Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          UPD7mCMdoXQrCMoa86G8gjlLZx0uiFbJcVn0m1W38X0=
Subject key identifier:   EB:05:B9:31:74:CE:0A:50:42:12:F2:CF:13:BC:CB:C5:7B:31:F2:7F
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       0825
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          0820
Signing time:             Sun 19 Oct 2025 01:46:00 +0000
Manifest this update:     Sun 19 Oct 2025 01:45:59 +0000
Manifest next update:     Tue 21 Oct 2025 01:45:59 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: 66c2kCdA08nJF9Px8rvcDgQxm4XC5Idl64J8NLtde1o=)
                          2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Oct 19 01:45:59 2025 GMT
            Not After : Oct 21 01:45:59 2025 GMT
        Subject: CN=68f442d8-fad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:8b:31:9a:36:42:bb:00:f9:32:56:e0:3f:
                    c7:ce:da:0d:9a:b7:56:df:a4:90:01:b1:d3:42:ef:
                    8d:3d:a4:92:8b:eb:e9:13:5b:68:d8:26:c2:5b:99:
                    82:89:8a:a8:9c:37:62:d3:dc:6f:e8:87:c7:e1:23:
                    7b:87:1a:1b:95:64:92:c1:89:3a:16:74:02:72:33:
                    89:61:ee:5e:d7:9e:eb:19:ac:70:b8:d4:ff:8d:86:
                    06:fe:56:39:9b:10:74:7c:4f:3f:67:38:09:d3:e2:
                    df:73:96:cc:87:57:1d:0e:fd:1e:33:7b:bf:7b:16:
                    88:f8:88:e2:c7:b9:d7:01:d2:64:3d:f7:5d:d7:de:
                    52:2e:e4:f5:01:76:a5:15:c8:87:e7:95:b7:b4:45:
                    40:42:cc:3e:aa:1d:da:0a:07:9f:d7:e6:eb:54:0a:
                    fd:f6:ca:74:42:af:68:ea:c1:1a:04:ff:05:83:cb:
                    48:d1:3e:25:94:e1:0c:43:b4:1a:57:7d:3c:da:74:
                    ec:53:ac:98:d7:d3:9e:f7:cf:9b:17:e1:16:1f:6c:
                    9c:73:17:31:3c:b3:d7:11:c3:e1:7e:6a:e5:c4:36:
                    2e:4f:32:7c:5a:d3:e5:41:aa:3d:e4:af:f5:45:b5:
                    f7:4f:37:b6:03:d8:b6:23:0c:ba:86:dd:7b:83:ee:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:05:B9:31:74:CE:0A:50:42:12:F2:CF:13:BC:CB:C5:7B:31:F2:7F
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c2:bc:dc:09:e4:9a:66:b4:ea:43:52:df:94:f8:6c:e9:83:
         3f:2b:1d:3e:94:fb:d0:db:e4:c6:22:b1:20:d5:bf:03:35:11:
         84:b0:79:fa:13:f6:7f:6e:33:15:3a:d6:93:56:8f:e0:c5:fe:
         6d:19:7a:4a:23:38:a2:42:4c:c6:57:61:6f:56:5f:74:dd:29:
         c9:f4:c7:e7:f3:26:e3:ce:f4:ab:e6:31:f8:96:cd:2f:2c:0f:
         26:cc:4a:a0:62:4c:56:08:fb:8f:3c:73:21:34:88:90:f5:b7:
         1a:ee:f4:3a:08:0a:8f:a5:45:0d:4f:43:77:d2:7d:5f:c7:9e:
         99:b6:cd:9b:08:47:a0:d0:b4:cb:06:c7:b0:15:61:86:ff:f2:
         44:56:f8:ff:6a:bf:59:40:36:fd:78:ae:b4:77:b8:b2:08:ae:
         17:a8:29:6b:db:11:93:dd:b6:ad:88:5d:b4:b0:9d:97:f2:81:
         1b:33:42:74:44:54:5c:36:a8:a4:68:df:a1:e3:30:0e:67:ed:
         dd:b0:f1:82:a4:3c:36:cb:67:14:d8:a9:04:fe:b5:10:69:58:
         a3:c0:67:73:8b:94:7e:8e:b0:24:64:17:08:93:f6:df:4d:ef:
         76:50:57:35:a2:2c:d2:7e:76:bd:4a:4c:97:cd:b8:d2:a4:10:
         12:4a:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:42 2025 by rpki-client