Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          02TKKwIyPl2Fvvp/nU7MUpLVReQIOTuyOIGYS3OUd6w=
Subject key identifier:   4F:95:C0:24:83:AC:DB:6D:65:24:0D:18:57:77:96:C6:87:61:61:40
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       01D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          01D6
Signing time:             Sun 19 Oct 2025 04:26:11 +0000
Manifest this update:     Sun 19 Oct 2025 04:26:10 +0000
Manifest next update:     Tue 21 Oct 2025 04:26:10 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: n5h3heDGOVu8nDFq+PMSuIR2HfyrjMy8KpZogwu3g/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Oct 19 04:26:10 2025 GMT
            Not After : Oct 21 04:26:10 2025 GMT
        Subject: CN=68f46863-1117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:ed:79:00:09:51:64:74:87:8d:43:e0:94:
                    90:4a:9a:11:77:31:89:cf:1e:b0:04:2d:bd:f8:e9:
                    d2:e8:57:13:ff:45:8b:16:90:4a:a0:5c:56:d2:0c:
                    ac:35:5f:95:93:32:0a:df:ed:fb:25:3c:d4:03:b3:
                    4e:b1:4f:c7:d2:f0:de:db:c5:c2:02:53:d3:5b:3a:
                    db:9a:9a:aa:ed:11:b9:d4:1a:4f:71:f4:8f:38:09:
                    fd:ee:df:b3:ea:92:91:73:ec:68:59:a7:27:13:ba:
                    c0:7a:db:22:11:d4:25:63:4f:ae:19:81:fd:f4:92:
                    90:25:e9:d5:bd:1c:71:52:5a:9e:14:40:c9:b1:cc:
                    71:4f:4a:82:b7:6f:bb:0b:d1:24:d2:a1:4d:c5:5c:
                    19:f4:c6:ad:41:a6:39:b4:f1:83:49:ad:e8:bb:26:
                    72:2e:f8:00:68:b7:8a:4f:ec:d2:20:69:23:de:8c:
                    5d:9c:64:52:ea:1c:74:9f:56:36:55:d1:d0:12:b0:
                    7f:9c:c7:ef:8d:99:06:e0:88:7b:86:b2:22:34:76:
                    36:ff:49:91:4b:b3:ee:84:15:c5:b0:ea:66:86:7a:
                    05:55:5d:5a:c0:8e:32:e9:66:11:39:0f:8e:f3:b8:
                    87:3e:b6:32:ad:0d:a3:14:2d:45:fc:38:d0:bf:7f:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:95:C0:24:83:AC:DB:6D:65:24:0D:18:57:77:96:C6:87:61:61:40
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:fe:9e:c6:91:55:bf:2d:4f:ae:fa:b1:58:69:1d:c3:9d:
         45:fc:09:24:09:a3:c7:9d:3c:34:05:46:62:ca:e2:59:21:08:
         07:80:6b:8e:04:b9:0f:3c:8f:57:a8:84:35:a2:67:69:7c:21:
         6b:b8:9c:1f:83:d3:42:fc:58:67:f2:5a:89:72:c9:6c:88:e9:
         37:b7:04:a3:8f:e4:dd:c5:62:51:d6:8b:6b:4d:fc:e1:7b:3a:
         22:cd:b6:93:9c:eb:49:db:b7:34:55:dd:f2:e4:6d:89:4f:b6:
         9c:e8:a6:6e:8a:f3:ec:b4:bf:85:56:35:7c:52:93:e2:83:ba:
         1f:b8:47:03:21:93:6d:46:e9:43:7e:f1:74:a9:05:e1:a8:db:
         c0:b2:7e:6d:d5:dd:83:fe:3e:54:ae:b0:90:e2:93:45:6c:25:
         51:16:34:2c:34:4f:ed:b8:7b:5f:86:72:19:7d:ab:04:5a:5e:
         7c:e0:bb:d3:0f:e1:06:27:4a:47:07:fd:28:9e:ba:9e:98:16:
         fb:0a:1d:31:7b:74:22:c0:ce:30:e6:74:77:6a:52:91:bc:7f:
         97:f3:88:fe:cb:6a:57:0c:2f:6d:ca:34:a4:95:14:8f:62:02:
         fc:91:bd:9c:3d:fb:4c:4e:19:49:54:49:5c:0f:96:22:29:2e:
         34:10:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:36 2025 by rpki-client