Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
File:                     SJIyUipHGpLr60FtxMHfpUo9NAA.mft (raw, json)
Hash identifier:          JJMkGR8Q3g0zU4wT3tyaJaKDVKOHkJ2oGeMdvk+Q5KU=
Subject key identifier:   B7:11:41:A6:0F:C2:26:A2:E5:D7:6C:7A:55:FB:23:E3:F8:2E:D7:5C
Authority key identifier: 48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00
Certificate issuer:       /CN=F368F7EAAF/serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
Certificate serial:       65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
Manifest number:          64
Signing time:             Mon 20 Oct 2025 05:08:43 +0000
Manifest this update:     Mon 20 Oct 2025 05:08:42 +0000
Manifest next update:     Wed 22 Oct 2025 05:08:42 +0000
Files and hashes:         1: SJIyUipHGpLr60FtxMHfpUo9NAA.crl (hash: EbfS/vGWpV2CYCQThsf0ROMWN3hRNnINJJ49enwpfzM=)
                          2: 3D3E113460A111F0BC66BDB5DAE4EC9C.roa (hash: Yz2LgMo8/maeZeqiFDXEgU1Kho0yd40MGr9r17BWqfM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F7EAAF, serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
        Validity
            Not Before: Oct 20 05:08:42 2025 GMT
            Not After : Oct 22 05:08:42 2025 GMT
        Subject: CN=68f5c3db-539e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:73:46:a0:55:09:a9:3e:0d:d5:35:23:f6:
                    da:64:9d:56:46:f4:41:db:07:e3:f7:90:15:06:bd:
                    64:61:ec:81:cf:68:9c:5e:33:d3:4f:e0:d5:50:d3:
                    b6:52:1f:16:e3:14:81:8b:88:8c:7c:b0:fe:c8:f6:
                    fe:7d:fe:d5:7f:95:51:55:e6:aa:7f:88:37:0a:d9:
                    a3:57:b8:27:1b:23:53:bd:18:60:e3:c4:0e:59:80:
                    b3:64:d9:4b:ae:2d:bc:f2:0e:5a:eb:56:3c:02:bb:
                    e6:94:53:19:43:d0:c7:a3:9f:eb:15:cb:ac:6e:19:
                    df:d2:06:dd:07:cf:83:f2:34:34:d0:cb:45:7f:f9:
                    3f:0f:9b:3e:7c:85:d3:b2:47:d0:08:dd:67:82:45:
                    63:d0:e0:9e:8e:d7:b1:7d:7a:e9:b6:55:cf:62:df:
                    3a:a0:df:4d:f7:8a:3b:2a:76:70:5d:f0:50:dd:81:
                    d2:c7:57:0c:00:ce:c5:38:5c:fc:29:4d:1a:a9:71:
                    e1:14:7c:4f:d2:6e:35:9f:33:e0:46:58:07:46:a5:
                    8a:c2:ed:37:7d:8b:4c:b6:96:39:3d:39:81:a0:d1:
                    35:34:3f:d4:96:4b:71:be:16:4d:cf:20:57:f2:94:
                    fa:c2:a2:aa:09:a3:79:9c:86:43:d3:de:db:31:8d:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:41:A6:0F:C2:26:A2:E5:D7:6C:7A:55:FB:23:E3:F8:2E:D7:5C
            X509v3 Authority Key Identifier:
                keyid:48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:c4:ff:68:48:76:fa:ab:f2:de:11:3a:f4:5b:d6:ba:f8:
         f0:04:54:65:27:a9:05:b9:a7:8c:fb:c3:45:8f:3e:df:e3:33:
         aa:f3:72:f7:c5:49:ab:d2:17:0f:c6:c7:27:29:7b:35:6c:01:
         fd:67:14:4c:b2:c0:3d:47:6d:3c:28:23:7a:a9:59:93:13:b7:
         00:ba:ea:c7:55:7a:d4:7e:2d:7a:02:c7:21:2b:13:0b:47:9d:
         74:75:a6:9c:cc:79:44:4e:8c:c3:0f:bc:68:4e:8e:4a:8a:4b:
         39:e0:55:b4:92:36:08:d5:54:ef:43:0c:0b:f2:02:f1:ac:26:
         72:30:46:8b:c1:77:63:d3:57:45:4e:69:67:35:33:a0:9e:d4:
         79:74:4a:29:4d:4b:e8:37:81:a7:e6:fe:41:73:35:f9:64:e4:
         e4:9f:f9:43:bd:b0:d2:48:b4:c6:27:1e:1c:f5:c6:53:ee:03:
         ae:bb:07:0b:20:04:26:67:29:e0:6f:f4:a3:d2:69:10:1c:42:
         b3:29:54:80:8b:4c:f4:26:ac:23:60:75:7a:90:96:bf:52:e1:
         28:3e:0b:39:74:52:e9:7c:c9:a1:15:0e:77:91:1d:5c:45:69:
         98:65:eb:da:5a:ba:cc:f6:09:03:2d:59:62:74:07:e2:40:e5:
         ee:20:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:48 2025 by rpki-client