Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
File:                     pM4k_g7il2reULOd__0tfkLA8oo.mft (raw, json)
Hash identifier:          tQAcmqxGmL+s/2dGHNaqTVjME/pC3XtQb0uyM5DRwfg=
Subject key identifier:   1C:CE:4B:72:1D:10:64:9D:AB:89:A6:94:51:54:CA:67:F3:8E:E2:15
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Certificate issuer:       /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial:       0716
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
Manifest number:          0714
Signing time:             Sun 19 Oct 2025 02:00:11 +0000
Manifest this update:     Sun 19 Oct 2025 02:00:10 +0000
Manifest next update:     Tue 21 Oct 2025 02:00:10 +0000
Files and hashes:         1: pM4k_g7il2reULOd__0tfkLA8oo.crl (hash: MOFBJQaOQoIaDgtNAq100s7FP4u11CbeXpCiWKKoWCY=)
                          2: 390A5A34413211EB90B58A09F8AEA228.roa (hash: BLtGDMxqbFhD8bZdR2LWNCdZfA1WGqCQ2lVMd70kTH0=)
                          3: CAB95F3A413111EBAEFE3009F8AEA228.roa (hash: 3J8csPHyGJk8M/namF0fmG+U4+q5VVyeZJygS1yfavI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36987B2AF, serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
        Validity
            Not Before: Oct 19 02:00:10 2025 GMT
            Not After : Oct 21 02:00:10 2025 GMT
        Subject: CN=68f4462b-f105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:cc:8a:36:40:07:52:c6:5a:cc:90:0b:2e:
                    79:2f:d8:2e:82:d0:93:67:9e:f4:94:b7:6e:12:f0:
                    96:c8:57:8e:40:b0:c0:40:da:6c:e3:a8:24:16:37:
                    28:61:64:70:5c:e0:96:a8:38:01:68:e2:23:af:85:
                    c3:07:15:77:c3:4d:b7:ed:74:4f:db:5e:57:66:cf:
                    fb:dc:a1:f9:d9:40:a0:5f:2c:1d:10:c4:2b:07:29:
                    67:24:32:78:9c:e2:68:c6:aa:4a:72:c7:93:35:67:
                    bd:b6:22:7f:86:cd:b8:96:3c:50:3d:a9:3a:39:1c:
                    d9:12:11:63:bb:17:36:ff:e4:10:a8:e1:9c:d4:0c:
                    26:e8:31:e4:0a:ba:fc:b2:50:9a:45:43:5a:93:7f:
                    56:2e:32:ba:5d:46:1e:a3:c5:4c:e9:9e:fd:ff:a6:
                    f1:05:67:3a:7b:7a:70:98:af:cc:68:47:20:6f:2b:
                    a0:b4:6a:de:2e:8c:22:24:03:b6:dd:ee:94:79:ff:
                    7d:2f:8e:d1:d3:b5:6d:c8:fc:91:63:b8:4b:1c:21:
                    00:aa:d7:53:44:57:b5:df:d6:19:24:5b:54:15:13:
                    22:68:19:aa:38:f3:02:6d:f4:ed:c5:a3:bd:98:bd:
                    b9:35:5b:61:54:0c:9f:ae:ea:2f:15:a9:e8:bf:83:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CE:4B:72:1D:10:64:9D:AB:89:A6:94:51:54:CA:67:F3:8E:E2:15
            X509v3 Authority Key Identifier:
                keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:6a:c0:5b:9c:83:a6:f0:a5:5d:ea:51:dc:0b:fc:96:61:
         20:75:c6:dc:08:e6:3c:db:5f:74:58:c2:55:c3:52:e3:7c:5d:
         1c:cf:d2:29:a1:e0:e9:08:31:02:1f:96:b0:4e:84:28:0b:03:
         9b:54:9f:22:97:24:34:b5:dc:8a:20:5c:b7:04:0a:be:8c:95:
         4e:83:f3:3b:be:5d:1e:d1:83:7a:3c:1d:2f:cc:ef:89:90:22:
         78:ae:24:f4:ae:04:d6:39:0b:19:39:21:9a:50:64:1b:a8:f3:
         d3:b5:da:80:b9:90:62:32:59:ca:df:87:61:41:da:25:12:67:
         3e:ff:f2:98:e2:b2:42:fc:2e:81:38:47:b5:97:7e:ee:b1:70:
         7c:da:e9:87:d2:ce:a8:56:3a:78:1b:a4:27:0a:c7:6e:f8:47:
         e5:b3:75:8f:35:75:e7:de:42:23:ba:de:18:d4:31:14:26:96:
         ad:ae:bd:31:98:96:a7:dd:30:4c:06:3f:41:23:2e:c3:0d:ba:
         ea:e2:85:38:16:fd:6b:bc:4a:92:45:ae:d3:39:6b:bf:15:48:
         2d:b4:82:7d:c8:30:b7:a1:37:58:9a:09:6f:e2:e6:e3:f8:66:
         4f:26:10:3a:56:54:b8:f0:ac:3c:35:69:d1:cc:ac:b1:29:ba:
         e5:41:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:06 2025 by rpki-client