Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
File:                     fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft (raw, json)
Hash identifier:          7fJ5omj6obp3PCq6Gmk7m1sCmAEOJD6RSU8FNZEsq6U=
Subject key identifier:   7B:B8:5D:A1:08:F5:06:2C:4F:FA:DB:EC:A7:AA:1F:B7:52:43:85:2A
Authority key identifier: 7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57
Certificate issuer:       /CN=F367F176AF/serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
Certificate serial:       0617
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
Manifest number:          0616
Signing time:             Mon 20 Oct 2025 02:24:33 +0000
Manifest this update:     Mon 20 Oct 2025 02:24:32 +0000
Manifest next update:     Wed 22 Oct 2025 02:24:32 +0000
Files and hashes:         1: fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl (hash: ql1Xm2s/KmacadsHzakjqA2y4ivodx7btiJkT9dXD3A=)
                          2: D12E90E00A1E11ECA685D114D8A014CE.roa (hash: UQyl88URJgmyqxKhcag2REopBe8MadhSu1C5UDauq54=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F176AF, serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
        Validity
            Not Before: Oct 20 02:24:32 2025 GMT
            Not After : Oct 22 02:24:32 2025 GMT
        Subject: CN=68f59d61-dad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:bd:cc:1c:a8:8f:3a:90:72:3c:be:78:a4:
                    a7:25:f8:7d:15:21:6c:59:9d:7e:f8:af:cd:bc:98:
                    bf:b4:de:36:cd:92:a4:ef:fa:2d:17:16:6a:68:bb:
                    af:85:b1:e4:73:04:a4:74:db:e3:b3:b5:b7:55:16:
                    4c:e1:dc:ee:2f:cd:2c:62:ed:f1:7a:1e:3e:a1:b0:
                    d9:8a:64:70:c7:d1:68:7c:57:51:83:c2:e4:3b:97:
                    dc:1a:30:2b:03:4c:78:fc:11:f6:86:38:72:8b:ee:
                    3c:6b:27:f7:f9:dc:d8:d0:a3:4c:d6:66:d6:2f:d3:
                    02:30:3d:c7:6e:6b:09:1c:01:36:61:5b:73:ce:a7:
                    8f:e4:72:3a:a1:89:06:aa:3d:fa:46:64:ab:86:4a:
                    f3:e6:96:03:5a:c0:de:16:08:fb:5e:d5:30:3b:e8:
                    5d:3a:72:c9:b8:bf:4d:2f:4e:f2:c5:5a:c6:e7:7a:
                    ac:a2:86:08:aa:7b:d6:48:10:0f:ee:b0:6c:c8:67:
                    83:65:0b:68:97:45:2e:b7:91:ba:8a:e5:f7:0b:8a:
                    3b:69:c1:15:41:5f:fb:35:19:59:61:db:b5:65:61:
                    4f:09:6c:9c:25:2a:30:56:3c:df:52:81:e2:0e:9b:
                    14:77:9a:8b:14:88:63:57:7d:88:16:bd:31:e1:11:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B8:5D:A1:08:F5:06:2C:4F:FA:DB:EC:A7:AA:1F:B7:52:43:85:2A
            X509v3 Authority Key Identifier:
