Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
File:                     VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft (raw, json)
Hash identifier:          2aBBl9lWduCxDdDHB4yomOHmSPpAjuAsTdRr3utESyk=
Subject key identifier:   37:A2:78:3E:6A:1B:DB:31:66:44:32:43:C5:D8:5D:03:DF:50:65:15
Authority key identifier: 55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
Certificate issuer:       /CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Certificate serial:       0249
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
Manifest number:          023F
Signing time:             Sun 19 Oct 2025 04:13:00 +0000
Manifest this update:     Sun 19 Oct 2025 04:12:59 +0000
Manifest next update:     Tue 21 Oct 2025 04:12:59 +0000
Files and hashes:         1: VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl (hash: JcccXrfJCeHYIvo9havHVjd5Ay+sNWKIc+z4BZMYju0=)
                          2: 4768ED5E2C0911F0B49BB296DAE4EC9C.roa (hash: JfyuCm+yo6tvIJJf4bmi9B75hqkTpM2MIb9GL0cW4fc=)
                          3: 9BAF9D2A2E4011F095868FEADAE4EC9C.roa (hash: f5siUrHoUyVq+e+9suWpWVzhrVVztln2eSltwK6bCU8=)
                          4: ECD59D2251F311F087499FD5DAE4EC9C.roa (hash: 0MsoWeb7LdhgTsaU/otFN3VGsH6DtvCWEm/3VJQ4nvw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F22AF, serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
        Validity
            Not Before: Oct 19 04:12:59 2025 GMT
            Not After : Oct 21 04:12:59 2025 GMT
        Subject: CN=68f4654c-5657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:4d:f4:79:ca:73:ea:8d:60:33:c1:65:f2:
                    cb:5f:10:5e:d9:ec:a6:4f:4e:ec:4b:45:47:9f:15:
                    ce:16:8e:c9:53:8d:0a:1b:36:0a:80:c8:0c:59:30:
                    5b:dc:00:5c:1f:ca:9d:ad:35:fe:96:c8:3f:6e:85:
                    59:a8:8f:d5:73:43:e9:d4:c7:07:f5:58:49:a3:21:
                    75:c8:86:2c:d7:f7:07:bd:00:5a:5b:88:b9:f7:ac:
                    1e:57:01:78:59:6e:dc:b5:21:16:5d:3c:a4:f5:31:
                    18:9c:f9:60:45:26:3f:10:a6:9a:e0:5a:cd:41:c9:
                    a3:a1:11:02:ef:cb:b1:e3:4b:55:9e:06:b7:c3:d9:
                    74:b4:32:9c:8b:cb:16:df:71:52:40:7e:19:00:80:
                    2e:eb:08:5c:f2:22:a3:9c:ce:a9:fa:3d:98:42:8b:
                    46:ba:c1:bf:0f:85:3c:5a:26:10:0e:9b:4f:e9:aa:
                    a4:52:ee:ee:72:0b:3c:fc:2c:fa:2e:b6:46:5d:e7:
                    7d:da:ad:4b:74:24:d7:c0:1b:f7:f4:ed:a2:8b:fa:
                    ac:a4:0d:f7:c2:44:3f:02:6f:43:77:59:3c:01:99:
                    ff:df:5a:27:1d:f8:f8:2c:83:47:b0:33:4e:bc:ec:
                    0b:12:89:00:53:8d:f1:21:b6:43:83:4e:d3:42:b6:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A2:78:3E:6A:1B:DB:31:66:44:32:43:C5:D8:5D:03:DF:50:65:15
