Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
File:                     fB-8tURrPURYdKAjdA4kfWIwI10.mft (raw, json)
Hash identifier:          ORTREwG8jm67Cg57zJ/2mXV4ng4veG9nH5KyS/NWa/Q=
Subject key identifier:   D7:61:CF:A7:12:64:84:93:92:1A:E9:4A:E1:FC:B0:B2:81:92:B9:4E
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Certificate issuer:       /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
Manifest number:          01CE
Signing time:             Mon 20 Oct 2025 04:30:03 +0000
Manifest this update:     Mon 20 Oct 2025 04:30:02 +0000
Manifest next update:     Wed 22 Oct 2025 04:30:02 +0000
Files and hashes:         1: fB-8tURrPURYdKAjdA4kfWIwI10.crl (hash: W1IOyGvQRzqwrn9smv40oI1OeT8TRbCwCXtLFfRKmM8=)
                          2: 69176EDA54B411EF85302264762E951A.roa (hash: aXC5ZcMaKvppj9wFu7iH9bADIONa5jeymvvlcxe0MZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C154AF, serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
        Validity
            Not Before: Oct 20 04:30:02 2025 GMT
            Not After : Oct 22 04:30:02 2025 GMT
        Subject: CN=68f5bacb-9d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:12:b8:b5:8f:e5:0b:f1:ed:5d:33:dc:60:
                    6c:8b:f0:e9:90:16:46:52:f3:3b:85:19:e1:95:aa:
                    f5:7e:6d:ef:9c:f9:fb:1a:7a:79:cd:3c:8e:1b:f8:
                    0f:19:60:6d:50:1a:8a:84:09:a6:e2:6e:de:6c:43:
                    4f:88:87:ba:dd:87:96:95:a8:19:a7:2b:f0:d0:46:
                    11:3f:d8:e9:90:85:c1:04:71:bd:e6:a1:42:02:9b:
                    ee:ac:4d:d9:ea:fd:58:ec:82:ff:1a:f1:df:ba:37:
                    55:63:61:61:78:27:f3:07:fb:52:d0:c5:f0:05:a7:
                    3d:de:73:b0:41:22:5c:f3:ce:69:cc:4c:b9:22:76:
                    8d:13:6d:58:1f:52:3b:ae:2e:60:7a:c5:02:ff:16:
                    5b:47:f2:b8:3f:d3:2b:c7:4b:f6:81:0f:05:94:dd:
                    99:52:37:84:5e:33:83:72:0c:ba:44:8c:24:9b:9e:
                    c1:13:7c:b6:f5:7c:ec:10:f1:e3:4b:5f:3b:a9:45:
                    d4:d6:c1:56:a7:f7:9d:05:22:cf:bb:1a:2b:44:8c:
                    05:90:5e:46:e1:90:da:ea:7f:1d:4e:85:63:a6:4c:
                    d9:5a:db:d9:c8:c0:03:85:1c:0c:b2:b5:56:36:ab:
                    c9:f9:8d:f1:0f:1c:de:20:13:84:1c:85:f6:c6:f0:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:61:CF:A7:12:64:84:93:92:1A:E9:4A:E1:FC:B0:B2:81:92:B9:4E
            X509v3 Authority Key Identifier:
                keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:10:02:3a:d9:b8:2b:57:30:14:b8:40:86:9d:f9:5b:90:a9:
         96:f8:cb:e4:7f:05:3a:95:11:fa:3c:73:1a:12:7b:34:fc:21:
         53:8d:9b:7a:72:53:37:c1:57:02:a4:8c:fb:3e:e5:d9:8b:a2:
         5d:c7:4c:9e:90:e3:11:24:77:15:d4:15:70:93:ac:f0:d3:31:
         81:64:36:56:29:b1:f9:f8:40:3c:e9:4e:95:7e:1e:ef:c8:64:
         63:2c:f1:a3:6b:85:53:4b:7b:d9:48:d1:8b:87:b5:bd:55:36:
         50:ae:6b:90:81:91:ba:40:56:25:1a:ad:65:f3:c2:9f:bd:fb:
         14:65:a8:76:4d:af:16:61:41:33:06:3d:c2:11:51:a5:90:ee:
         26:81:c2:5c:4b:26:c7:f3:cb:72:c8:ca:e6:44:0a:1b:e1:ec:
         c0:ad:5b:ea:dc:30:19:ef:dc:27:22:32:70:5e:6a:f1:3b:ab:
         40:4e:4a:0b:81:3b:40:00:1a:f5:c4:8c:05:56:69:95:29:4c:
         03:fd:a6:51:c9:a0:86:76:a3:76:50:f8:58:1e:ea:d9:ab:7c:
         3d:70:7d:25:83:09:7f:f3:f7:de:ed:b0:36:31:36:25:8a:03:
         b3:f5:c9:ca:1e:f3:54:2a:0f:54:ba:3e:a4:12:74:8a:85:e8:
         2a:29:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:23 2025 by rpki-client