Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
File:                     kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft (raw, json)
Hash identifier:          y+P7L56fHGESR7ndaacYi4p7gt+dma4Unm3LN+BVGSU=
Subject key identifier:   E4:B7:F0:51:8C:DC:36:C4:FF:D4:C8:65:85:6B:65:17:14:5B:5D:6C
Authority key identifier: 90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
Certificate issuer:       /CN=F366F2B5AF/serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Certificate serial:       019F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
Manifest number:          019D
Signing time:             Mon 20 Oct 2025 04:37:38 +0000
Manifest this update:     Mon 20 Oct 2025 04:37:37 +0000
Manifest next update:     Wed 22 Oct 2025 04:37:37 +0000
Files and hashes:         1: kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl (hash: MF/mSk7iULmCUElnUI5Eo5z/9yxncwCITngsWcUfWT0=)
                          2: 6217C884742E11EFA821E659762E951A.roa (hash: DqF+PQ0X8r1rRPiZ8RZ4fS3gA5sEXR5BPLyS3G+8cdE=)
                          3: 132CDF5C741511EFA9C5BABD762E951A.roa (hash: 02xv9vPnDrOOLcJupKl7YdL1bTFmoSlfefstM9Glp04=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F2B5AF, serialNumber=9093645F56187261E65B708274DBD52C00DF250D
        Validity
            Not Before: Oct 20 04:37:37 2025 GMT
            Not After : Oct 22 04:37:37 2025 GMT
        Subject: CN=68f5bc92-4a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:c1:ca:19:2d:f3:63:38:23:4c:0e:d6:a4:
                    61:10:55:8c:14:bd:0e:63:16:24:ef:d4:d0:b7:30:
                    ff:9a:d4:a9:cb:74:91:8d:92:3c:94:a7:4f:e8:cf:
                    ba:81:4a:85:f8:78:39:88:bb:4d:af:4c:f4:c6:59:
                    79:00:ef:c5:d4:8c:12:63:54:68:fe:04:f5:ec:06:
                    3c:74:60:97:a2:35:49:a2:a5:ae:97:3b:45:84:41:
                    ed:27:46:69:f9:37:bc:75:d1:6c:fc:7b:85:f6:11:
                    48:cb:aa:d2:7e:48:e2:33:db:c9:a4:35:12:95:70:
                    fc:93:fb:b0:8f:dc:ac:f2:37:74:d2:6c:2b:66:60:
                    77:c4:cc:93:72:c5:6c:8c:6e:81:5f:de:2f:5c:f4:
                    34:52:25:b5:e6:da:06:50:5a:da:80:d6:4d:b9:cb:
                    a2:07:1f:9d:ea:86:95:92:0d:34:d6:b0:b7:09:40:
                    87:85:23:26:9c:c4:53:67:30:af:71:c6:2d:5b:fa:
                    32:51:f1:e8:64:16:07:50:03:13:f4:c5:f2:bb:cc:
                    0f:e9:48:5d:fd:3c:23:b3:46:e0:6c:95:40:6b:75:
                    cc:b8:b2:5e:f9:cf:41:ec:8a:06:e8:00:c8:ae:08:
                    51:e3:fd:17:26:8d:48:27:c0:f8:b4:80:a5:74:86:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:F0:51:8C:DC:36:C4:FF:D4:C8:65:85:6B:65:17:14:5B:5D:6C
            X509v3 Authority Key Identifier:
                keyid:90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:71:9e:2f:ac:85:0d:27:32:78:f0:7a:8f:9e:9b:03:4f:01:
         c1:87:b8:da:dc:b7:d9:41:20:3b:a7:a3:f0:37:b4:d6:df:bb:
         55:04:50:42:48:81:00:85:bc:d5:2a:7a:42:6e:fa:8f:9c:18:
         b1:84:62:8c:76:d5:a0:e4:0c:fe:61:ae:02:5f:84:a6:b5:12:
         b6:a0:51:09:ed:6d:9e:48:f9:bd:a4:9d:a4:5d:f4:ff:cf:15:
         2d:ac:78:11:e1:3e:df:56:32:35:1c:77:1b:7c:f1:f5:be:9d:
         a5:d9:88:ef:af:49:27:45:33:79:26:a3:1a:21:12:a7:f2:eb:
         bf:3b:a1:ca:5c:6c:aa:28:c7:34:89:e3:c3:65:ad:65:86:07:
         09:fc:e2:9d:f5:44:bb:9f:f0:30:4f:ab:43:7c:93:1c:df:37:
         08:6e:fc:fd:d0:b5:42:d7:ca:26:c1:a8:19:a7:83:ae:75:d5:
         9d:71:64:84:1c:ea:3f:8b:4b:38:d3:e8:5d:de:b6:18:29:9e:
         32:15:7b:a5:a0:5c:d4:fc:1f:95:5f:4d:51:01:a5:32:0e:09:
         38:6b:5f:45:27:bd:25:8f:1d:7c:69:55:6b:02:3c:1e:57:3c:
         61:eb:30:d5:69:1d:dd:45:58:b1:b4:c7:d2:2a:c1:f2:19:07:
         ac:69:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:57:30 2025 by rpki-client