Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
File:                     s14-lHqUdaFnx9_wp9CQLIZFgy0.mft (raw, json)
Hash identifier:          OH0puEEwkPRWJzC6AO+4x2V5OlIy4IBADFaPhlBmxW4=
Subject key identifier:   8F:62:8A:A5:60:DD:27:B2:89:E8:FC:D8:80:36:B0:FD:B6:07:D1:7B
Authority key identifier: B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
Certificate issuer:       /CN=F36B6ED4AF/serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Certificate serial:       4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
Manifest number:          4B
Signing time:             Mon 20 Oct 2025 05:12:51 +0000
Manifest this update:     Mon 20 Oct 2025 05:12:50 +0000
Manifest next update:     Wed 22 Oct 2025 05:12:50 +0000
Files and hashes:         1: s14-lHqUdaFnx9_wp9CQLIZFgy0.crl (hash: sLNZwsZRfgIW5ls5XwlJfR7zHNWH1ps1CeuZ7MjkxPA=)
                          2: D5444EA2746611F08A8CC88BDAE4EC9C.roa (hash: lJFUngrc56wM/Kip8FysGoRhSuXW31fT25yScECZzg0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6ED4AF, serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
        Validity
            Not Before: Oct 20 05:12:50 2025 GMT
            Not After : Oct 22 05:12:50 2025 GMT
        Subject: CN=68f5c4d3-da8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:ed:1c:fa:bf:97:1c:1a:cb:81:71:e7:a7:
                    12:4d:6a:fe:f7:a8:b1:23:5c:46:45:df:39:4b:cb:
                    30:68:a2:21:de:c4:42:15:76:b5:33:b4:6b:70:68:
                    04:6b:11:08:1e:e0:6f:de:d1:9a:6e:fb:4e:51:cd:
                    f0:a3:f2:2e:f4:af:39:f1:cf:47:3a:91:dd:79:26:
                    e8:63:5a:ac:f1:b8:8b:ad:23:22:e4:68:65:32:8d:
                    e2:b2:5a:25:2d:04:88:73:42:e6:79:87:dd:cf:a7:
                    0d:70:ac:67:91:01:ea:cf:78:18:bc:3b:f7:e1:53:
                    d8:69:5d:bc:50:32:b9:31:6f:0e:f7:95:bf:51:02:
                    b1:83:64:92:67:d7:94:a5:ed:99:67:3a:81:ef:b0:
                    4e:21:d0:8d:b2:25:2f:d9:29:a4:9b:5e:c9:90:26:
                    b4:bb:63:c2:01:39:c1:6d:0a:ec:80:f8:06:db:34:
                    fb:ea:1c:a5:79:49:a4:2f:b8:a0:3a:47:5a:7a:dc:
                    4d:ad:ad:95:0e:2d:fd:c8:50:89:d4:34:31:87:70:
                    46:1a:59:98:1c:2d:69:50:9d:7e:03:7e:49:16:75:
                    f5:78:97:19:be:90:17:81:9c:39:6a:ce:6e:88:42:
                    2b:59:ea:6d:f5:25:89:29:d2:3c:c4:31:1a:15:80:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:62:8A:A5:60:DD:27:B2:89:E8:FC:D8:80:36:B0:FD:B6:07:D1:7B
            X509v3 Authority Key Identifier:
                keyid:B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:ad:e1:d5:51:0c:e0:ba:ac:1c:a9:cd:79:51:a6:ca:9d:
         2a:83:63:9b:06:bf:f3:83:8b:4b:e7:aa:29:d2:50:56:30:b5:
         46:86:30:b5:d8:d5:cd:b6:99:e7:3d:a1:70:33:64:61:1d:dd:
         64:fb:68:09:3e:08:4a:67:b7:e4:67:cd:80:10:39:23:f8:b2:
         d4:94:77:ea:71:1d:bb:69:1d:ec:e4:fe:30:23:78:cd:77:01:
         7a:44:56:96:29:94:85:c0:de:e7:a2:b9:a4:60:79:a7:a6:c5:
         f2:46:e4:55:28:89:0c:ac:38:5b:7f:73:3b:d8:b1:be:5d:0c:
         6a:16:e2:d5:6c:5e:d1:5c:06:76:c3:29:4a:47:e1:29:23:13:
         1f:34:d7:f7:36:ba:f3:3c:ca:7f:ae:0a:2a:67:1d:e6:8e:59:
         91:f9:da:63:7e:98:db:5f:bf:e5:8e:c4:91:2a:06:8f:44:bd:
         e9:c2:2c:c4:68:92:33:00:5e:16:c9:4b:78:b8:0c:70:43:de:
         08:b6:6c:b4:97:5f:d9:56:d2:e6:d7:5c:a6:45:74:5d:43:de:
         ae:98:c5:af:4e:46:29:ef:f1:85:28:ef:eb:83:9d:d3:2b:ba:
         a4:c6:f2:2f:bc:78:ed:0b:b9:fb:1d:a0:86:fa:f8:b1:36:94:
         dd:a2:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:27:40 2025 by rpki-client