Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
File:                     H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json)
Hash identifier:          jb5qIppbP7hheyMFgpPNV5DNvpZZQLgFAmm857qQN/4=
Subject key identifier:   D6:69:96:8B:80:51:33:F3:DB:CA:68:97:D7:D4:9C:63:37:58:5A:88
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       066E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
Manifest number:          0656
Signing time:             Mon 20 Oct 2025 02:19:58 +0000
Manifest this update:     Mon 20 Oct 2025 02:19:57 +0000
Manifest next update:     Wed 22 Oct 2025 02:19:57 +0000
Files and hashes:         1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: DmVb28xZZVZal0wBZnDcvCIClkTLjOOM7edXxmI8btk=)
                          2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=)
                          3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=)
                          4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=)
                          5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=)
                          6: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=)
                          7: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=)
                          8: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=)
                          9: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=)
                          10: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=)
                          11: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=)
                          12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=)
                          13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=)
                          14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=)
                          15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Oct 20 02:19:57 2025 GMT
            Not After : Oct 22 02:19:57 2025 GMT
        Subject: CN=68f59c4e-c3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:64:40:82:4f:a8:e5:62:1c:aa:f0:2e:cb:
                    11:8f:c9:89:2e:aa:84:da:a7:89:0f:3e:61:24:ae:
                    65:c5:86:0e:48:3a:b0:5b:25:d7:94:18:e4:72:1b:
                    b5:28:76:0f:45:12:80:7a:87:4f:c9:31:b8:f9:4b:
                    43:e7:d8:42:0b:3e:00:2e:5b:66:37:3e:b2:91:88:
                    ea:e3:6d:03:70:52:60:37:2d:6d:16:1a:ca:e0:c8:
                    ff:e6:cb:98:49:b9:be:15:7a:8d:e9:c8:f4:b3:fc:
                    71:e2:37:33:40:dc:93:2e:ae:79:d6:81:d0:6e:af:
                    87:69:e0:a0:ea:1a:07:8f:ff:40:15:b7:34:ad:d7:
                    14:4d:25:f2:ac:48:fa:00:58:3d:b5:d3:30:c5:9f:
                    6b:c3:b9:a7:e0:ce:b9:95:ce:82:42:d8:f9:f4:55:
                    cd:41:21:e8:be:1b:9e:0d:56:16:4f:93:ac:b8:ab:
                    ad:c6:81:c1:b2:76:f4:be:9a:12:b4:1c:b3:52:65:
                    99:e7:9d:d1:79:43:b9:ee:d6:a2:9d:d2:14:5a:0a:
                    1f:b4:67:e7:16:52:87:a0:f1:64:0b:e4:4e:d7:3d:
                    83:1a:ce:5b:f5:81:55:af:6a:13:97:b6:2b:d2:eb:
                    29:38:19:8f:27:a1:3b:1a:ac:26:3c:81:5f:a2:a4:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:96:8B:80:51:33:F3:DB:CA:68:97:D7:D4:9C:63:37:58:5A:88
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:55:51:e2:6b:e4:a1:8b:e6:5a:10:e1:c8:d4:c5:6f:3f:2a:
         f0:92:6f:90:67:12:66:53:2f:c9:88:57:a0:4b:84:b5:9a:19:
         89:74:d2:c7:9c:9c:9e:79:ac:eb:4b:49:4a:fa:8e:07:7a:4d:
         19:3c:1b:11:06:2a:f1:84:da:2d:1c:1f:16:a0:f6:e7:ea:c1:
         b3:37:5e:97:9f:53:93:3e:fa:65:f2:2e:a4:92:fb:69:83:ec:
         e7:38:fb:cf:b2:f5:5d:b1:41:65:63:36:ba:6f:e5:ef:f8:a7:
         cb:9e:60:90:9e:2b:9d:e1:08:ad:30:4e:0c:38:91:55:0e:fb:
         e0:f7:0d:12:a0:bd:14:20:fb:0d:df:7a:28:24:92:f3:88:6d:
         37:5c:3b:03:0d:ba:29:28:e2:a8:73:5c:60:89:5f:89:c6:10:
         1a:01:8f:37:5a:d9:c6:33:b5:38:38:ac:11:a4:fb:13:91:fa:
         5c:85:33:96:34:ae:55:3a:eb:7f:63:e6:ad:4d:6d:56:a3:e5:
         a4:12:3a:ea:07:4f:83:4c:0e:c6:05:8c:a6:05:7b:cc:8d:4a:
         45:06:e7:11:68:c6:85:37:bb:09:86:65:9e:4c:0a:85:7b:4b:
         b9:ec:11:06:c6:f5:92:84:47:7f:85:9a:39:42:83:84:c7:e8:
         5b:b7:d2:e8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0
OTg0MkM4RDZBMDAeFw0yNTEwMjAwMjE5NTdaFw0yNTEwMjIwMjE5NTdaMBgxFjAU
BgNVBAMTDTY4ZjU5YzRlLWMzYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsnmRAgk+o5WIcqvAuyxGPyYkuqoTap4kPPmEkrmXFhg5IOrBbJdeUGORy
G7Uodg9FEoB6h0/JMbj5S0Pn2EILPgAuW2Y3PrKRiOrjbQNwUmA3LW0WGsrgyP/m
y5hJub4Veo3pyPSz/HHiNzNA3JMurnnWgdBur4dp4KDqGgeP/0AVtzSt1xRNJfKs
SPoAWD210zDFn2vDuafgzrmVzoJC2Pn0Vc1BIei+G54NVhZPk6y4q63GgcGydvS+
mhK0HLNSZZnnndF5Q7nu1qKd0hRaCh+0Z+cWUoeg8WQL5E7XPYMazlv1gVWvahOX
tivS6yk4GY8noTsarCY8gV+ipLSBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1mmW
i4BRM/PbymiX19ScYzdYWogwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI
1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy
R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB
MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlVVHia+Shi+ZaEOHI1MVvPyrwkm+Q
ZxJmUy/JiFegS4S1mhmJdNLHnJyeeazrS0lK+o4Hek0ZPBsRBirxhNotHB8WoPbn
6sGzN16Xn1OTPvpl8i6kkvtpg+znOPvPsvVdsUFlYza6b+Xv+KfLnmCQniud4Qit
ME4MOJFVDvvg9w0SoL0UIPsN33ooJJLziG03XDsDDbopKOKoc1xgiV+JxhAaAY83
WtnGM7U4OKwRpPsTkfpchTOWNK5VOut/Y+atTW1Wo+WkEjrqB0+DTA7GBYymBXvM
jUpFBucRaMaFN7sJhmWeTAqFe0u57BEGxvWShEd/hZo5QoOEx+hbt9Lo
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:02 2025 by rpki-client