Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
File:                     27tnLt0H4F5FzAKFWwHIE75xXoE.mft (raw, json)
Hash identifier:          lK5th7wHMQpXCmx4DDQOyXkNbzP/CeB1XkkYrjbhxyU=
Subject key identifier:   31:C7:D0:1B:4F:10:A2:C6:8E:C5:D5:24:77:9A:63:5F:EF:06:F4:58
Authority key identifier: DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81
Certificate issuer:       /CN=F366A8BFAF/serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
Certificate serial:       015D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
Manifest number:          015C
Signing time:             Mon 20 Oct 2025 04:46:06 +0000
Manifest this update:     Mon 20 Oct 2025 04:46:05 +0000
Manifest next update:     Wed 22 Oct 2025 04:46:05 +0000
Files and hashes:         1: 27tnLt0H4F5FzAKFWwHIE75xXoE.crl (hash: ET/xUAzRk5Qlue6iYMskihIbFERNWC6s3eCxfThNJi8=)
                          2: 0C2C5B02A38F11EF9EE69A89762E951A.roa (hash: ECtKxH32G5BPQeuP9KuP/2ILf6so8Vog6XvAyzLxNpo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A8BFAF, serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
        Validity
            Not Before: Oct 20 04:46:05 2025 GMT
            Not After : Oct 22 04:46:05 2025 GMT
        Subject: CN=68f5be8d-54f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:b6:20:fc:30:d4:bc:46:55:ed:d9:78:7f:
                    df:86:13:58:5a:85:70:f8:50:e9:55:d4:a8:8b:d5:
                    81:1e:75:88:1a:2d:b5:bb:45:a8:77:99:1e:a3:66:
                    68:1b:5b:64:ab:a9:9d:46:e1:ad:bb:56:c1:2e:f1:
                    74:79:03:80:54:6a:f1:ab:cf:47:fb:ae:d8:46:f7:
                    2e:82:7c:fd:0e:06:24:13:f6:3a:85:09:59:e5:b6:
                    84:e2:65:e0:3f:5a:58:87:6c:6c:66:2a:3e:b5:b5:
                    f2:22:38:a9:97:a4:63:c9:63:9d:f7:a8:99:e3:68:
                    79:e0:94:f8:39:a4:18:17:54:08:20:a5:93:ce:91:
                    f2:53:34:38:ec:b6:2d:fe:86:df:14:01:17:9b:09:
                    80:55:03:f6:32:ca:e1:23:61:7f:52:7b:53:ee:20:
                    f3:2c:c7:5e:ea:b8:68:4f:30:2e:8e:53:0b:14:44:
                    2d:9f:af:88:4f:15:84:d5:7e:7f:85:f7:87:07:f9:
                    7e:94:87:ef:ef:30:5a:5c:91:20:d1:b7:28:8d:83:
                    f1:de:31:a5:5e:bd:b3:20:67:c8:ff:11:a9:6d:28:
                    a3:fd:26:2c:0d:80:26:ab:22:07:0c:18:63:b3:b5:
                    43:6c:5a:be:c5:30:12:55:b6:81:3d:cb:bf:50:b9:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C7:D0:1B:4F:10:A2:C6:8E:C5:D5:24:77:9A:63:5F:EF:06:F4:58
            X509v3 Authority Key Identifier:
                keyid:DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:9f:94:91:4a:da:ed:52:bd:02:04:2c:dd:56:6a:d0:d9:
         be:6e:fc:f3:c3:e5:d6:3e:a2:84:66:4d:81:f2:95:b5:45:d1:
         f1:6c:ac:e6:a0:8e:8c:9c:24:7c:af:06:92:d7:89:e7:28:1e:
         df:02:09:09:d4:4a:a3:43:9a:25:4c:87:05:76:1f:3e:d4:04:
         2e:95:6f:b8:86:7d:28:dd:2c:68:0f:cd:25:b5:02:e9:71:19:
         46:6e:3a:7f:07:e3:00:4c:fb:6c:ec:21:15:89:cd:54:20:98:
         f1:a7:e1:a7:5f:87:ef:8b:29:cc:8f:fe:b1:36:30:8e:2e:61:
         9b:4e:32:c8:6c:88:02:63:bb:72:52:d8:f2:46:b8:07:c5:4b:
         1e:1c:d2:85:79:0f:c9:9a:ad:67:0d:80:bf:24:70:09:3b:ec:
         49:37:df:0e:f4:5f:6e:28:25:e8:c6:04:46:1f:3d:41:a3:e5:
         49:20:d6:db:0d:14:50:d7:9e:14:76:89:e5:c1:b8:db:d0:0b:
         e5:0e:eb:bf:14:37:a9:e6:86:f3:91:75:58:1d:22:31:bd:67:
         31:18:08:cb:02:a4:87:90:76:1d:d2:e1:a7:56:b5:ef:a3:de:
         9f:76:55:cd:81:94:d4:8f:ef:a2:84:f7:c3:e9:f6:00:fd:61:
         5d:db:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:41 2025 by rpki-client