Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          5RQqEz/mHr7Fuyxbc5IJK2IvtI4x63DVyod7ywmgNAA=
Subject key identifier:   33:37:59:78:C0:82:25:76:71:5F:8A:BA:2F:53:8D:FB:FD:73:96:BC
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0C8D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0C8B
Signing time:             Mon 20 Oct 2025 01:08:13 +0000
Manifest this update:     Mon 20 Oct 2025 01:08:12 +0000
Manifest next update:     Wed 22 Oct 2025 01:08:12 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: XyO/5nXTQ1s0KiwGuJ66CC/mp3invjToM5YNEgTayJE=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3213 (0xc8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Oct 20 01:08:12 2025 GMT
            Not After : Oct 22 01:08:12 2025 GMT
        Subject: CN=68f58b7d-7393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:1a:5f:ce:6a:9b:8a:cb:b0:62:9b:2c:48:
                    e0:21:a9:ad:5e:59:c4:c1:50:d7:f7:4a:56:89:e4:
                    4e:be:5f:a1:37:93:a3:6f:13:4f:3c:46:3b:96:bd:
                    b2:c2:6e:62:e0:d5:5f:47:43:69:b5:37:29:f5:0b:
                    3b:8d:79:9b:24:17:92:c0:95:e7:14:cc:64:e3:21:
                    5c:ea:85:17:a6:df:8d:ba:b9:19:6d:76:e9:4b:7f:
                    99:17:0a:54:ed:46:2e:88:ed:2b:25:67:23:16:b6:
                    7b:dc:ca:9d:9a:a5:52:9b:3b:82:47:72:d5:b8:30:
                    8d:8d:06:25:c4:8d:84:27:13:61:5d:d9:05:16:f9:
                    60:1d:80:30:66:ba:44:58:a4:a1:7a:b4:11:f1:84:
                    df:04:58:ec:9d:7a:4a:6b:00:34:a7:29:d1:0d:c9:
                    45:a0:f0:57:7b:15:5f:0e:c1:e3:77:66:bb:78:1c:
                    06:94:eb:c2:c4:d1:39:d9:56:6c:6e:6f:1e:af:60:
                    e3:23:89:72:93:ef:63:f0:37:3a:ae:26:24:e1:07:
                    25:56:a7:e3:a2:f7:38:22:4a:83:90:3c:7f:87:15:
                    c6:90:56:0a:fd:16:b7:3c:9d:5c:fd:78:b2:7c:a1:
                    34:31:0a:a7:ce:9b:fe:28:a9:b5:c4:5a:03:7e:73:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:59:78:C0:82:25:76:71:5F:8A:BA:2F:53:8D:FB:FD:73:96:BC
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:77:32:8a:a6:d2:ed:e2:d4:7a:5e:d0:7a:6a:8b:6f:88:a0:
         f6:17:06:3e:ab:89:8d:54:c9:37:27:4b:1f:ac:fb:ca:6e:e0:
         0c:de:57:92:08:fa:8f:6e:83:ca:dc:1b:35:9e:bb:0d:19:9b:
         95:18:08:4b:6a:e1:0c:55:fe:f9:a7:93:b4:bc:c3:b0:92:99:
         ae:1f:cf:fc:31:fb:99:09:b5:b4:4d:dd:cb:a5:db:44:05:77:
         8e:13:81:ba:6b:60:0a:37:92:21:7b:27:43:06:0a:df:14:31:
         8e:cb:49:d4:b7:4a:80:dc:f1:18:8c:2d:43:b0:25:f9:50:0d:
         fd:ce:43:b3:8d:4a:5b:a9:24:ad:f7:78:a9:df:ad:33:b8:eb:
         f8:04:36:03:a4:ad:e2:a3:d4:d3:0e:ea:bc:a6:20:66:ea:5d:
         8c:94:67:66:ec:fa:f0:15:1a:07:67:e4:77:b8:d7:c5:b6:aa:
         80:07:05:dd:32:d4:a5:9e:63:11:84:3a:25:65:89:f7:a7:ec:
         42:ed:ae:f0:a9:db:cd:9d:f5:e6:2e:93:59:73:6f:cc:11:ff:
         97:69:63:d1:8a:e7:9a:56:df:8b:5d:83:bc:8d:cf:dc:03:8a:
         bc:fe:2a:76:17:3b:55:68:90:33:1d:6c:a6:a0:28:4e:72:f2:
         9c:c2:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:17 2025 by rpki-client