Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
File:                     mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft (raw, json)
Hash identifier:          ZIk+tfweYu0dw0+3eLwJYIlmekVk2Yk8rwyCMehhhqk=
Subject key identifier:   E0:D3:C3:04:CC:67:24:2D:74:FE:54:AF:92:E9:74:6D:34:1B:FF:23
Authority key identifier: 98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB
Certificate issuer:       /CN=F36B5362AF/serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
Certificate serial:       13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
Manifest number:          12
Signing time:             Sun 19 Oct 2025 05:17:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:17:23 +0000
Manifest next update:     Tue 21 Oct 2025 05:17:23 +0000
Files and hashes:         1: mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl (hash: U0cTiYJ2q57LgLW3ooOg7M/fQMsUF4K2w1snK26vo2E=)
                          2: C9A68EA4A28611F086BAC69BDAE4EC9C.roa (hash: 7VlIZ2iujVms/bcZzJtHMjuTIN2+7NdE9XhtEe0/jW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5362AF, serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
        Validity
            Not Before: Oct 19 05:17:23 2025 GMT
            Not After : Oct 21 05:17:23 2025 GMT
        Subject: CN=68f47464-a41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:0e:17:d9:04:bc:c6:20:c3:9e:e9:33:df:
                    be:b8:55:7f:d3:04:22:21:d1:57:59:15:cc:43:d7:
                    c6:7b:cf:0f:7e:fc:17:0e:98:2c:78:fc:0f:f2:84:
                    16:18:24:c1:3d:33:0c:74:9d:16:e3:0d:25:2b:3b:
                    dc:bb:57:11:17:81:44:d4:ad:fd:e2:ac:e2:c0:0e:
                    24:c2:03:74:66:48:1d:f7:67:f9:3f:f9:fa:6e:49:
                    ca:fc:f0:8d:f3:79:aa:94:01:a3:bd:c0:12:01:2f:
                    f4:b8:a6:5a:ac:ab:8d:e4:f4:97:ef:61:b2:c7:71:
                    c4:87:4e:43:91:60:36:b0:86:d8:e8:66:35:30:0b:
                    31:ba:b3:54:41:14:27:95:53:84:63:63:86:b8:04:
                    e1:74:92:6e:e3:60:14:84:be:ed:f2:6b:ed:9d:e1:
                    72:33:b1:cc:88:d3:36:1a:e3:57:78:d7:d4:2a:69:
                    62:4c:5b:f3:b8:4a:2b:dc:22:4c:73:f0:6b:f9:d8:
                    51:25:86:7b:34:89:d5:89:c6:44:de:d4:ce:42:2c:
                    28:6e:ad:4c:9d:ba:c0:c2:07:1e:5d:a8:e9:6d:1e:
                    52:9b:b2:1e:7c:73:f4:ca:89:34:cb:4a:ee:a2:52:
                    f8:5f:e7:0e:ab:17:fe:66:f9:ff:ea:a4:92:e0:b8:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D3:C3:04:CC:67:24:2D:74:FE:54:AF:92:E9:74:6D:34:1B:FF:23
            X509v3 Authority Key Identifier:
                keyid:98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:20:24:57:d8:fa:43:c2:13:6c:73:69:e1:bd:ee:41:31:86:
         ca:e1:e8:45:32:78:e9:9a:0c:08:18:5a:d9:0c:d9:3a:26:2d:
         b3:90:30:61:cc:ae:30:0f:c2:46:ed:54:fc:12:1d:1e:d7:6f:
         85:52:de:8e:c2:6a:a5:e0:89:12:f3:37:ba:29:9a:8f:df:6a:
         c6:fb:3e:dc:be:17:c2:61:61:f4:f5:6f:aa:5b:4d:b3:39:af:
         d0:19:04:f3:e9:16:3a:a3:64:aa:93:d4:fd:e6:76:67:6d:c5:
         65:16:eb:0e:33:bb:dc:3a:0f:0f:a2:15:c7:48:21:57:6d:45:
         52:e6:71:5d:87:48:1e:17:77:6d:21:94:63:c9:b0:f9:60:8d:
         a9:b0:92:5a:4a:1c:c9:86:5c:e3:d3:6f:ba:d3:7c:9d:0a:c1:
         18:38:37:7e:ff:e1:0d:9f:8b:21:ff:52:a9:52:35:b2:de:0b:
         2b:96:f5:d8:7b:e9:c8:9f:d3:27:c6:61:0a:5a:83:c3:1c:a0:
         71:48:bb:c7:a3:3d:7d:fe:c9:60:ef:d1:23:96:f9:7d:75:69:
         d0:23:c5:dd:1e:3f:67:72:e6:2c:18:a6:3e:75:6f:5b:33:9d:
         79:a7:19:8e:32:0c:f9:06:d2:59:b3:2f:76:b1:d2:ef:54:6d:
         7d:45:3f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:59 2025 by rpki-client