Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          3OEZ5yajDhs3sNt0+to13HZ8cJFgizSOgcfmPQpgGjY=
Subject key identifier:   5C:1C:02:7B:66:C8:84:5E:F3:A1:EE:05:E1:D6:14:BF:A5:CE:B4:96
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       03C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          03C9
Signing time:             Mon 20 Oct 2025 03:25:54 +0000
Manifest this update:     Mon 20 Oct 2025 03:25:53 +0000
Manifest next update:     Wed 22 Oct 2025 03:25:53 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: j1imy1IQ7E2mNgCCtVLUU71yqPn9o7rjwYFUlrerImc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Oct 20 03:25:53 2025 GMT
            Not After : Oct 22 03:25:53 2025 GMT
        Subject: CN=68f5abc2-5e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:9f:ef:f6:f1:49:6d:0e:1c:ac:67:73:45:
                    e9:e9:1e:6c:90:ba:53:e7:30:7e:b0:dd:4c:56:9f:
                    d2:48:c4:dc:ca:72:e1:43:ed:bc:cd:0c:2d:45:e7:
                    ca:d3:57:a0:32:e6:b5:b2:9b:4c:6b:1a:5e:92:0a:
                    8b:55:40:17:ba:db:e6:ed:9b:8b:57:f9:a7:16:99:
                    cf:b9:f1:61:7d:f4:1a:4d:3c:ac:19:1d:de:cb:55:
                    aa:7a:b8:7f:05:81:fc:e6:35:eb:f7:ea:38:b4:d9:
                    fd:12:8d:ed:7e:79:5f:f5:f0:e5:11:cf:a7:5f:3f:
                    7a:07:a5:57:0f:d7:37:2f:43:c6:b7:c9:58:5f:ed:
                    f2:81:33:bf:73:e9:83:ea:53:8b:38:84:56:f6:34:
                    4f:a9:cf:c1:73:14:9c:de:f3:3d:84:2e:a0:ac:4a:
                    7a:42:c4:bd:96:7b:4b:32:ee:e9:75:36:9f:05:de:
                    61:9b:d9:ac:44:eb:e6:f1:11:43:e5:1b:c5:ae:11:
                    52:05:c5:6e:ae:9a:ef:8d:94:0d:c3:f2:f1:00:2e:
                    b6:e7:e5:45:db:a5:19:85:2c:7f:2e:9d:3b:3e:b6:
                    cb:3a:92:3a:90:48:77:91:d0:c3:0b:cc:eb:be:93:
                    26:70:22:bf:36:c0:3b:29:74:fa:46:d0:5c:4d:a3:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:02:7B:66:C8:84:5E:F3:A1:EE:05:E1:D6:14:BF:A5:CE:B4:96
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:09:e7:61:c7:d3:4f:0d:ed:af:31:dd:87:24:71:6f:54:
         61:0a:dc:2e:ac:d1:d0:6e:e7:75:48:d3:86:e1:12:4b:58:b6:
         e5:c4:4d:1f:b9:12:b0:3e:34:3d:25:60:96:52:05:0d:72:8a:
         93:35:ad:fa:15:84:23:d1:44:98:57:53:55:f6:f5:6c:e7:a9:
         c1:7c:ef:54:97:08:72:52:c3:51:c9:bd:39:d5:4a:27:91:89:
         91:1a:cd:fd:db:4a:4a:e7:50:2a:f7:3b:f5:2b:6b:52:ed:22:
         75:69:11:13:07:06:df:85:70:4a:3c:64:83:d6:9e:1b:f0:72:
         85:66:12:07:b8:60:db:84:e9:de:16:79:db:30:86:fe:41:23:
         82:c7:20:8c:1c:4e:79:94:e7:a4:53:0e:dd:52:17:ae:bc:3e:
         8c:30:7d:4d:50:1b:ac:f4:05:63:e7:8b:96:10:b7:83:6a:c4:
         3c:e7:88:dd:a9:0a:1c:8c:4d:76:15:20:9d:17:9e:db:2a:21:
         16:1e:5f:9d:c3:f0:d0:98:1b:1f:f6:67:b2:b5:3b:37:7e:dd:
         2e:3a:70:fe:28:b2:a9:ea:28:32:e9:46:1f:19:09:5e:6b:79:
         a2:b7:59:e5:0d:26:a3:16:47:b6:1e:4c:a2:83:e9:b6:5d:55:
         72:1c:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:34 2025 by rpki-client