Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          r+A/Z/D8uSt4YDFq8DZUGMFYO3cSAr14q8D+8WAxvxA=
Subject key identifier:   E9:14:EA:6B:7C:4F:48:24:58:68:F0:08:02:9A:A4:F8:A3:9F:FD:5B
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       020B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          020A
Signing time:             Tue 21 Oct 2025 04:15:44 +0000
Manifest this update:     Tue 21 Oct 2025 04:15:43 +0000
Manifest next update:     Thu 23 Oct 2025 04:15:43 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: 4dYvWOjStISAViwez720/epHY9c0UVpEgJ19Xx4ZYZY=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Oct 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Oct 21 04:15:43 2025 GMT
            Not After : Oct 23 04:15:43 2025 GMT
        Subject: CN=68f708ef-aa34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:e6:f1:db:fb:ec:a6:f5:9c:cb:ca:d5:e6:
                    c6:cf:bc:00:21:6d:81:e4:8a:ff:ed:78:68:a7:6f:
                    90:4d:16:3e:cb:cf:da:bd:d2:d8:b9:aa:72:d5:d4:
                    3f:f5:21:39:a5:5f:fd:86:51:94:11:fe:6f:ec:2b:
                    4a:c2:53:00:98:27:47:5e:07:36:47:7c:0e:78:39:
                    9e:f4:4d:86:a0:9d:f8:c8:61:20:51:60:5c:12:25:
                    e9:c2:f9:16:2b:9a:2c:4f:8a:ac:fd:55:6f:64:bf:
                    14:a1:3c:9d:85:50:b5:93:58:18:67:79:30:70:0e:
                    31:73:37:be:6d:c8:25:6b:6b:9e:49:2a:f9:05:a0:
                    2e:d0:71:4e:bc:3f:57:e4:26:14:d6:08:81:61:61:
                    79:3b:12:c4:06:93:e8:91:ff:d6:b6:85:77:7e:3f:
                    d1:1f:73:e6:80:d5:e5:2c:ac:68:4f:c5:55:00:67:
                    e8:09:b3:02:55:76:83:25:32:ab:13:b2:1a:62:c4:
                    45:b3:be:9d:ba:37:48:c7:93:b7:79:b9:91:be:ea:
                    bb:f8:63:24:ec:f7:84:1f:82:bd:65:84:6c:52:81:
                    7f:e2:fa:b3:6b:d6:92:85:8f:90:12:fd:5e:0f:d3:
                    78:88:ca:2c:87:78:87:f0:06:c1:d7:b7:f2:05:3e:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:EA:6B:7C:4F:48:24:58:68:F0:08:02:9A:A4:F8:A3:9F:FD:5B
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:4f:82:c6:95:9b:64:9d:71:3c:29:62:23:33:8f:6f:c4:
         8b:7f:16:9c:0c:2c:1a:ae:81:84:d9:f2:3b:f3:4c:a2:f1:d5:
         8e:27:ee:13:03:89:a8:27:47:f5:7a:4b:9c:8a:3b:1a:ab:e0:
         c1:53:52:96:b2:a1:69:a9:da:0a:1b:bf:60:61:9f:86:3a:9e:
         6c:3b:45:fa:17:ad:0b:19:c0:86:c8:78:8c:ae:fe:ab:af:8b:
         76:2c:e4:b3:54:85:98:2c:7f:e4:c2:7c:58:b1:bc:1a:89:da:
         29:fd:a3:5a:f6:56:1c:e8:f0:a1:0b:3d:26:57:7a:9b:72:5f:
         67:7c:3f:58:56:f3:c0:ac:1b:58:75:07:47:ef:ff:f2:49:a7:
         6c:f5:4e:10:2b:3f:45:b2:84:76:65:bf:74:c9:d0:b7:16:95:
         64:28:51:a7:a1:37:e8:94:bd:0a:25:56:d0:57:e9:e4:7c:f1:
         7f:28:d5:bc:8d:37:d8:15:78:cb:1f:c4:72:d3:47:4a:20:71:
         5e:bb:3c:08:d0:c5:43:a4:d7:05:9e:8e:98:f5:a2:ee:d3:4f:
         f4:e9:46:12:b5:3a:0d:f9:35:93:53:98:2c:71:c8:a3:57:e1:
         f4:f2:13:72:07:f8:65:3f:ba:48:0d:50:79:de:bf:8c:0e:9a:
         ca:10:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:07 2025 by rpki-client