Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
File:                     TuWp-sfUawsWJ8ZO5wq929LVXn0.mft (raw, json)
Hash identifier:          yxRdfLTzbeOQcYM89gSPT8mgVrPDqJaGsDPn8vLyAxE=
Subject key identifier:   01:23:BE:78:92:BE:6C:44:B7:7F:AF:96:AF:9F:A3:C5:5B:CA:C8:BA
Authority key identifier: 4E:E5:A9:FA:C7:D4:6B:0B:16:27:C6:4E:E7:0A:BD:DB:D2:D5:5E:7D
Certificate issuer:       /CN=F366EFDFAR/serialNumber=4EE5A9FAC7D46B0B1627C64EE70ABDDBD2D55E7D
Certificate serial:       066F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TuWp-sfUawsWJ8ZO5wq929LVXn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
Manifest number:          066E
Signing time:             Mon 20 Oct 2025 02:15:01 +0000
Manifest this update:     Mon 20 Oct 2025 02:15:00 +0000
Manifest next update:     Wed 22 Oct 2025 02:15:00 +0000
Files and hashes:         1: TuWp-sfUawsWJ8ZO5wq929LVXn0.crl (hash: IrPslmzFf5iw6aqiwAZb5A7wklLGhStE2rIoVmX8kRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
                          rsync://rpki.afrinic.net/repository/arin/TuWp-sfUawsWJ8ZO5wq929LVXn0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647 (0x66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366EFDFAR, serialNumber=4EE5A9FAC7D46B0B1627C64EE70ABDDBD2D55E7D
        Validity
            Not Before: Oct 20 02:15:00 2025 GMT
            Not After : Oct 22 02:15:00 2025 GMT
        Subject: CN=68f59b25-bfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:8d:64:c1:59:1b:6b:9b:4b:e6:58:c9:d4:
                    06:88:1e:f2:3b:42:ff:ce:8f:82:1d:34:0d:82:67:
                    6a:76:7b:50:01:04:95:a7:16:f7:24:47:a1:f3:53:
                    62:c2:31:2a:f6:53:fc:2b:c9:54:28:63:e3:58:16:
                    35:c7:6d:2b:33:58:76:e0:7b:1b:54:00:8c:c2:30:
                    e6:10:5b:e3:77:6c:6a:4e:8d:d1:49:d1:4f:a8:e8:
                    08:cb:44:90:c3:3f:e8:b6:24:d9:53:bb:78:30:12:
                    cb:3b:d3:35:4a:be:53:33:99:ec:42:35:1b:1b:cf:
                    e4:35:fc:4e:4d:2c:c0:2f:6b:4e:98:67:a4:03:f9:
                    bb:e7:40:8a:97:5b:f0:e4:48:b2:ad:b6:ca:76:c9:
                    3e:57:ca:92:62:10:1b:99:8a:30:a2:1b:ab:08:ea:
                    f1:35:e6:ff:c5:6a:d2:62:8f:25:fc:d8:70:87:cf:
                    ac:96:95:cc:71:60:33:f1:58:a1:55:39:a9:9b:07:
                    b0:ca:cf:d1:e4:8f:ed:e7:99:1b:d7:e6:ce:74:f3:
                    c2:77:5f:53:60:16:7a:0d:6e:b8:ce:08:09:42:ab:
                    b7:12:54:bc:86:07:83:ed:2e:ce:21:e6:3e:c0:28:
                    8d:fc:7b:87:f0:e7:34:d7:54:01:55:c1:5d:38:bc:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:BE:78:92:BE:6C:44:B7:7F:AF:96:AF:9F:A3:C5:5B:CA:C8:BA
            X509v3 Authority Key Identifier:
                keyid:4E:E5:A9:FA:C7:D4:6B:0B:16:27:C6:4E:E7:0A:BD:DB:D2:D5:5E:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TuWp-sfUawsWJ8ZO5wq929LVXn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:67:76:d5:ca:2b:a4:e8:5a:b0:31:94:1d:b3:38:38:b9:
         43:fd:0f:96:41:b2:c3:ec:76:c9:f2:61:dc:01:f8:65:bd:a5:
         5f:eb:ba:cc:f8:8b:40:f7:fa:a7:39:c8:15:fb:62:92:db:83:
         76:41:df:03:a4:ee:8b:c8:43:c3:7b:6d:78:e2:e3:6b:ba:10:
         33:08:60:a3:96:f0:ed:8f:99:9b:a2:68:5d:a4:dc:5e:ea:98:
         17:98:67:5a:60:f3:a0:9b:c0:c0:65:ab:56:52:c0:cb:c3:76:
         85:09:cb:7f:98:c7:cf:af:d8:21:2e:94:5c:c9:76:82:98:ab:
         3f:e1:3a:e3:72:e2:ca:c3:87:07:7d:ca:0e:6f:5c:c1:a6:37:
         f4:3f:89:5c:89:48:2f:4e:89:c6:68:24:62:39:16:62:88:52:
         bc:2b:3d:c9:54:3f:b6:5c:a0:a8:7f:90:5e:a1:43:f0:73:bf:
         53:f2:96:46:26:b6:4c:95:dd:d4:17:30:b6:b6:06:94:4b:c5:
         64:23:c5:3c:eb:76:88:93:02:61:ab:e5:c2:3b:8d:34:10:bf:
         ea:47:40:c6:ba:43:3e:35:24:8f:de:8a:b4:e0:98:f4:b3:de:
         21:b3:25:b1:ff:99:04:8b:80:13:51:62:56:61:66:00:08:ba:
         6b:28:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:15:37 2025 by rpki-client