Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
File:                     1wfkSz_UKAnv_gwP4_VABn04PVY.mft (raw, json)
Hash identifier:          TLsqQoY4jTy8zXKCXLS0gkWDag5nSfANimG5RLOUvP4=
Subject key identifier:   26:D3:5B:E8:54:FF:A7:7F:E8:94:FE:13:80:36:27:C3:30:D4:0E:2D
Authority key identifier: D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56
Certificate issuer:       /CN=F3690C75AF/serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
Certificate serial:       01C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
Manifest number:          01C1
Signing time:             Mon 20 Oct 2025 04:31:06 +0000
Manifest this update:     Mon 20 Oct 2025 04:31:05 +0000
Manifest next update:     Wed 22 Oct 2025 04:31:05 +0000
Files and hashes:         1: 1wfkSz_UKAnv_gwP4_VABn04PVY.crl (hash: CnHvoBtMH71ozvkEqZcNtPUOMlUtIcm+pBKD1KvnL1U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C75AF, serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
        Validity
            Not Before: Oct 20 04:31:05 2025 GMT
            Not After : Oct 22 04:31:05 2025 GMT
        Subject: CN=68f5bb0a-e2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:cb:2d:4c:d1:7e:0a:29:18:e7:e5:c6:e3:
                    f7:4e:0c:d1:74:f9:9b:84:39:b5:78:1e:5c:4b:c4:
                    cf:e6:9f:aa:0c:4a:5e:2f:7f:af:96:46:02:d6:58:
                    e5:96:47:ce:ed:ca:a0:b7:d5:53:98:bb:1c:81:e3:
                    03:f2:18:64:84:70:e0:f0:b0:9b:c2:7d:5a:84:70:
                    6d:6b:83:a9:74:c0:31:62:84:88:83:14:20:45:58:
                    e0:ab:0f:ae:e9:78:57:9a:f6:2e:df:f1:85:ed:dc:
                    7f:84:6a:a6:28:f2:d1:96:ed:52:1e:e4:82:3e:54:
                    69:9d:f2:2d:fb:92:08:84:ad:3b:19:f1:b2:68:02:
                    e2:fb:13:a8:ef:e3:25:2b:3f:a2:42:d2:40:86:c8:
                    40:0e:b0:3c:84:60:74:dc:0d:f5:04:de:07:f1:48:
                    1c:1d:0a:d2:47:46:d4:a3:ff:64:3d:cf:e0:d5:4c:
                    d8:e3:da:f6:a6:3e:3c:69:b2:1b:27:a8:fb:42:1c:
                    e0:48:5c:a5:b5:80:bd:d3:33:97:eb:c6:ea:86:90:
                    4c:05:91:95:c1:bc:5e:cf:14:ae:9c:4d:81:74:cf:
                    6c:bd:5d:e3:c2:fb:09:4c:14:2d:fb:25:62:df:29:
                    91:39:d6:ff:ce:af:8e:57:1c:95:e8:93:d4:a1:d1:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D3:5B:E8:54:FF:A7:7F:E8:94:FE:13:80:36:27:C3:30:D4:0E:2D
            X509v3 Authority Key Identifier:
                keyid:D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:0d:ff:d9:74:fb:b5:a2:11:bc:19:00:aa:60:06:b7:6f:
         3f:02:f4:60:ba:59:46:81:3a:61:1f:f1:6c:96:e1:6d:9e:78:
         8b:e1:0f:8b:c5:72:1e:d3:a2:22:cf:16:cd:1d:7e:f5:5a:81:
         75:79:4a:99:77:93:79:2e:11:fe:1e:d9:fb:e6:05:ba:06:58:
         f4:87:a9:35:f9:fc:64:25:4f:4d:90:9f:24:09:35:25:85:42:
         cb:29:66:67:e9:11:24:8b:e5:47:da:06:e6:f0:79:c2:a9:93:
         e3:50:32:38:37:bb:51:7e:b5:39:cf:c0:47:ee:6c:a0:66:0e:
         14:96:fb:56:79:f7:dd:92:e0:2d:e5:d8:27:35:32:66:ef:aa:
         f9:98:22:5d:38:e9:25:52:67:1d:86:b1:e5:64:a2:6a:7c:5f:
         8e:e6:b4:ae:fe:60:3e:c4:6a:24:cd:83:53:a4:e5:d6:e9:4c:
         b9:45:c3:6f:a3:cd:e7:87:4a:b7:9b:87:e7:04:37:e6:0d:f0:
         a6:28:e2:48:bd:8c:60:f8:6b:5f:52:03:f0:8c:1a:32:cb:04:
         14:b0:43:30:29:c1:67:3e:2b:3a:40:a1:d5:32:43:2a:d1:ea:
         c7:5f:9e:4d:71:ab:83:ba:17:99:c7:d9:64:81:ed:dc:d7:41:
         14:d5:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:02 2025 by rpki-client