Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File:                     xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier:          PhCrLpqQ3XKVemlgboDGZ/r52RiUEx2QxxCb5OmG1zI=
Subject key identifier:   09:67:B1:3F:7D:C8:AD:C1:EC:3B:FC:12:74:E0:3E:A4:65:73:35:07
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer:       /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial:       0176
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number:          0175
Signing time:             Sun 19 Oct 2025 04:41:32 +0000
Manifest this update:     Sun 19 Oct 2025 04:41:31 +0000
Manifest next update:     Tue 21 Oct 2025 04:41:31 +0000
Files and hashes:         1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: xWbha3YBro0+DxQBtxqwj13MtMygGqAWMhH+EHB8NOw=)
                          2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 04:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
        Validity
            Not Before: Oct 19 04:41:31 2025 GMT
            Not After : Oct 21 04:41:31 2025 GMT
        Subject: CN=68f46bfc-ee9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:ea:cc:b5:4b:15:2b:40:fb:a8:15:ee:0f:
                    17:10:90:68:75:e9:71:df:a5:de:7f:26:be:19:96:
                    59:78:11:4e:b7:24:ea:80:96:1f:9d:18:16:ba:b2:
                    4e:6a:58:5e:0e:e2:9d:5d:62:9c:78:0a:8a:15:a1:
                    ce:2e:95:b4:a6:b8:46:8a:b8:a9:cf:d9:4a:ca:6f:
                    11:c1:36:3e:2b:79:cd:0d:f4:9e:2e:5e:05:4d:7b:
                    c4:ce:19:d4:37:0b:1c:3c:e1:80:b4:0e:71:44:3b:
                    fb:1d:90:48:3d:df:d0:9a:24:95:ba:20:88:ce:e5:
                    10:33:61:e9:33:34:06:6a:b0:55:dd:06:bc:e1:b3:
                    f8:37:70:52:b5:b4:60:da:e9:b3:e3:de:62:49:93:
                    b3:7b:80:0a:18:4d:d0:b6:c0:9e:8a:8a:7b:a7:24:
                    fb:d6:5b:51:1c:7b:4f:98:2e:ad:cc:05:14:80:82:
                    62:01:91:8b:0f:a8:49:8c:7d:ce:ff:b2:c7:4f:0d:
                    a6:f6:0e:a6:c4:41:f1:66:21:70:94:1c:ae:81:28:
                    d5:99:dd:d1:18:15:f8:65:25:b8:7a:7d:fe:2a:a5:
                    64:e9:14:9e:80:1a:2c:57:c4:76:0c:2f:aa:fe:60:
                    70:96:72:d1:8a:92:19:b5:d4:86:44:df:17:e2:1c:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:B1:3F:7D:C8:AD:C1:EC:3B:FC:12:74:E0:3E:A4:65:73:35:07
            X509v3 Authority Key Identifier:
                keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1a:63:62:35:c4:e8:f5:80:41:95:d5:f4:d2:6f:de:c4:65:
         01:27:d4:04:85:66:a9:d2:77:0a:f2:59:03:2e:47:c0:01:b4:
         c5:8c:d8:69:88:2c:6b:67:44:b7:da:74:06:42:91:3f:1e:0b:
         1f:dd:c5:ea:e7:42:b9:90:bc:41:12:54:32:b4:6e:03:84:52:
         bf:42:bb:5a:0f:b9:9f:8b:1e:ec:1b:ba:18:2f:70:c6:8f:56:
         34:94:af:cd:f3:fb:1f:27:7f:f8:db:70:04:65:81:76:15:fb:
         42:43:9a:ed:90:e5:59:58:96:b5:32:23:61:6a:d4:b4:69:3e:
         8a:de:27:11:20:11:43:dc:81:9e:47:b5:4b:79:68:c0:73:e6:
         12:2a:3e:8f:fb:35:6d:cc:6c:90:69:bc:fe:f0:06:4d:e8:1d:
         99:89:60:ff:f2:14:50:20:c2:07:3b:b4:7b:c8:f4:15:9c:48:
         a6:c9:1c:58:db:17:e0:39:f6:50:45:d4:7a:f7:43:64:8a:cb:
         1a:21:b3:fe:81:d8:a5:7e:6d:d9:c1:b6:13:49:c4:a2:a3:66:
         53:0b:97:d8:2e:7b:44:ad:7c:b5:a8:2d:20:f4:02:1a:77:ff:
         0d:08:ca:5b:ca:9c:86:76:46:3c:c0:0b:91:b4:78:80:f2:a7:
         e7:bb:51:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDBERkRBRjExMC8GA1UEBRMoQzYzREVGM0U0NDg5NDUxNDQyNzNBM0NFNzAwNDkz
RDJBMEM1QUQ5QTAeFw0yNTEwMTkwNDQxMzFaFw0yNTEwMjEwNDQxMzFaMBgxFjAU
BgNVBAMTDTY4ZjQ2YmZjLWVlOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3qerMtUsVK0D7qBXuDxcQkGh16XHfpd5/Jr4Zlll4EU63JOqAlh+dGBa6
sk5qWF4O4p1dYpx4CooVoc4ulbSmuEaKuKnP2UrKbxHBNj4rec0N9J4uXgVNe8TO
GdQ3Cxw84YC0DnFEO/sdkEg939CaJJW6IIjO5RAzYekzNAZqsFXdBrzhs/g3cFK1
tGDa6bPj3mJJk7N7gAoYTdC2wJ6KinunJPvWW1Ece0+YLq3MBRSAgmIBkYsPqEmM
fc7/ssdPDab2DqbEQfFmIXCUHK6BKNWZ3dEYFfhlJbh6ff4qpWTpFJ6AGixXxHYM
L6r+YHCWctGKkhm11IZE3xfiHCFXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCWex
P33IrcHsO/wSdOA+pGVzNQcwHwYDVR0jBBgwFoAUxj3vPkSJRRRCc6POcAST0qDF
rZowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwREZEL0IyMzNCQjJFOTA5QTExRUZCOTQ5NjQ2Qjc2MkU5NTFBL3hqM3ZQ
a1NKUlJSQ2M2UE9jQVNUMHFERnJaby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hqM3ZQa1NKUlJSQ2M2UE9jQVNUMHFERnJaby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDBERkQvQjIzM0JCMkU5MDlBMTFFRkI5NDk2NDZCNzYy
RTk1MUEveGozdlBrU0pSUlJDYzZQT2NBU1QwcURGclpvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5GmNiNcTo9YBBldX00m/exGUBJ9QE
hWap0ncK8lkDLkfAAbTFjNhpiCxrZ0S32nQGQpE/Hgsf3cXq50K5kLxBElQytG4D
hFK/QrtaD7mfix7sG7oYL3DGj1Y0lK/N8/sfJ3/423AEZYF2FftCQ5rtkOVZWJa1
MiNhatS0aT6K3icRIBFD3IGeR7VLeWjAc+YSKj6P+zVtzGyQabz+8AZN6B2ZiWD/
8hRQIMIHO7R7yPQVnEimyRxY2xfgOfZQRdR690NkissaIbP+gdilfm3ZwbYTScSi
o2ZTC5fYLntErXy1qC0g9AIad/8NCMpbypyGdkY8wAuRtHiA8qfnu1GX
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:09 2025 by rpki-client