Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          61yom4pnPAokvOctd9Q27TwXh4piT9Mqqn/93ry+EZk=
Subject key identifier:   C4:3A:1A:41:58:C7:43:D7:62:88:D1:2A:DB:18:EE:86:95:4F:71:17
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       016E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          016D
Signing time:             Mon 20 Oct 2025 04:44:27 +0000
Manifest this update:     Mon 20 Oct 2025 04:44:26 +0000
Manifest next update:     Wed 22 Oct 2025 04:44:26 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: nQV/5Vf/j8jntMSI4A2r9aiXvMmjuxuoHnIsaFX6Mxc=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Oct 20 04:44:26 2025 GMT
            Not After : Oct 22 04:44:26 2025 GMT
        Subject: CN=68f5be2b-dc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:6e:4c:04:bb:9b:0d:1e:98:76:97:04:a8:
                    ff:08:3e:70:28:cf:c9:8f:fd:f4:b5:ef:00:42:af:
                    7b:a9:57:56:c9:1a:7c:f1:72:01:b3:35:03:28:10:
                    d5:f6:71:e7:7c:0e:1a:4e:5c:74:34:20:3e:7b:87:
                    6f:76:45:db:5b:6c:d4:6a:8d:1e:b5:f1:6c:af:13:
                    54:9e:05:16:6a:49:94:57:2a:ea:56:54:cc:12:21:
                    02:2a:71:06:71:4f:7d:77:35:8f:97:0b:2c:3f:06:
                    42:af:c6:38:93:f6:2a:87:74:89:3d:0b:20:17:ee:
                    d4:bc:77:e7:d5:56:f5:e3:aa:fe:d5:d8:c5:a3:02:
                    92:a8:6f:56:5f:20:71:80:d0:3f:72:0d:ac:e5:53:
                    cb:82:f5:34:69:35:37:55:50:03:3b:b9:b2:51:ca:
                    8f:57:f3:64:ed:6f:7c:b7:f1:5b:d7:69:55:80:6f:
                    0d:78:79:90:85:dd:69:09:6a:b1:6a:9e:be:10:25:
                    8f:62:d8:8f:e0:fc:7a:49:a4:9f:08:83:d0:46:5b:
                    a2:12:c7:65:df:bc:ed:c3:f2:22:d2:d0:d8:4c:06:
                    aa:ac:6c:62:c6:cd:c0:c5:58:c7:22:f3:6e:b7:65:
                    b4:97:23:b9:4f:ca:80:31:2b:f8:37:df:25:49:bd:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:1A:41:58:C7:43:D7:62:88:D1:2A:DB:18:EE:86:95:4F:71:17
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:27:7b:14:c7:a3:e0:1f:eb:77:ab:10:bb:45:06:17:ab:
         7d:fb:bb:fa:8e:d6:69:58:c6:04:1a:cd:d8:10:67:45:62:d9:
         52:77:53:89:16:5c:72:25:7a:f0:4a:f9:7d:b5:85:47:12:cf:
         5b:33:80:30:e2:ec:80:52:9c:0e:da:a4:c9:76:7f:db:f8:4a:
         e7:3b:8c:9f:e3:1f:d1:46:e9:61:a7:bd:dc:1d:f2:db:8a:5d:
         06:2c:28:df:8b:a6:5b:66:b2:5a:cd:2e:47:c4:6f:5b:64:7e:
         cd:8b:4d:01:ab:7f:4f:40:0a:af:86:c5:32:f0:cc:fe:21:45:
         39:94:04:27:65:30:42:7a:5e:eb:9b:5e:5c:9b:47:a3:ee:14:
         e5:03:1c:a0:69:0a:f6:97:1f:3a:7c:e2:75:70:0a:bb:4c:cb:
         b4:a6:22:9d:46:1f:88:0a:9d:0a:a1:a8:e5:13:90:a1:fb:ac:
         24:2d:44:f8:6a:82:4f:33:31:6c:17:e3:f1:b5:7f:b7:28:0b:
         6e:5e:1b:90:c8:39:cd:81:fa:c5:43:ef:8d:4e:97:d3:a5:ad:
         b7:69:34:98:c4:ac:2e:f1:de:8e:d0:4d:d6:d2:fb:c0:09:f7:
         c7:84:cd:04:1b:c4:5a:10:93:27:69:da:6d:41:21:b5:79:90:
         b3:09:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:42 2025 by rpki-client