Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
File:                     _p4BMgoOlVJFOamGqPA_ketPwy0.mft (raw, json)
Hash identifier:          bhnqHFLgsMyEUR0qrv3DGOFpQLWUAh7GULVM1VCZgp0=
Subject key identifier:   BB:81:CD:21:C6:3A:F7:66:B4:E3:A0:46:08:D8:6F:D0:39:03:17:97
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Certificate issuer:       /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial:       0277
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
Manifest number:          0275
Signing time:             Mon 20 Oct 2025 04:09:20 +0000
Manifest this update:     Mon 20 Oct 2025 04:09:19 +0000
Manifest next update:     Wed 22 Oct 2025 04:09:19 +0000
Files and hashes:         1: _p4BMgoOlVJFOamGqPA_ketPwy0.crl (hash: iOwfGrrTeZJg/G408QhSxl9ki2RGCPusy84fGXKn3DY=)
                          2: 311C4904CA4B11EEB1A20B86775412E6.roa (hash: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=)
                          3: DC6D06E4CBEB11EEA9655CAB775412E6.roa (hash: rI3Z0thMS8kcuZHwZrlMXa6Fqk3EKGjdiGllXF+/6As=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
        Validity
            Not Before: Oct 20 04:09:19 2025 GMT
            Not After : Oct 22 04:09:19 2025 GMT
        Subject: CN=68f5b5f0-fe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:9f:ae:6e:a4:5c:17:64:d8:3b:14:43:94:
                    32:1e:a0:30:99:2e:ad:30:e6:c7:f9:53:6c:2c:a7:
                    1b:29:36:53:e8:e1:f5:ff:d3:c1:f4:3a:2f:ba:1c:
                    6e:af:bf:3b:f3:31:21:f8:1f:4d:03:d4:fe:16:e7:
                    2f:0a:2f:48:a0:48:f7:a5:da:70:99:fb:af:80:13:
                    e5:ec:5d:ba:38:ba:9c:0f:40:b1:c0:23:78:65:85:
                    0c:4d:21:ba:37:49:81:8f:56:ed:4d:7c:8b:9b:c1:
                    99:55:41:cd:1d:2d:60:60:e6:b9:d9:f9:b4:5b:ac:
                    53:8c:7d:f0:ba:f1:97:1a:51:10:3e:a7:8b:61:9e:
                    ec:20:30:d4:08:47:56:00:88:40:4a:dd:ba:8a:d5:
                    e3:7a:67:4e:91:aa:a9:d4:fb:03:35:4f:78:a1:6e:
                    3d:0b:ad:e0:95:e5:78:31:6d:dc:5d:98:7e:cb:87:
                    a5:95:6d:00:8a:67:99:ef:9f:79:48:46:f9:21:d1:
                    4a:c1:d1:54:e5:86:10:e9:7f:6a:82:b7:44:c7:cc:
                    08:c6:5a:0f:5d:43:65:b5:42:61:17:32:66:e3:b2:
                    47:54:a4:b5:3c:d0:cf:16:98:20:a9:21:17:f5:69:
                    0a:29:e6:f4:9d:a6:77:3d:2f:b6:82:2d:eb:ca:b2:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:81:CD:21:C6:3A:F7:66:B4:E3:A0:46:08:D8:6F:D0:39:03:17:97
            X509v3 Authority Key Identifier:
                keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f6:9c:0c:ef:5a:97:6b:27:45:54:b4:75:06:72:d5:d1:ee:
         5f:a2:78:ea:d6:8f:63:cc:35:b4:08:70:2e:4c:c4:42:52:5d:
         3c:a7:6c:cb:2e:3d:1d:af:72:75:52:38:6f:1a:f9:28:75:fa:
         e3:e4:fa:f0:e3:23:2e:23:07:81:2a:08:3f:24:27:c4:37:15:
         ca:cd:41:6d:22:1c:e3:5c:6c:4f:4e:b9:64:81:30:08:0c:a6:
         a3:00:0a:52:31:9f:a9:a0:13:f7:3b:eb:4a:9b:e2:3e:0c:38:
         7d:ed:f8:a5:fe:7b:ba:61:b1:14:bb:2e:82:70:93:3c:40:ee:
         7f:be:ec:ba:86:da:ba:d8:6d:db:57:8b:ce:d6:2a:99:1a:e8:
         aa:4d:94:d2:ba:60:01:3d:54:90:5d:74:4b:ad:57:57:80:62:
         23:52:07:ec:b3:2d:93:72:c2:0e:3c:33:17:2c:ba:1e:a7:ad:
         7c:0d:09:2e:78:73:48:b8:7c:50:32:9d:56:84:d7:38:5b:68:
         0a:ad:e1:7b:f1:6c:27:16:aa:85:8a:0d:14:42:87:0f:37:77:
         5d:8a:63:64:25:66:53:90:e6:d5:af:91:9a:d8:ed:6f:fe:d5:
         a0:2d:7c:a9:26:1e:c8:de:08:d2:f4:ee:d7:08:a8:c9:ad:24:
         ba:ff:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:10:24 2025 by rpki-client