Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
File:                     FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft (raw, json)
Hash identifier:          BhoFgyXSBca8qvbgX0oD398dlcRm2lik5V7veKRMXHQ=
Subject key identifier:   C2:CE:8B:15:B1:8E:3B:42:04:15:A3:81:4A:A8:FB:95:E9:BE:B1:AA
Authority key identifier: 15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
Certificate issuer:       /CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
Certificate serial:       019F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
Manifest number:          019E
Signing time:             Mon 20 Oct 2025 04:37:01 +0000
Manifest this update:     Mon 20 Oct 2025 04:37:00 +0000
Manifest next update:     Wed 22 Oct 2025 04:37:00 +0000
Files and hashes:         1: FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl (hash: 3XTQt/smyWJyj6zVNRJ9JuDBcsXsM1MmBi3SxQklIM4=)
                          2: B505C262710911EF82F828AE762E951A.roa (hash: xT25C22GG0twXqlKDHqtHM6ZD8MTGkUTk1OnWMySjRQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A32F5AF, serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
        Validity
            Not Before: Oct 20 04:37:00 2025 GMT
            Not After : Oct 22 04:37:00 2025 GMT
        Subject: CN=68f5bc6d-d707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:f5:6c:63:ca:62:c0:2c:57:bb:a3:41:07:
                    ab:64:7b:b5:00:be:99:8e:e7:89:09:ae:29:40:e9:
                    fb:86:fd:05:3b:4b:ec:77:40:c3:26:73:77:29:72:
                    e6:c7:82:2c:9d:db:1f:0f:a4:26:53:78:63:f6:25:
                    7e:1b:75:08:37:ca:7f:96:14:76:b6:03:aa:56:50:
                    cb:a0:ea:ca:e4:8a:5f:8e:5a:65:a1:7a:37:76:65:
                    0b:b7:cb:71:8d:ab:0e:12:73:26:f4:ea:d7:43:2b:
                    9c:c2:49:5e:9f:a3:9e:a4:e7:e9:33:e9:9e:21:d2:
                    0f:82:8f:62:b5:29:8b:bc:d7:f5:c2:f4:28:7a:5d:
                    6f:a6:00:a4:49:7d:53:78:6a:2a:1a:68:f1:68:15:
                    f5:58:af:51:ac:61:82:9d:3e:56:6a:f0:a8:f4:22:
                    ef:90:45:59:a8:c1:57:9d:f6:d0:f8:a5:af:40:77:
                    31:ea:75:9f:11:9e:74:3a:12:14:e6:9f:fa:4f:f0:
                    42:5c:12:34:20:b2:a1:98:8e:ea:bd:4b:16:7d:56:
                    21:68:7f:31:29:44:01:93:d5:bf:8a:b7:95:d8:c4:
                    c1:a5:38:1e:63:4e:05:b1:82:1b:a6:f9:f5:43:f2:
                    10:7c:ef:66:b7:d7:b6:92:4c:89:f0:c4:ba:e4:f5:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:8B:15:B1:8E:3B:42:04:15:A3:81:4A:A8:FB:95:E9:BE:B1:AA
            X509v3 Authority Key Identifier:
                keyid:15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:69:08:3c:95:3e:41:16:1c:91:ed:c8:ea:0a:7c:b5:88:
         a0:8d:68:5a:2a:e6:e0:5b:04:21:c3:ae:5c:07:b7:25:fb:69:
         d2:dc:8d:5f:a6:64:6e:3f:33:12:c4:b0:09:cc:3a:93:0a:dc:
         0a:7d:fd:21:c0:60:55:0e:b1:c4:bf:a7:0b:f3:40:93:07:6d:
         68:25:f3:61:74:c9:80:9f:fc:1f:c2:96:14:35:35:99:5f:ec:
         b8:ae:58:95:ee:f1:a8:42:be:30:d3:3e:5f:2d:89:4c:9f:23:
         3f:2c:89:15:6e:ae:bf:35:17:b9:03:09:66:d7:87:c3:e1:00:
         23:db:39:a5:55:43:d2:de:3f:f2:7c:c4:03:bf:c3:e7:ae:45:
         48:7d:d8:b2:56:dc:1c:78:95:57:79:d3:2e:08:1d:17:c1:67:
         cb:bb:1b:83:46:75:d3:f2:4f:7d:00:fb:5a:df:4b:42:7f:c0:
         ff:e8:6d:08:b7:ae:5b:80:30:bc:17:e6:ec:1d:55:22:a6:0a:
         58:16:43:f8:8a:34:62:0b:dd:e0:1b:b6:e0:3c:1d:93:9b:4d:
         e9:d2:95:d4:01:27:9c:ef:04:28:5b:dd:ce:0e:3f:92:07:80:
         67:aa:a4:58:c4:0c:36:ac:6a:12:f5:6f:92:b4:6f:7a:14:03:
         57:dc:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:18:19 2025 by rpki-client