            X509v3 Authority Key Identifier:
                keyid:55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:19:0c:04:23:bf:98:60:ad:10:b2:70:35:a7:20:bb:87:
         4c:4c:e9:f7:5f:96:4a:bf:b1:fd:0d:44:ac:5c:89:cb:25:24:
         83:e9:33:1b:06:99:dc:96:aa:98:4e:28:55:44:43:91:12:f3:
         3d:8e:92:2b:f2:39:9c:bf:d9:fd:ad:f1:3c:ba:bf:3c:d0:5a:
         44:a5:26:69:b0:d3:b8:2f:88:17:ce:19:7d:68:18:d0:c6:96:
         a2:94:d8:60:65:61:56:ad:57:d4:d4:42:08:bb:fd:4a:15:32:
         76:0a:4c:db:bf:d9:7a:7e:60:d1:c5:55:66:e5:cb:1e:fb:79:
         da:99:4f:6c:ea:86:ba:aa:92:f2:cb:c0:ae:9d:6c:0c:b3:f3:
         b4:26:08:1b:92:22:74:f1:62:02:84:13:40:14:60:da:79:40:
         3e:bc:6b:4e:ab:ba:ee:52:d0:37:bb:b1:42:46:f5:7a:90:af:
         94:c6:e7:f1:a3:ca:cf:b1:9e:67:d7:d0:f3:80:49:31:2d:87:
         99:82:28:8c:f0:e5:c2:bd:69:4b:28:be:05:2a:56:60:c6:c3:
         8d:0e:80:bc:f1:a1:89:25:ca:cb:31:30:8d:bf:d3:f3:ce:0f:
         c8:91:73:60:10:72:60:9b:03:5a:72:3d:8b:d7:10:a3:af:9d:
         08:af:4d:bb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGMjJBRjExMC8GA1UEBRMoNTU1NkQ2MzcyNzhBNEQ2OTg3RDQ0ODc2M0JEM0NB
RUJBMDU4QTUwRjAeFw0yNTEwMTkwNDEyNTlaFw0yNTEwMjEwNDEyNTlaMBgxFjAU
BgNVBAMTDTY4ZjQ2NTRjLTU2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT9k30ecpz6o1gM8Fl8stfEF7Z7KZPTuxLRUefFc4WjslTjQobNgqAyAxZ
MFvcAFwfyp2tNf6WyD9uhVmoj9VzQ+nUxwf1WEmjIXXIhizX9we9AFpbiLn3rB5X
AXhZbty1IRZdPKT1MRic+WBFJj8QpprgWs1ByaOhEQLvy7HjS1WeBrfD2XS0MpyL
yxbfcVJAfhkAgC7rCFzyIqOczqn6PZhCi0a6wb8PhTxaJhAOm0/pqqRS7u5yCzz8
LPoutkZd533arUt0JNfAG/f07aKL+qykDffCRD8Cb0N3WTwBmf/fWicd+Pgsg0ew
M0687AsSiQBTjfEhtkODTtNCtlKVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUN6J4
Pmob2zFmRDJDxdhdA99QZRUwHwYDVR0jBBgwFoAUVVbWNyeKTWmH1Eh2O9PK66BY
pQ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjIyLzlBMDgzMkY2RkNBQjExRUVBNjkwMUIzRDAxNzAwMUIxL1ZWYldO
eWVLVFdtSDFFaDJPOVBLNjZCWXBROC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ZWYldOeWVLVFdtSDFFaDJPOVBLNjZCWXBROC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTlGMjIvOUEwODMyRjZGQ0FCMTFFRUE2OTAxQjNEMDE3
MDAxQjEvVlZiV055ZUtUV21IMUVoMk85UEs2NkJZcFE4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcyBkMBCO/mGCtELJwNacgu4dMTOn3
X5ZKv7H9DUSsXInLJSSD6TMbBpnclqqYTihVREOREvM9jpIr8jmcv9n9rfE8ur88
0FpEpSZpsNO4L4gXzhl9aBjQxpailNhgZWFWrVfU1EIIu/1KFTJ2Ckzbv9l6fmDR
xVVm5cse+3namU9s6oa6qpLyy8CunWwMs/O0JggbkiJ08WIChBNAFGDaeUA+vGtO
q7ruUtA3u7FCRvV6kK+Uxufxo8rPsZ5n19DzgEkxLYeZgiiM8OXCvWlLKL4FKlZg
xsONDoC88aGJJcrLMTCNv9Pzzg/IkXNgEHJgmwNacj2L1xCjr50Ir027
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:01 2025 by rpki-client