Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          jwikb/NO5SGLgYanrwgzvn1mR1Io43pOUZkVnrtouiE=
Subject key identifier:   FF:31:28:05:8C:E0:4F:CD:CF:64:43:DF:41:7F:2C:6B:DE:03:C4:51
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       03E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          03D5
Signing time:             Mon 20 Oct 2025 03:27:21 +0000
Manifest this update:     Mon 20 Oct 2025 03:27:20 +0000
Manifest next update:     Wed 22 Oct 2025 03:27:20 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: chwt6Fggqgh0CFIO6Tysf/BRF1SDwrWKZbuHsZ+Zf5Q=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
                          6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
                          7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
                          8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
                          15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Oct 20 03:27:20 2025 GMT
            Not After : Oct 22 03:27:20 2025 GMT
        Subject: CN=68f5ac19-276d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:b1:6d:af:2d:e0:0d:ba:67:e5:15:ab:60:
                    18:6b:b4:d7:36:0a:5a:71:92:f8:39:c7:9e:ef:ce:
                    0d:e9:bb:c5:f2:9b:c2:56:d1:78:1d:52:e3:29:7b:
                    95:e5:a8:ad:57:a8:9f:50:b3:02:a0:c5:b8:10:03:
                    94:1f:f2:38:17:3a:ba:20:f4:ff:80:e1:43:c4:54:
                    a9:1a:a0:a8:71:dc:0b:20:41:8b:f1:78:3e:22:4f:
                    45:ae:3f:fd:66:46:6c:83:de:18:95:09:a0:d8:7c:
                    a3:37:d6:6a:2b:31:29:57:7b:72:a7:9b:2b:b1:06:
                    fd:23:54:c7:7c:42:95:f5:06:0d:58:45:09:a8:4e:
                    75:d0:f4:5c:4a:a2:b4:76:d0:00:c6:76:81:2b:60:
                    a8:5d:bd:c4:31:3a:a3:6d:cf:36:aa:99:15:f1:22:
                    bf:2a:c4:2b:c1:53:df:ee:b6:44:8e:6b:ab:87:bb:
                    d0:f8:a0:ec:2e:d6:b4:0a:35:e4:51:5c:af:f1:f5:
                    dd:cb:9b:91:aa:8d:2a:d5:35:e2:8f:99:df:62:57:
                    16:73:8a:c4:1c:eb:29:23:1d:43:0b:e2:26:2e:01:
                    35:3b:49:ee:f9:5e:ae:e0:13:d2:18:bc:4d:51:be:
                    4c:8e:30:2c:99:a6:e1:d3:88:fc:64:5a:96:3c:55:
                    be:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:28:05:8C:E0:4F:CD:CF:64:43:DF:41:7F:2C:6B:DE:03:C4:51
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:b7:2b:14:ca:44:05:28:64:e0:11:8a:ab:d7:d6:da:83:
         20:82:ae:47:c0:5a:7b:ad:e0:81:81:ff:42:8e:4f:1f:8a:0d:
         74:88:2b:00:fb:62:35:3b:dc:09:9e:b9:87:a7:ac:1b:7a:87:
         21:47:26:45:d9:e9:b0:23:d9:c7:b2:d1:fc:40:cb:b2:65:70:
         db:3c:60:9d:0f:32:72:b5:b9:06:b8:ce:56:53:56:26:40:52:
         47:db:0e:e1:b3:fb:83:67:80:29:b7:b5:81:f1:88:ed:84:b8:
         53:d3:bb:a9:cd:5f:a6:36:78:cc:c0:71:9e:c3:5b:dc:74:f6:
         e6:68:a9:f2:c3:7b:0c:c1:e4:97:47:ca:d5:bc:a8:6c:7e:3c:
         7f:67:6d:a5:c8:9a:fe:1e:75:73:be:ad:48:c0:67:18:fd:90:
         3c:7e:9e:73:58:1b:65:28:67:68:cc:0b:15:95:94:a9:4b:02:
         a8:44:c4:d0:7f:5c:94:2f:50:cc:58:ec:49:13:53:57:9e:44:
         42:1f:0d:e2:fc:9d:6a:b1:5e:2a:57:32:e7:dc:0b:3d:53:01:
         77:fd:4c:3a:1f:2a:4c:6e:8a:28:92:09:11:ce:5f:6c:92:96:
         88:ac:ed:65:47:65:91:15:ce:aa:5f:a8:47:72:1f:f8:1d:90:
         30:9a:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:51 2025 by rpki-client