Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          97Q0Id46vXgvWMk9SeboKjVZQ0apAy7AjN/6c4yRmeY=
Subject key identifier:   50:D4:0E:28:9D:87:B3:73:CA:55:33:A0:09:34:94:C9:C7:A8:DD:3E
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          01CE
Signing time:             Mon 20 Oct 2025 04:29:26 +0000
Manifest this update:     Mon 20 Oct 2025 04:29:25 +0000
Manifest next update:     Wed 22 Oct 2025 04:29:25 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: 1f6yP/TBurBydSGUelMqclsbEg9UJUoVdx+J4p34DWY=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF, serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: Oct 20 04:29:25 2025 GMT
            Not After : Oct 22 04:29:25 2025 GMT
        Subject: CN=68f5baa6-9882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:26:e4:93:d9:ed:ab:a1:d8:fd:1f:b6:fa:
                    91:b7:ff:e1:c0:3c:1b:08:f8:56:14:b6:fc:9e:87:
                    eb:4f:ce:19:1d:6b:fb:c6:d4:05:09:c3:cc:9f:71:
                    d8:54:b5:d2:11:55:83:69:83:0c:3e:68:90:97:d2:
                    05:d0:9e:56:63:b7:27:e9:e8:f5:34:63:41:5a:20:
                    d5:f7:8d:99:18:09:e4:cc:ed:50:94:bf:f3:5e:89:
                    af:7e:fb:a0:4b:55:24:bb:08:b9:ed:7a:40:47:fd:
                    d2:12:4b:a0:b6:fd:7d:e2:d8:05:74:9e:aa:50:5f:
                    1f:8a:5c:eb:9d:75:78:09:80:7b:23:51:18:79:30:
                    dd:0a:e7:94:58:5c:7a:16:78:4d:40:d0:50:21:7d:
                    29:0a:cd:0b:a0:65:33:d5:89:99:3c:7b:60:d5:dc:
                    dc:d7:c3:2e:7b:c3:ec:f5:3f:34:90:e9:04:20:3b:
                    8d:5c:83:cd:dc:0d:a0:51:92:e5:13:64:b8:15:c8:
                    cc:36:b8:f0:f5:97:14:67:02:f3:71:95:bf:5e:04:
                    81:9b:55:df:66:e0:17:00:11:04:64:37:a8:21:9b:
                    bd:2e:58:a4:c7:4c:f2:c2:30:4a:6e:17:ef:68:c3:
                    39:38:f0:3f:b1:15:ef:c6:2a:13:ad:98:66:6a:56:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D4:0E:28:9D:87:B3:73:CA:55:33:A0:09:34:94:C9:C7:A8:DD:3E
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2e:73:cd:30:5d:72:ad:f7:c3:7e:9e:43:2f:a8:98:95:ab:
         87:61:eb:37:ec:63:84:a4:60:a6:64:4c:c0:b2:93:77:6a:20:
         d2:f5:71:b2:e5:34:7f:6f:9d:10:98:00:e8:c0:c7:e5:0f:a1:
         cb:bf:6a:b5:ff:a8:00:ec:c7:30:e0:cf:4a:32:c2:48:ea:48:
         0d:4f:74:35:d7:8c:cd:71:5d:5d:7f:b6:41:2e:d8:ed:69:2e:
         80:63:79:6c:23:3f:df:ff:34:48:78:48:f8:d3:ef:3c:e5:22:
         ac:b4:9e:e1:05:f9:54:d4:25:21:46:c3:9a:92:10:41:9d:a2:
         58:26:f9:1e:7d:16:31:11:a5:90:99:ff:4f:02:fd:17:3c:5b:
         8b:8e:11:d4:b9:6d:e6:02:26:a5:ab:9d:20:42:ac:11:23:77:
         a2:e5:25:9d:6f:ee:5c:1a:d6:ee:d4:b9:a7:2d:f5:98:39:93:
         69:7d:1f:62:a5:cb:9b:b2:9a:c2:86:b7:5b:35:24:86:96:7c:
         20:c7:89:35:3c:01:4d:0c:67:85:69:f0:7d:0a:4e:e6:45:77:
         b8:98:15:6f:41:80:e4:68:2e:0a:72:93:12:fc:58:1b:ce:a1:
         ee:9f:0f:87:55:1b:0b:25:c1:18:fb:9b:37:a2:9e:f4:bd:2a:
         c4:8d:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:47 2025 by rpki-client