Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
File:                     wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft (raw, json)
Hash identifier:          I/GgDPa+2m0jiICisOASbIXE47JRXAnMRUAmorI1J20=
Subject key identifier:   0C:FE:7C:F5:8F:08:2E:41:7C:29:AB:76:4B:29:94:4A:03:C1:CC:B0
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       0432
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
Manifest number:          0407
Signing time:             Mon 20 Oct 2025 03:24:51 +0000
Manifest this update:     Mon 20 Oct 2025 03:24:50 +0000
Manifest next update:     Wed 22 Oct 2025 03:24:50 +0000
Files and hashes:         1: wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl (hash: Hp6yQ1JrlMYy1HL7bMXKrhk85wAe3v4w0z8bpgs+Iao=)
                          2: 7585C434A36211F0B49A83AADAE4EC9C.roa (hash: mzEcLu+I7zJJUaAnBgEPPDoKGrDo3rYdMmkKp6vkaKk=)
                          3: 6E002B7A582911F081D681B7DAE4EC9C.roa (hash: CTaTj5YF4V+bg4KJYXYIAmso8T3i1fhFShVXU2Snf5k=)
                          4: F43D6930A83511F0BC8A38E7DAE4EC9C.roa (hash: XTw1rTEthgk2g59vYMTm9U70mr47Am47T/ne830ENLk=)
                          5: F5D219905CAD11F0A4E9D9ACDAE4EC9C.roa (hash: E0mIDm1W7m6U3cc2aBTow4RrHyw/dh4ay5EbgUAHlvk=)
                          6: 11B79A8857ED11F0BB37DCB6DAE4EC9C.roa (hash: LGj0TGBQ9PlzMfbB8gss/Pg+nTIpWMAk3qHnGrpm+ig=)
                          7: 126EAE268F4E11EEAECC1E62D25BE465.roa (hash: RVoLCOu04kDM3ma5697yf0ycFSMBgw51El1f03RGHNo=)
                          8: 21D354BA576211F098BCD5A6DAE4EC9C.roa (hash: 4xF4q1aGLDqPWO/lN87jtt4mzGDncXf1cKquoSVh8Jo=)
                          9: 639B8948582B11F09C9191C4DAE4EC9C.roa (hash: bR5HPR1uB5A3pUPtLMp4f5jA1hg81oOVbLGlF7vSFUE=)
                          10: 4DF5B646A83E11F0B115F29CDAE4EC9C.roa (hash: 1I4QlyRJtH58+FmbvgaBVwb8TmvTGwmLG/FBtNGEc2U=)
                          11: 9EC7E0FC664011F099D444DEDAE4EC9C.roa (hash: T6NsArflMlR27ihl+RWlr6t/CZ4ImER2FSyy6Y2HGzo=)
                          12: ADCC819C6F1C11EEA6EDF2894AD9E6FC.roa (hash: 0EsFQL/056qkK52lVV1RuJFjZ4sGqQwRLakj5+kuntc=)
                          13: 7D7FF4BEA36411F0B8DCB4B5DAE4EC9C.roa (hash: SBSFhFouBWocCQSNhqhVWZk69czQ66awyzRm3+xF0V0=)
                          14: 0908078845A711EEAB5673554AD9E6FC.roa (hash: tqO3uk+osFvKeD1dMRNKDu46qC2fHNV6k3SbxzfnOnA=)
                          15: C2C1572A575B11F09F7D4F7FDAE4EC9C.roa (hash: oT7LXoUtdT1Oeg52MZHLEf/CMeovLLw6njnrby9Y2rA=)
                          16: 5F59381C737E11F0AE9654A5DAE4EC9C.roa (hash: +eQGH4JWW6JBqSSbTejgVwja+jvovxrHQh1cSQUlKf8=)
                          17: BB921280582A11F082413EC0DAE4EC9C.roa (hash: uNGXnDI1G5CyDUQ0B2eKBb7/gWeHJujLDgmvv6LRYik=)
                          18: F8703DBCA9D311F0864DDECEDAE4EC9C.roa (hash: Oja+SAFoxpQD5GTECGpSo4HMoaVvions272/uyxavdc=)
                          19: 875E0D6EA36311F0AA6DF4AEDAE4EC9C.roa (hash: 4efvNiFyfuNVE4eXc9fh1MtJHKt6dZYGX7ugnMN6zH0=)
                          20: 7BE3DA509ECB11F0B8ED66DCDAE4EC9C.roa (hash: Yv9EYVsOa8ZtIz8yIrYaEcrbV+1DlYyUsMHPDQ29rmo=)
                          21: 755C3946726011EE93489E6F4AD9E6FC.roa (hash: I/IXDJdydOXsHxPlVBdH54iLozFOHgSirildHRHX6us=)
                          22: 6535223A5B2A11F084BE7DCFDAE4EC9C.roa (hash: E6XUO21M1WiWOfXgXoIJnViWEjPsKZ84YPJ9VFWP2jo=)
                          23: B56BBAFEA8E411F0B7F402CFDAE4EC9C.roa (hash: Bla5/qlHkrSmFTwSMnkRCjGp7wHs2L6Dvpf24nq6H+s=)
