Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          Zlv+revWcU0iPYIw1rX5YPuncFx/SZjuiU+tzEzZ9Bc=
Subject key identifier:   52:12:FF:5F:17:D0:A2:CC:42:C3:EF:26:6C:67:0F:9D:EF:41:9F:7B
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       039A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          0392
Signing time:             Mon 20 Oct 2025 03:32:56 +0000
Manifest this update:     Mon 20 Oct 2025 03:32:56 +0000
Manifest next update:     Wed 22 Oct 2025 03:32:56 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: eRcXKkCQgVNgj+XFlHlAXo4zDRZR2MM9vBWVTHSvmKg=)
                          2: BFFF93DCB91C11EEADB54E9A775412E6.roa (hash: sdzYfCyDwg/PUEGK3tXmINjr+Wb452fyHwxFLwrRQCs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF, serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: Oct 20 03:32:56 2025 GMT
            Not After : Oct 22 03:32:56 2025 GMT
        Subject: CN=68f5ad68-9010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:88:fd:81:68:34:17:9b:f3:6f:c7:ec:dd:
                    3a:c0:95:fa:8f:d8:5e:1f:96:3c:92:ee:78:48:c0:
                    99:95:42:8c:b1:00:81:fe:99:27:1d:9b:0d:c6:f3:
                    36:0f:5b:b5:16:13:29:6b:73:ae:a4:aa:8f:74:5d:
                    f0:48:19:36:86:dc:25:2b:0f:2b:81:d7:45:39:a8:
                    ca:a3:a9:27:91:fd:6f:df:5a:ab:10:ab:53:83:93:
                    06:98:7f:ad:8b:42:b8:62:c9:69:61:3d:db:00:2e:
                    f2:4c:de:78:ab:84:a4:66:06:22:b1:b2:50:ca:cd:
                    45:ed:e3:89:2f:28:00:21:08:98:e5:df:ae:ae:95:
                    b3:ec:d8:c5:15:80:3d:aa:ba:dd:1f:98:8f:60:09:
                    16:8d:18:db:c6:e9:37:05:43:f6:e8:5e:9d:45:f1:
                    94:75:89:2f:20:cb:b5:c0:21:5d:f7:99:e1:2e:06:
                    81:91:50:05:c2:04:e7:37:d6:84:8f:85:89:05:ef:
                    5e:c9:a8:2b:40:bd:c6:1c:d9:55:59:12:09:dc:24:
                    63:c6:87:12:be:42:ca:f5:3c:f8:b8:df:0f:26:24:
                    51:65:7c:d2:fa:92:e6:4f:bd:34:8b:d0:9a:93:86:
                    03:aa:1c:ce:db:17:62:51:18:6f:7c:4b:4b:4d:8e:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:12:FF:5F:17:D0:A2:CC:42:C3:EF:26:6C:67:0F:9D:EF:41:9F:7B
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ef:c5:8f:0a:3a:31:be:df:76:c9:a6:49:de:6d:3e:6d:64:
         47:ad:26:d4:76:b9:e4:b1:fb:cc:29:0d:de:dc:34:ff:61:43:
         bf:03:8e:cf:35:1b:09:ac:28:26:e0:1a:6e:e9:5d:29:03:43:
         b4:d7:d9:dd:8c:16:03:5e:8d:cb:e4:18:54:84:c7:5b:e6:01:
         e5:b5:05:1e:c7:a2:a8:2f:78:d7:ab:59:aa:7a:44:3f:c3:d8:
         e7:c6:b2:98:29:3b:01:19:c4:39:e1:4b:f2:7f:21:59:6f:d4:
         5b:d3:44:3c:d6:1f:0a:7f:58:25:da:00:e4:6f:18:f3:0a:5d:
         ec:d7:b8:df:04:a8:34:d1:51:33:c6:a5:3c:be:14:9f:e3:47:
         62:91:71:e3:87:2f:e8:98:e5:78:27:92:67:86:06:55:00:0e:
         25:25:77:59:04:5a:6b:0d:d3:65:6b:51:85:51:79:7a:40:24:
         9a:ef:98:33:7b:0c:8e:0b:2d:6a:99:18:82:76:dd:24:49:f4:
         c4:d8:dc:b6:46:31:e9:70:d9:36:7a:0f:fb:59:0a:96:f9:6d:
         d8:bd:a1:f4:6b:86:d8:3e:24:42:a0:68:4e:dc:7a:84:d0:2b:
         44:6f:e8:a7:12:0e:c8:b2:c8:d8:01:14:57:36:ea:ad:69:b0:
         a3:1f:18:c8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA5owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzIzRTFBRjExMC8GA1UEBRMoRDExMERBMzIyRjk5ODVDRkJFQzI4Q0E5Q0U4NTIw
NDQ0ODY2QkEzNzAeFw0yNTEwMjAwMzMyNTZaFw0yNTEwMjIwMzMyNTZaMBgxFjAU
BgNVBAMTDTY4ZjVhZDY4LTkwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmmIj9gWg0F5vzb8fs3TrAlfqP2F4fljyS7nhIwJmVQoyxAIH+mScdmw3G
8zYPW7UWEylrc66kqo90XfBIGTaG3CUrDyuB10U5qMqjqSeR/W/fWqsQq1ODkwaY
f62LQrhiyWlhPdsALvJM3nirhKRmBiKxslDKzUXt44kvKAAhCJjl366ulbPs2MUV
gD2qut0fmI9gCRaNGNvG6TcFQ/boXp1F8ZR1iS8gy7XAIV33meEuBoGRUAXCBOc3
1oSPhYkF717JqCtAvcYc2VVZEgncJGPGhxK+Qsr1PPi43w8mJFFlfNL6kuZPvTSL
0JqThgOqHM7bF2JRGG98S0tNjrExAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUhL/
XxfQosxCw+8mbGcPne9Bn3swHwYDVR0jBBgwFoAU0RDaMi+Zhc++woypzoUgREhm
ujcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyM0UxLzdFM0ZBM0YwRkExOTExRURCRThFRTQyNTRBRDlFNkZDLzBSRGFN
aS1aaGMtLXdveXB6b1VnUkVobXVqYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBSRGFNaS1aaGMtLXdveXB6b1VnUkVobXVqYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzIzRTEvN0UzRkEzRjBGQTE5MTFFREJFOEVFNDI1NEFE
OUU2RkMvMFJEYU1pLVpoYy0td295cHpvVWdSRWhtdWpjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs78WPCjoxvt92yaZJ3m0+bWRHrSbU
drnksfvMKQ3e3DT/YUO/A47PNRsJrCgm4Bpu6V0pA0O019ndjBYDXo3L5BhUhMdb
5gHltQUex6KoL3jXq1mqekQ/w9jnxrKYKTsBGcQ54UvyfyFZb9Rb00Q81h8Kf1gl
2gDkbxjzCl3s17jfBKg00VEzxqU8vhSf40dikXHjhy/omOV4J5JnhgZVAA4lJXdZ
BFprDdNla1GFUXl6QCSa75gzewyOCy1qmRiCdt0kSfTE2Ny2RjHpcNk2eg/7WQqW
+W3YvaH0a4bYPiRCoGhO3HqE0CtEb+inEg7IssjYARRXNuqtabCjHxjI
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:48 2025 by rpki-client