Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          SF/yNdtUbcqGG9+H8ioanoGgjhSBob+gfLFcYQSuaH4=
Subject key identifier:   FD:33:36:5D:D2:B5:B5:15:6B:8F:AA:A0:AB:28:AA:A2:F9:30:3B:A9
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       04A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          04A2
Signing time:             Tue 21 Oct 2025 02:57:02 +0000
Manifest this update:     Tue 21 Oct 2025 02:57:01 +0000
Manifest next update:     Thu 23 Oct 2025 02:57:01 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: I14M8XE8j8EXoaNfTfe/YJrGSj2L27aQbQt/evb+CG4=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Oct 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Oct 21 02:57:01 2025 GMT
            Not After : Oct 23 02:57:01 2025 GMT
        Subject: CN=68f6f67e-8664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:14:9e:da:23:63:6c:81:fc:53:fa:ec:a0:
                    17:bd:d4:12:79:ef:9c:09:99:4a:77:45:df:f2:0e:
                    86:f6:55:da:44:ca:f7:14:7c:a1:62:b0:87:ea:ce:
                    d6:68:b4:25:8e:2c:36:d0:15:75:ad:db:b2:2f:1b:
                    a6:52:d7:66:3c:27:fb:eb:78:f7:c7:8f:2e:af:c3:
                    a8:ae:5e:3c:27:ce:13:50:b5:d3:4a:5b:a7:f4:13:
                    a1:57:67:90:22:e1:03:cc:5e:4c:ef:dc:4d:74:32:
                    5d:39:f9:ea:e1:c9:5f:7f:1f:94:75:1a:1c:c3:ee:
                    85:ee:de:8f:b9:8f:a9:73:2b:78:90:83:90:7f:54:
                    78:cd:78:6f:bf:6e:dc:68:9a:9d:57:60:7e:b8:18:
                    27:ac:84:57:36:65:af:db:a3:97:e6:f8:c1:b6:91:
                    3c:cc:c9:58:43:c3:63:6f:18:24:db:ae:0f:b0:b5:
                    50:34:ab:13:22:80:b0:44:75:99:4f:f1:10:41:75:
                    04:1a:bb:bf:1b:13:19:84:24:74:60:73:1d:2b:d1:
                    cb:a2:c8:71:cc:2e:ea:db:c7:65:cb:bf:7e:34:04:
                    6e:af:89:ad:39:5b:19:bd:64:55:c5:31:5b:29:80:
                    74:57:8b:f3:c7:d5:83:3c:5f:53:e6:d4:ac:4c:d3:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:33:36:5D:D2:B5:B5:15:6B:8F:AA:A0:AB:28:AA:A2:F9:30:3B:A9
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e6:cf:2d:f3:46:05:bc:a2:de:5b:ed:89:fb:29:5e:8e:35:
         dc:81:46:e1:d6:12:36:50:3b:fa:ff:6a:5d:5d:95:9a:2e:e3:
         86:3c:55:8e:ed:90:ba:af:b9:d9:92:ca:46:5d:a9:16:d7:62:
         d3:e4:2b:43:22:00:c9:11:c4:ca:cd:0e:1c:eb:b3:bf:a1:c8:
         b3:ac:03:4a:2b:09:bb:7b:21:06:d0:18:84:83:e7:69:09:8e:
         56:5b:3c:6a:c3:c5:c1:7a:db:4b:4d:0e:dc:46:cf:93:ff:05:
         f0:3a:bd:76:56:1e:e6:10:a3:4f:75:7b:02:1f:4e:8a:fc:f4:
         ba:c1:41:35:00:71:91:41:92:c3:ae:b8:93:2b:15:78:1d:ec:
         db:4d:3b:cf:00:9c:44:46:3d:eb:bb:42:e1:ca:3c:cc:6f:bc:
         ad:4f:cc:70:f6:19:36:fc:46:24:b3:ba:15:66:92:9a:02:db:
         20:e7:33:e5:2e:c9:8f:6f:b3:aa:b5:04:d3:68:a0:2b:43:60:
         c8:72:2b:ac:87:42:ba:75:c7:dc:0d:a2:44:4a:87:75:fb:20:
         55:21:89:29:67:b7:86:6d:36:4a:94:23:17:1b:74:81:26:16:
         1c:f9:4d:db:b9:e4:b8:68:8c:ef:f7:9e:74:6d:d9:a3:d7:a8:
         3b:d2:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:14:02 2025 by rpki-client