                          24: 64F50FBC740C11EE99EADC474AD9E6FC.roa (hash: W0IpuC6GX4xRD5RgHmpflT28ws+r3XoBXlaHP+TeZBA=)
                          25: B1B22C14798311EEA5C954334AD9E6FC.roa (hash: Pe3W5d67FeDOdg0O6CjHDs+dvLUaa9BBxTbqB+4ADZM=)
                          26: 3075B79AA83B11F08DE4178BDAE4EC9C.roa (hash: MTFce5WtJZPL9HdIzD6xgiNe/EZ7LlPCAda85tZnCIE=)
                          27: 9517B13E6DEF11F086048BF0DAE4EC9C.roa (hash: EnBy4oFHyBx7vgZfUV3uQ+WB9FIGDXRiwzC8lkvrLEU=)
                          28: 016C59AA582B11F0AEBD90C0DAE4EC9C.roa (hash: BQmO7rUNBXqX5CcwT82RJ6WRtMVErbG+OZzMCXemw38=)
                          29: 4FC9F8B0582A11F0926B49BCDAE4EC9C.roa (hash: cJA24+0QFZHgLG+qNh475FbEtKunGho9e7RUrnJHRT4=)
                          30: 5BFD5FF2628C11F08702BDA9DAE4EC9C.roa (hash: 3qER9AVYL3rqbEnQkEA/pNLjhLYQCepw4beWhWdIRqw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1074 (0x432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Oct 20 03:24:50 2025 GMT
            Not After : Oct 22 03:24:50 2025 GMT
        Subject: CN=68f5ab82-6322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:04:4d:f1:ec:32:ac:03:69:5f:41:2d:cd:88:
                    cb:cb:99:03:73:0c:eb:7f:ef:23:bb:8e:ff:70:1f:
                    5a:3e:92:82:a2:46:5c:86:01:70:fb:e0:d9:c9:99:
                    be:e8:eb:bd:9a:79:54:f5:f6:72:a7:ac:71:a7:ce:
                    91:33:ed:72:07:88:b0:e8:6d:ea:18:88:7d:0f:39:
                    18:d5:1c:cf:b1:54:ee:c8:97:9f:98:17:5c:e1:7c:
                    da:23:26:4a:85:8a:c2:c1:6f:ba:aa:b6:49:85:5d:
                    1e:6f:44:bf:93:a5:e5:c8:5e:75:16:cd:39:38:dc:
                    87:82:d5:cf:40:bd:61:4d:c7:40:69:22:2c:20:80:
                    e2:f6:da:13:0f:ed:32:e3:44:a1:ad:20:2f:d3:fc:
                    15:63:eb:69:85:61:23:06:18:eb:3a:bd:f2:6a:ff:
                    8e:0c:16:6d:da:dd:58:08:06:69:d1:7c:ab:96:84:
                    33:c4:24:73:03:72:34:70:8c:5b:a2:1c:9c:3b:4a:
                    37:1c:8a:2f:5a:14:63:0b:a9:4b:0c:bc:4b:bc:d9:
                    2c:89:93:99:1a:51:68:c5:99:2d:5b:c8:a5:16:71:
                    0c:6f:c6:54:75:e6:7e:c7:7f:c8:68:9c:19:e7:a4:
                    4e:aa:73:d0:a6:1d:c3:c3:53:2c:aa:71:10:ea:b1:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:7C:F5:8F:08:2E:41:7C:29:AB:76:4B:29:94:4A:03:C1:CC:B0
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e1:7e:cf:f5:cb:6b:6f:6a:bc:8a:89:f8:ab:78:41:d3:70:
         da:e1:e4:66:b1:24:1a:20:26:7e:67:48:56:03:d7:84:d0:43:
         b5:b5:f8:98:2e:54:dd:0a:e4:6e:65:c8:49:12:96:6c:28:14:
         e9:7b:7e:a7:e8:56:95:0e:5a:60:43:9e:1b:89:a1:8a:b0:c0:
         54:4d:45:23:4c:55:de:96:03:72:73:17:f5:e9:ae:d6:2b:5f:
         e6:16:05:a1:3e:ac:52:f0:ec:0b:64:96:3b:bb:86:a9:16:29:
         1d:03:4e:e9:bb:c9:f9:22:5b:35:c6:30:a4:53:9b:64:f6:96:
         81:08:30:36:c6:7a:9d:d8:16:64:81:14:f2:b5:42:cc:d8:7c:
         f6:18:70:61:41:7f:8b:fe:01:58:c4:c8:ce:ba:be:43:97:47:
         3d:c2:fd:d1:59:b3:5a:f4:d4:09:30:8b:c1:71:87:eb:d0:2c:
         62:1e:fc:f4:84:2a:78:81:dd:8e:d7:98:f0:95:25:b2:b7:92:
         4b:e0:8e:ba:6f:c2:2f:5c:e4:57:b4:1d:0f:f3:19:0d:c0:37:
         5c:79:e6:b7:e7:7f:b5:b5:e5:0e:34:87:9f:fd:42:e4:58:fb:
         6f:8c:0d:d7:30:04:65:c7:46:cf:d0:24:08:56:51:35:e1:ca:
         eb:9f:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:31 2025 by rpki-client