Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          qYZEgvatjSih7h2OsomYhjsqnfrLTFWySiRDp7gBZY4=
Subject key identifier:   47:B2:05:0F:5B:3D:C0:62:88:79:3A:52:CB:DD:F8:A3:45:4F:D3:AB
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       05DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          05D9
Signing time:             Mon 20 Oct 2025 02:33:25 +0000
Manifest this update:     Mon 20 Oct 2025 02:33:24 +0000
Manifest next update:     Wed 22 Oct 2025 02:33:24 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: 3wLHvEdtJp+4BoYF/xP70tfDPZXBmVzI/0i5ZM8FD3c=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Oct 20 02:33:24 2025 GMT
            Not After : Oct 22 02:33:24 2025 GMT
        Subject: CN=68f59f75-c623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:3b:86:a1:a7:e0:8f:50:55:db:7e:ce:97:
                    2f:62:8e:6d:0a:d4:a5:5e:ed:6e:dd:0b:fe:f4:21:
                    a1:d6:2f:5c:04:9e:ce:c3:4c:2c:b5:6e:64:19:8b:
                    41:a8:1f:07:5c:fb:47:8a:49:13:40:1e:de:a7:6b:
                    47:4c:b2:4c:41:d1:99:e4:82:f0:5d:38:63:32:02:
                    31:ba:b4:d3:97:41:d8:13:c2:db:a0:cf:7b:20:4a:
                    5d:57:c3:69:db:b3:66:7a:db:67:18:63:7e:82:f5:
                    f8:ac:af:dd:f0:13:e0:c1:e8:50:54:b6:48:e9:d9:
                    d9:90:b2:55:1f:49:8a:56:e8:09:9e:ec:ef:7e:ea:
                    85:55:f2:3c:e4:7d:87:34:6d:a5:c7:96:cd:c7:84:
                    75:67:79:e7:a5:6b:c6:8b:7a:dd:94:14:bf:1d:c9:
                    ca:5b:77:0b:95:6e:4d:6a:d9:a3:f7:73:ad:d8:b1:
                    bb:21:6c:8d:db:3d:f6:c3:54:f6:00:6c:d7:07:31:
                    ef:b4:d2:df:38:92:cc:14:74:74:8a:65:cc:06:69:
                    f6:63:c6:60:41:d4:03:d5:c1:49:c3:49:df:78:31:
                    92:2a:c7:a2:0f:9f:5e:3a:31:65:1c:4b:8e:2e:68:
                    8a:04:a3:9f:19:af:98:99:f7:7b:8c:6d:11:52:0b:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B2:05:0F:5B:3D:C0:62:88:79:3A:52:CB:DD:F8:A3:45:4F:D3:AB
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:48:de:e3:04:1a:64:31:d6:e0:8e:19:91:ea:64:3e:fd:36:
         e9:0d:2a:0e:74:97:ce:da:a6:82:45:fc:3b:24:13:da:20:69:
         10:de:77:42:fc:b0:ed:06:a2:0e:f1:10:a2:52:e8:75:64:bd:
         96:5a:fa:37:d9:6f:c1:79:c7:84:51:16:55:5e:f5:19:22:1b:
         f8:8a:10:df:c4:0f:5c:fc:8a:19:8a:06:fe:ba:5f:40:8f:f0:
         23:56:82:95:50:77:13:37:56:08:c1:2a:30:f9:d8:05:2f:88:
         af:b8:35:8c:fd:4a:f4:8e:f0:f3:7d:9b:c9:28:38:ea:56:59:
         d9:67:c2:4c:4e:4b:a4:45:60:27:b9:05:3b:09:22:12:bc:98:
         9b:79:56:04:79:c3:e0:48:7f:1e:f6:59:d5:83:d8:57:72:45:
         e8:bb:c2:05:e6:c1:4a:e1:7e:97:68:28:72:8e:c4:00:d1:4d:
         38:97:ed:73:f8:df:55:a2:7c:6d:8f:98:06:8a:08:eb:50:fa:
         3d:d5:a2:ff:bf:5f:8a:2c:c0:5f:a4:07:b2:ea:2f:29:f3:0c:
         1b:7a:9f:b3:f8:b0:f8:48:ee:0d:46:bb:8d:95:14:b0:c8:af:
         16:68:d9:25:99:ba:e9:8b:c6:13:5e:cf:76:a1:73:54:8d:18:
         05:1f:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:33 2025 by rpki-client