Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          b5S/Tqc7uJlCScttVK9IdgGLCqi1kOaSKxvM6fUUuZ4=
Subject key identifier:   63:AF:8E:FA:47:6D:9B:39:D8:A9:32:99:0F:8D:27:B5:55:E4:DF:7B
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       028B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          0286
Signing time:             Mon 20 Oct 2025 04:10:35 +0000
Manifest this update:     Mon 20 Oct 2025 04:10:34 +0000
Manifest next update:     Wed 22 Oct 2025 04:10:34 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: KvGk0G0eKiDP8HssKP0fX8n8iAr7Gxb3qYPBr6UQmH4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Oct 20 04:10:34 2025 GMT
            Not After : Oct 22 04:10:34 2025 GMT
        Subject: CN=68f5b63a-dd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:ff:28:56:a5:da:1c:53:8f:41:84:3f:4d:
                    dd:2c:38:5d:d1:d3:af:92:15:c9:5b:f6:76:bc:98:
                    6f:92:34:04:44:55:50:f4:e7:ac:47:7b:d6:66:c4:
                    41:8b:4d:2f:a6:10:0a:ee:63:bd:83:8c:f6:4f:99:
                    ac:8e:2c:b7:63:70:50:e0:48:68:24:6f:83:b0:2d:
                    7b:fb:f1:a2:ce:1b:aa:d0:14:55:67:9b:96:f2:10:
                    6f:6c:fa:ed:1d:46:2e:d7:5c:af:cd:c3:b8:ce:7c:
                    ed:7e:75:8b:1a:b9:35:0f:f0:08:6d:69:63:d6:b9:
                    74:e9:6c:39:03:82:16:3a:24:11:95:ae:0c:e9:8a:
                    dc:03:54:d3:ae:e5:25:b2:6e:30:e1:14:a8:c4:09:
                    6b:3d:c1:27:28:73:64:d2:02:0a:8d:2f:42:d8:f7:
                    6d:33:47:68:5c:c8:0a:9a:44:10:d5:ae:a1:74:49:
                    d8:ef:60:d1:c1:23:00:55:34:19:99:41:f2:7c:3f:
                    9a:ec:61:10:ec:ea:18:1e:cd:df:15:42:ad:ab:0e:
                    32:be:a9:e3:ad:85:a0:0a:10:ca:87:a5:96:1b:42:
                    64:ea:84:70:db:05:af:ef:4e:03:0a:6f:22:ac:91:
                    ab:9b:d6:fc:be:cb:40:29:d5:f6:c6:31:f7:7b:5d:
                    5e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:8E:FA:47:6D:9B:39:D8:A9:32:99:0F:8D:27:B5:55:E4:DF:7B
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:7c:6f:13:d9:cf:50:65:aa:be:a9:66:52:48:ba:bb:27:
         71:bb:48:a1:23:31:5a:65:80:ac:e9:cb:bc:91:d8:ce:32:51:
         b7:16:2f:ea:1b:f6:c0:5f:51:b4:7b:36:3b:df:e8:b6:40:91:
         a9:80:f0:31:76:ed:e3:dd:bd:c0:03:f5:0d:f5:dd:6e:ef:2b:
         38:9f:b6:40:25:da:5e:f4:39:31:ac:8a:da:3e:93:57:0f:7d:
         16:d4:25:66:12:d6:ea:08:8c:d3:31:a6:dc:76:dd:4b:f8:8c:
         e8:19:ec:7a:e7:3d:c9:64:c3:be:4e:0d:69:a1:c2:a2:2b:ae:
         8a:33:cf:5c:36:a2:14:66:a3:00:2a:ad:2b:2e:00:52:3e:cc:
         3d:48:35:cd:25:fc:96:a1:0a:4f:df:e0:19:46:b8:f1:5f:8d:
         da:d3:fc:15:28:48:78:2c:63:09:88:47:d8:7d:f2:b6:1f:03:
         dd:e9:32:3c:0c:61:5b:9a:0c:fa:48:02:a5:60:b2:65:f9:f9:
         d0:28:65:01:7f:e3:36:c8:4d:71:c3:f6:5c:f2:56:c5:2a:6d:
         a3:d8:40:81:3a:eb:2a:f3:a5:f7:fd:87:97:82:67:4a:db:58:
         47:34:0c:a8:4b:1a:84:b8:d6:96:84:93:19:bd:b7:bf:4b:b9:
         5e:90:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:16 2025 by rpki-client