Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
File:                     dUDQUtEpERNWC6gtIyBCuZqopko.mft (raw, json)
Hash identifier:          DzcHNS2mQz+eyR6077vNti2eo1vlUT9ubZ17NYwjoa8=
Subject key identifier:   8F:92:ED:FC:79:A5:40:0F:FF:84:1C:CE:3E:9B:79:D3:77:B0:A7:1D
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Certificate issuer:       /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial:       0900
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
Manifest number:          08FD
Signing time:             Mon 20 Oct 2025 01:35:14 +0000
Manifest this update:     Mon 20 Oct 2025 01:35:14 +0000
Manifest next update:     Wed 22 Oct 2025 01:35:14 +0000
Files and hashes:         1: dUDQUtEpERNWC6gtIyBCuZqopko.crl (hash: gfPSwhtvAAffXcCcJrwpUyaYCxdWoElBwcROsBt06Hk=)
                          2: F2B47ECE67CF11F0A078F98BDAE4EC9C.roa (hash: P3LDJsnxMQwbvrXOtqRElx5hirBS3sM/lIPVBob33/w=)
                          3: C82D839403C511EBB1822323F8AEA228.roa (hash: BRU/+9vSJaKFXnQ7Cb8Og2eSBhtx9/MwNvCd1XqLbx0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2304 (0x900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
        Validity
            Not Before: Oct 20 01:35:14 2025 GMT
            Not After : Oct 22 01:35:14 2025 GMT
        Subject: CN=68f591d2-60e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:99:0e:06:39:c6:8f:a5:c6:5c:3f:21:ad:
                    02:3d:16:45:0e:31:0c:b3:7b:47:4c:cf:a4:eb:35:
                    73:cf:da:9e:a0:30:5e:da:4e:23:bf:87:7f:8b:1e:
                    c6:34:b6:69:57:dc:ff:e2:61:d1:f0:d5:78:e6:ad:
                    d7:12:4d:3f:8d:f6:c8:53:d5:93:59:93:18:29:31:
                    4c:7f:8b:0d:46:6c:a2:0c:74:20:c8:30:5f:e8:b7:
                    45:3b:5c:c9:3a:a9:de:cf:50:20:9c:96:aa:8e:2d:
                    f1:72:77:af:10:6e:1b:19:4f:f1:31:ed:7c:c2:1f:
                    83:b8:f5:ab:f8:2f:01:d4:35:93:8e:07:d4:84:4d:
                    c4:cc:7b:08:20:93:28:8e:af:29:1a:e5:91:f1:ec:
                    54:51:7a:ec:ec:bf:e5:46:1d:3f:83:11:45:9a:ea:
                    b4:80:cd:6c:b1:1b:df:70:65:28:13:88:e3:bd:5d:
                    b3:44:fd:a3:87:06:35:f1:6d:0f:cf:be:60:36:dd:
                    89:0a:06:1c:f4:c1:af:74:b1:db:66:58:81:a3:d8:
                    6f:d2:cf:57:6f:2e:af:98:a6:6f:7f:47:f5:6a:2a:
                    0e:62:c1:25:8e:07:2f:b0:3c:38:5b:51:06:ae:8f:
                    4e:9a:05:eb:9b:77:aa:6b:11:de:f3:aa:a2:6d:c8:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:ED:FC:79:A5:40:0F:FF:84:1C:CE:3E:9B:79:D3:77:B0:A7:1D
            X509v3 Authority Key Identifier:
                keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d6:d2:ab:0a:fc:82:d4:97:be:ed:f5:d3:68:bd:79:08:2e:
         52:9d:48:7e:47:68:75:8e:f0:a9:56:f8:aa:a6:0b:4a:22:7e:
         c4:ad:bf:05:22:5b:f7:be:6f:9c:1d:1a:d3:75:5b:d8:78:05:
         3e:38:22:e5:b7:7b:fb:c1:57:e7:3b:dc:a3:b3:e3:09:e0:b2:
         ab:35:5b:ef:ef:6e:29:ea:f4:de:33:60:bb:58:78:96:80:34:
         5d:65:b1:48:bf:5d:73:26:f0:26:59:1b:94:c3:d9:12:e7:47:
         61:4d:33:8e:84:62:28:57:0f:c1:a1:b1:9b:cc:ea:ac:42:22:
         bd:c8:ed:34:a1:fe:17:74:97:5f:b1:b6:db:42:0b:a6:bf:55:
         72:c2:3b:cb:e3:1f:04:51:14:92:a9:22:00:f4:f3:70:87:53:
         16:dc:a4:43:d5:5b:75:ad:4b:34:a6:1b:48:94:d9:37:c4:ea:
         f7:8e:e4:8e:d5:4f:d1:9c:d5:d4:4b:b7:6f:42:5f:3c:39:43:
         33:fd:bf:c7:e8:23:1c:89:fc:da:be:7d:48:ea:b9:d1:b0:7a:
         13:2b:06:cb:c5:15:9f:8a:8d:06:e5:72:01:29:28:2d:b5:a6:
         d6:ca:5b:cc:7e:fd:2a:53:27:70:b1:5e:ec:28:9a:b5:3e:90:
         c1:b7:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:54 2025 by rpki-client