                keyid:7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:36:63:25:93:e6:24:69:65:a1:20:fe:7d:15:81:77:46:a8:
         b5:82:3d:28:41:b6:2e:85:99:af:8e:95:b6:91:8c:c8:e7:08:
         ae:e5:76:ec:ab:f5:5b:2f:6c:12:a6:cf:81:6d:13:62:b7:55:
         c3:2d:48:1d:45:00:e3:f4:31:4e:74:78:3a:78:3b:b5:b2:e1:
         6b:8f:19:f6:10:f3:b0:06:98:2f:a0:dc:1c:53:d2:b8:85:6d:
         df:73:1d:52:b3:f5:87:78:65:7a:25:cf:eb:9a:22:8c:4a:fc:
         3e:ab:71:c8:9a:b5:63:02:fa:8f:d6:c3:e5:bb:78:40:75:63:
         ee:86:09:83:af:c0:c1:50:ca:c6:98:9e:0e:bc:7e:8e:39:54:
         f6:f1:db:e0:d4:5f:5b:01:0b:8a:76:d5:af:32:a9:99:20:fb:
         48:1f:e4:a7:6a:0e:a4:bd:34:c1:3b:ef:8d:67:de:27:72:9c:
         76:06:2b:83:2f:a2:5e:45:33:9d:65:2b:be:41:35:36:53:44:
         37:56:cb:7d:bd:84:bb:3f:c8:e2:df:f8:3f:d3:32:0c:d5:ea:
         30:ef:85:40:fd:80:a1:0a:ef:a2:40:7e:b8:37:19:b6:d2:78:
         86:c8:38:31:9c:66:eb:c7:2c:c9:4d:12:e0:15:de:0e:6a:f5:
         b8:e0:e5:ad
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YxNzZBRjExMC8GA1UEBRMoN0RENTIzNTgyRTg1NUE5RjlBNjQ3NjA0MDQxM0JF
OEVDNkMwQjY1NzAeFw0yNTEwMjAwMjI0MzJaFw0yNTEwMjIwMjI0MzJaMBgxFjAU
BgNVBAMTDTY4ZjU5ZDYxLWRhZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnQ73MHKiPOpByPL54pKcl+H0VIWxZnX74r828mL+03jbNkqTv+i0XFmpo
u6+FseRzBKR02+OztbdVFkzh3O4vzSxi7fF6Hj6hsNmKZHDH0Wh8V1GDwuQ7l9wa
MCsDTHj8EfaGOHKL7jxrJ/f53NjQo0zWZtYv0wIwPcduawkcATZhW3POp4/kcjqh
iQaqPfpGZKuGSvPmlgNawN4WCPte1TA76F06csm4v00vTvLFWsbneqyihgiqe9ZI
EA/usGzIZ4NlC2iXRS63kbqK5fcLijtpwRVBX/s1GVlh27VlYU8JbJwlKjBWPN9S
geIOmxR3mosUiGNXfYgWvTHhEeh1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUe7hd
oQj1BixP+tvsp6oft1JDhSowHwYDVR0jBBgwFoAUfdUjWC6FWp+aZHYEBBO+jsbA
tlcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMTc2Lzk0N0Y3NEM0MDU2NTExRUNBRUNGQTcyOUQ4QTAxNENFL2ZkVWpX
QzZGV3AtYVpIWUVCQk8tanNiQXRsYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZkVWpXQzZGV3AtYVpIWUVCQk8tanNiQXRsYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0YxNzYvOTQ3Rjc0QzQwNTY1MTFFQ0FFQ0ZBNzI5RDhB
MDE0Q0UvZmRValdDNkZXcC1hWkhZRUJCTy1qc2JBdGxjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSNmMlk+YkaWWhIP59FYF3Rqi1gj0o
QbYuhZmvjpW2kYzI5wiu5Xbsq/VbL2wSps+BbRNit1XDLUgdRQDj9DFOdHg6eDu1
suFrjxn2EPOwBpgvoNwcU9K4hW3fcx1Ss/WHeGV6Jc/rmiKMSvw+q3HImrVjAvqP
1sPlu3hAdWPuhgmDr8DBUMrGmJ4OvH6OOVT28dvg1F9bAQuKdtWvMqmZIPtIH+Sn
ag6kvTTBO++NZ94ncpx2BiuDL6JeRTOdZSu+QTU2U0Q3Vst9vYS7P8ji3/g/0zIM
1eow74VA/YChCu+iQH64Nxm20niGyDgxnGbrxyzJTRLgFd4OavW44OWt
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:37:21 2025 by rpki-client