF:A6:FA:2A:C6
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b8:c6:07:b1:02:1f:96:ff:ce:e6:de:42:17:0a:28:45:d4:
         63:11:8d:da:bd:03:86:0e:d4:a4:56:bf:5c:79:60:9c:49:ca:
         f6:e3:c1:f3:b2:b0:23:3b:f8:f6:30:cc:da:6b:8f:46:ff:9e:
         92:5f:81:32:cb:6a:5d:fc:30:c1:4b:92:9b:c3:ce:df:af:cf:
         a7:ac:da:8c:d0:5f:70:28:b4:d6:80:8b:e7:b3:1c:92:6c:77:
         22:c7:c7:ca:81:78:7f:db:a4:9a:e1:81:0a:49:28:7d:f3:d6:
         fa:7d:21:b6:44:23:d3:b6:89:38:29:ee:70:c9:f0:49:1a:be:
         73:5a:0c:ce:16:3f:c6:96:89:60:36:da:2e:f5:ee:2a:9a:57:
         87:e8:9a:87:be:59:7e:15:17:2c:fb:78:78:93:ff:d5:11:ef:
         58:da:de:b2:1b:f2:9f:d4:b2:8c:c2:7b:e6:9c:0f:70:c7:db:
         b0:80:53:f2:b7:a0:5c:04:43:bf:3b:4c:a3:6a:e8:d6:54:a2:
         8a:67:67:ce:33:db:4d:3b:b2:b6:1c:f3:f9:38:02:04:df:27:
         50:52:97:75:da:7b:d7:5a:56:63:4a:50:24:80:a1:99:fd:da:
         63:31:99:d3:bf:c8:62:6b:13:18:3b:22:3c:89:b1:8a:be:08:
         30:ed:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:01:39 2025 by rpki-client