Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
File:                     h8J36lRFUp3Qay_l7p8zzcfOhOA.mft (raw, json)
Hash identifier:          VmjkUaMAcWN1q7dgxfprUn/yVxDhKMTr0zuxkQ5q04w=
Subject key identifier:   C0:84:B0:B2:0C:F3:DB:92:A8:C8:D1:36:6B:83:02:9B:E4:A8:3E:70
Authority key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Certificate issuer:       /CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Certificate serial:       05C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
Manifest number:          05BA
Signing time:             Tue 21 Oct 2025 02:33:16 +0000
Manifest this update:     Tue 21 Oct 2025 02:33:15 +0000
Manifest next update:     Thu 23 Oct 2025 02:33:15 +0000
Files and hashes:         1: h8J36lRFUp3Qay_l7p8zzcfOhOA.crl (hash: 4dwOv0GaCM/LRSwvFtwRirFAuQjXqt7xEFmO4OVd46o=)
                          2: DEDA0EAAD01A11EC9C39EE99F1222468.roa (hash: BEiNuG74+0Vca7a/9TVrf7iMLwYPsza2dmq/jF7HFU8=)
                          3: 82B0CD28582C11ECB2ACE4C45A40D577.roa (hash: 5WnTeUTvylt7jsHDPv28dWX8ugIJRfhq5fv0MFgaPjI=)
                          4: FE30EE3E572711ECA2417158D8A014CE.roa (hash: 6oiMAdRdN+63t7B48ThUZh5q2ToM52IHZBkpkD9qu6s=)
                          5: 392271285A4F11ECB044D39B5A40D577.roa (hash: 9Lc819kW1mF2SlhKYqWGTsWhVlyucMzY3bxqj7ucMHQ=)
                          6: AF1870DA5A4F11EC8A7D2A9D5A40D577.roa (hash: BLdsVayNIOk2Y72QR8xGh48CnHwd4dR9X3zrPpYewHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Oct 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCC19AF, serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
        Validity
            Not Before: Oct 21 02:33:15 2025 GMT
            Not After : Oct 23 02:33:15 2025 GMT
        Subject: CN=68f6f0eb-7dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a2:4c:0d:4b:4b:76:60:f1:62:18:4f:ec:a8:
                    94:ff:1c:ac:78:e8:98:d4:5a:bc:93:af:59:c3:9d:
                    8e:81:4d:86:73:94:7c:e5:b2:9b:5e:9a:66:cb:14:
                    86:88:a2:dd:1c:8c:be:ff:aa:f0:b7:db:6a:58:91:
                    a4:3b:79:43:be:58:c4:18:85:0d:2d:71:3c:34:08:
                    bf:fc:c5:18:70:9c:cb:27:55:eb:79:90:40:ff:9c:
                    50:c5:59:3e:48:e3:94:8c:de:a7:a8:6a:10:a6:e7:
                    34:bf:83:6d:3a:12:c5:8e:2f:30:7d:82:06:71:ca:
                    8c:74:d6:a8:b4:cb:ee:b0:3f:b9:68:af:88:99:86:
                    8f:5a:de:c6:da:18:27:70:ae:62:4a:c6:6e:fb:13:
                    a1:95:c9:ba:b5:19:ee:98:86:8f:fb:0e:fc:86:7e:
                    b4:33:d4:5e:82:99:31:53:c1:5e:93:50:77:50:81:
                    7b:d0:29:04:a5:b2:ee:33:89:8b:d1:1a:31:e7:a4:
                    3f:46:51:1e:c0:da:d6:aa:e3:3f:88:41:aa:bf:75:
                    8e:a3:1b:7a:d4:e3:8c:86:cb:83:a1:c0:00:10:6e:
                    a1:c1:6f:ec:48:58:7a:fe:12:4d:27:9b:ee:09:67:
                    0b:24:7b:81:61:b8:62:37:ed:2e:df:d9:03:20:1a:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:B0:B2:0C:F3:DB:92:A8:C8:D1:36:6B:83:02:9B:E4:A8:3E:70
            X509v3 Authority Key Identifier:
                keyid:87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:c1:32:3b:73:37:aa:8b:2d:59:44:10:55:53:db:ae:3b:
         a2:e1:9d:5c:88:20:47:b9:f0:db:cb:e6:21:d6:45:95:50:e6:
         b2:d5:73:9a:f8:dc:56:96:da:fb:da:07:f2:41:d5:c2:8f:b6:
         d6:12:55:16:80:ea:f3:86:51:11:32:7c:03:de:a2:2d:82:b1:
         2f:e0:7a:18:23:8e:57:13:48:8e:36:9d:a9:0d:1a:9d:7e:e9:
         d4:9d:39:5f:19:f3:2e:fd:a4:6d:74:04:b8:45:c2:a6:15:38:
         57:80:88:bf:69:db:c2:a6:c4:8f:45:36:fe:f8:3d:ca:5f:23:
         17:82:0d:10:f8:e2:b6:b0:b6:be:8f:e5:5f:14:94:88:22:79:
         a2:03:19:2c:6a:99:a0:c8:4f:14:53:c1:37:60:d9:10:6b:23:
         e6:5a:3c:34:bd:8d:98:41:0c:9b:38:92:16:c0:f7:90:bd:94:
         af:bc:c7:4b:c7:fb:67:8b:88:98:55:05:cd:fc:7a:79:4e:84:
         95:2e:76:0e:60:63:d6:17:23:b6:e7:6f:ff:be:43:44:fe:ab:
         88:a1:0f:43:97:f8:79:5f:07:2c:d9:9a:37:6e:47:94:10:b2:
         7e:bd:54:0e:09:9a:b9:88:69:68:ae:2e:12:27:41:bc:63:47:
         32:93:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:42:35 2025 by rpki-client