Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
File:                     NewylCgvp6NUePgvkJSwP-Jgb7Y.mft (raw, json)
Hash identifier:          Np1BOg0ezA27QQlXT0DkLa0BPJ3vqV5/Cgq0xhDABic=
Subject key identifier:   E2:2D:78:4D:80:E3:D8:7F:BB:B1:8B:F0:7E:5F:F3:FD:79:6B:FD:82
Authority key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
Certificate issuer:       /CN=F36AB1CDAF/serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
Certificate serial:       081C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
Manifest number:          0816
Signing time:             Mon 20 Oct 2025 01:47:15 +0000
Manifest this update:     Mon 20 Oct 2025 01:47:14 +0000
Manifest next update:     Wed 22 Oct 2025 01:47:14 +0000
Files and hashes:         1: NewylCgvp6NUePgvkJSwP-Jgb7Y.crl (hash: Dja/GAjYn4rBOBPzVtpgkf1R0FMb+gSfodEhXc9eGyM=)
                          2: 274D32BAA87211F0A513AFDCDAE4EC9C.roa (hash: dMmC61qu86t31B1siiWb387Uypaf5odQkXtxFjVGQaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB1CDAF, serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
        Validity
            Not Before: Oct 20 01:47:14 2025 GMT
            Not After : Oct 22 01:47:14 2025 GMT
        Subject: CN=68f594a3-f0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:dc:16:f6:8b:ea:8c:35:18:68:46:ef:55:
                    c2:be:25:7a:56:93:f6:3a:b6:55:53:48:07:0f:e0:
                    80:63:87:ff:c2:6a:23:d1:37:fa:d2:3d:0b:62:74:
                    9b:b5:d0:0a:8d:c7:c7:37:9d:36:cb:f9:b5:e5:a8:
                    07:64:a5:96:16:96:1b:ce:dc:14:b8:3d:cf:bf:16:
                    ee:7a:77:79:00:e0:34:2c:5b:15:db:8a:d2:16:b5:
                    d7:7e:44:e6:99:48:f6:fb:6b:8c:bc:47:b7:c0:44:
                    b3:86:ed:bc:da:e0:88:db:a8:f1:f3:58:1e:e2:1e:
                    0c:06:3b:ee:d3:57:fa:59:c6:cc:de:00:31:0e:ef:
                    d6:cc:23:77:2f:c3:7c:62:2e:ee:2b:a6:2b:55:e1:
                    e5:d9:27:21:d1:95:94:68:9d:72:09:e5:8d:02:37:
                    84:28:24:48:f5:ff:c6:e3:52:af:4e:be:85:55:bd:
                    d2:e2:55:85:ff:f3:f4:c9:a3:9d:99:d8:4f:af:89:
                    7f:c4:49:13:77:de:b1:a0:37:a1:7a:77:d4:31:e5:
                    96:b1:1d:ca:aa:fb:74:34:23:ff:b7:35:ce:94:b1:
                    43:ec:d9:d7:fb:3c:ed:67:e5:f8:0f:c0:29:55:93:
                    22:44:3f:b8:de:e3:a3:73:6d:2e:ad:a7:63:40:24:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2D:78:4D:80:E3:D8:7F:BB:B1:8B:F0:7E:5F:F3:FD:79:6B:FD:82
            X509v3 Authority Key Identifier:
                keyid:35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:55:30:73:58:82:d3:ee:bb:e6:d2:92:08:5a:c7:9c:db:
         f4:6b:a8:c2:56:67:ed:fa:89:fd:4b:86:86:1b:1a:7a:ea:42:
         0e:ab:59:aa:4f:6a:51:64:b7:ba:8d:96:6a:a3:4b:50:ac:bd:
         6c:6c:df:63:49:e1:99:76:cc:4a:ac:12:59:72:65:e5:bd:1a:
         50:5e:3e:2e:86:34:45:19:59:5d:2d:a4:42:86:cb:bd:4f:26:
         6a:35:45:c9:cf:02:4c:ee:75:17:42:15:ac:02:4d:f8:6d:d5:
         2a:e1:3a:ea:c4:51:cf:32:93:e5:3e:0f:ab:29:b5:f0:3b:dc:
         a6:b0:ca:4c:5a:55:4c:04:d0:fa:6b:d4:96:e9:9d:1b:22:ff:
         e6:fe:0e:2c:e9:6c:b7:53:4a:10:62:3b:45:c0:c7:bc:2c:d7:
         2c:b4:b2:c7:ef:d5:d8:a3:8f:dd:75:cc:c3:99:dd:3c:9c:71:
         a6:5e:6d:10:29:2f:16:c2:57:31:51:6e:18:aa:1a:a1:01:fb:
         ea:bf:98:42:0b:eb:fc:25:7c:bb:b7:50:70:b5:dc:d9:cc:6b:
         08:79:16:da:fc:14:8f:e7:24:2b:5d:d0:0b:47:e4:aa:df:80:
         52:eb:ae:e6:77:da:9a:0a:d2:45:c7:4f:7b:1b:a1:49:89:57:
         09:b6:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:24 2025 by rpki-client