Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          ypj4JJ9NGR+U0SzX60HIPB01Uf7Z9/Xg9dOu3XYxym4=
Subject key identifier:   65:B8:E0:CB:15:30:FE:FC:5B:4D:F1:41:D9:09:35:7E:D5:59:0E:99
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       0946
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          0945
Signing time:             Mon 20 Oct 2025 01:31:37 +0000
Manifest this update:     Mon 20 Oct 2025 01:31:36 +0000
Manifest next update:     Wed 22 Oct 2025 01:31:36 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: Ap9e1GBQ1EfAzgZYltYsRRszABDJ15W0rb2k/Um/Ka4=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF, serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Oct 20 01:31:36 2025 GMT
            Not After : Oct 22 01:31:36 2025 GMT
        Subject: CN=68f590f8-3a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:dd:f1:30:9d:2b:01:57:68:62:33:08:f5:
                    52:75:84:cc:f8:af:df:8a:13:59:0b:97:2c:1d:95:
                    37:94:c6:db:1b:70:79:5d:46:ea:23:ad:0e:68:76:
                    e6:f9:71:ff:48:bb:5d:97:67:74:d4:10:e8:56:0a:
                    9e:7a:97:ba:f6:51:75:0c:12:16:05:f0:87:65:b1:
                    e9:50:b5:22:e3:e8:19:b3:51:b9:94:ff:62:d8:cd:
                    6c:27:7b:33:89:14:7c:67:9d:43:e7:bd:8f:25:b8:
                    d4:28:6f:22:a0:d1:65:c8:a4:92:5c:20:09:08:3d:
                    b9:74:3f:df:fa:56:63:f0:62:7d:46:5c:1a:05:47:
                    5f:3e:5d:1d:cb:16:cd:15:69:88:78:42:8a:92:78:
                    31:cd:3e:21:da:d6:32:7c:98:0b:df:4a:0a:36:b5:
                    cb:18:c2:ae:91:b7:9e:c3:99:19:e0:72:e2:6e:3c:
                    33:d2:4e:55:c4:85:21:e7:18:dc:08:65:d5:e3:c1:
                    ec:5f:26:1b:15:41:c7:ad:1d:1b:1b:f3:31:37:c3:
                    e6:c6:13:e9:e2:0e:f8:72:3c:66:7f:e6:5a:b1:08:
                    c2:63:5e:c3:d2:4e:95:c1:af:7a:bd:42:c7:7f:2e:
                    8f:52:b8:da:e1:fe:fb:c0:7f:4a:22:69:42:71:aa:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B8:E0:CB:15:30:FE:FC:5B:4D:F1:41:D9:09:35:7E:D5:59:0E:99
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5b:72:97:bf:4d:36:37:14:7b:53:a8:9e:88:e0:0d:bf:51:
         97:d4:a2:f8:22:52:3f:a9:78:b0:c2:bc:42:bb:e8:1b:e3:b3:
         77:03:d2:3a:9a:a2:ed:d7:b2:12:ac:64:fa:eb:9a:fe:64:b0:
         ae:81:2c:ed:a0:41:8a:20:f9:98:05:23:88:7c:8c:55:37:64:
         94:34:27:3f:e8:89:89:ce:56:e9:60:9f:43:6a:53:85:0d:a1:
         33:ab:3b:1d:ca:de:12:79:6e:2d:09:8f:2a:40:a1:ce:2d:d5:
         8f:41:62:04:1f:6f:c6:c3:e2:86:c0:ab:0d:25:e6:d2:f4:0f:
         4a:f8:5d:9f:1c:ac:88:3a:21:f9:1f:38:ed:9f:69:d6:1a:88:
         d4:70:87:ad:d6:a1:e3:aa:f9:de:08:f0:ac:fc:41:d6:1f:c6:
         e3:94:8b:dd:65:9e:bb:8f:db:a9:b7:3d:3b:6b:14:fe:6e:18:
         b3:1b:be:9e:0f:21:64:c4:af:c9:f3:de:31:dd:65:ca:46:b0:
         b4:08:66:af:db:0c:ee:5a:0f:b8:08:81:10:45:64:ed:08:31:
         bb:db:c4:8b:92:e3:79:e6:db:be:59:ec:c2:01:7b:58:37:2d:
         cc:0d:34:22:ad:67:4a:d0:b6:98:95:b6:12:7c:9a:71:4f:4f:
         4f:a1:c1:c0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlFQzVBRjExMC8GA1UEBRMoOTk2QkU0MzdDMUJGMEVBODBGQzJENzRGRTc5NUQ1
OTdERDdDREZGNjAeFw0yNTEwMjAwMTMxMzZaFw0yNTEwMjIwMTMxMzZaMBgxFjAU
BgNVBAMTDTY4ZjU5MGY4LTNhNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/zd3xMJ0rAVdoYjMI9VJ1hMz4r9+KE1kLlywdlTeUxtsbcHldRuojrQ5o
dub5cf9Iu12XZ3TUEOhWCp56l7r2UXUMEhYF8IdlselQtSLj6BmzUbmU/2LYzWwn
ezOJFHxnnUPnvY8luNQobyKg0WXIpJJcIAkIPbl0P9/6VmPwYn1GXBoFR18+XR3L
Fs0VaYh4QoqSeDHNPiHa1jJ8mAvfSgo2tcsYwq6Rt57DmRngcuJuPDPSTlXEhSHn
GNwIZdXjwexfJhsVQcetHRsb8zE3w+bGE+niDvhyPGZ/5lqxCMJjXsPSTpXBr3q9
Qsd/Lo9SuNrh/vvAf0oiaUJxqnfhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZbjg
yxUw/vxbTfFB2Qk1ftVZDpkwHwYDVR0jBBgwFoAUmWvkN8G/DqgPwtdP55XVl918
3/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5RUM1L0QwMzExQ0UwOTJBQjExRTlCMDI4QzgwQkY4QUVBMjI4L21XdmtO
OEdfRHFnUHd0ZFA1NVhWbDkxODNfWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21XdmtOOEdfRHFnUHd0ZFA1NVhWbDkxODNfWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjlFQzUvRDAzMTFDRTA5MkFCMTFFOUIwMjhDODBCRjhB
RUEyMjgvbVd2a044R19EcWdQd3RkUDU1WFZsOTE4M19ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjW3KXv002NxR7U6ieiOANv1GX1KL4
IlI/qXiwwrxCu+gb47N3A9I6mqLt17ISrGT665r+ZLCugSztoEGKIPmYBSOIfIxV
N2SUNCc/6ImJzlbpYJ9DalOFDaEzqzsdyt4SeW4tCY8qQKHOLdWPQWIEH2/Gw+KG
wKsNJebS9A9K+F2fHKyIOiH5Hzjtn2nWGojUcIet1qHjqvneCPCs/EHWH8bjlIvd
ZZ67j9uptz07axT+bhizG76eDyFkxK/J894x3WXKRrC0CGav2wzuWg+4CIEQRWTt
CDG728SLkuN55tu+WezCAXtYNy3MDTQirWdK0LaYlbYSfJpxT09PocHA
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:13:12 2025 by rpki-client