Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          U0rnt6C/SageT+yy0ZR0w27Ln3GcZ4nyHsbxojPiIq8=
Subject key identifier:   9E:5A:FD:90:EC:8E:DD:09:AD:9B:89:B6:35:B8:A8:62:48:8C:96:C0
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       0744
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          073B
Signing time:             Sun 19 Oct 2025 01:59:33 +0000
Manifest this update:     Sun 19 Oct 2025 01:59:32 +0000
Manifest next update:     Tue 21 Oct 2025 01:59:32 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: /St6PrOzP/qJrqtfMpom3COl4543G9lV9XBIjms/s+k=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Oct 19 01:59:32 2025 GMT
            Not After : Oct 21 01:59:32 2025 GMT
        Subject: CN=68f44605-c878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:76:ba:87:60:b3:96:ba:91:17:18:14:b6:
                    02:27:12:1f:76:68:dd:cf:6e:c1:21:ac:2c:e9:56:
                    d5:f9:f9:c4:26:6d:bd:6a:b0:01:1e:7b:83:f5:48:
                    bb:d3:3f:33:2c:7b:7a:a3:7d:23:0a:82:4d:56:5f:
                    83:23:87:c1:b4:0d:cd:5e:7a:04:b5:4b:5f:78:1d:
                    93:21:c4:52:9b:e6:8e:50:6b:9d:c8:db:b7:52:4b:
                    73:1e:68:4c:bd:35:7b:91:ae:de:17:7e:2e:08:6e:
                    e4:21:eb:0f:06:c4:93:03:93:bd:71:00:cc:87:f2:
                    eb:90:c9:38:ce:96:c2:fb:15:ac:f4:23:e0:b7:dc:
                    92:93:ab:b2:df:56:d0:3b:70:47:8c:a0:4d:45:74:
                    4a:6c:70:39:cf:74:25:ff:c3:ae:5c:61:ee:a3:27:
                    91:5b:0d:45:21:32:33:90:4e:cc:40:7b:41:a1:8d:
                    c2:f9:2a:7b:92:58:2d:a2:68:cc:20:1c:b1:63:a8:
                    95:92:2b:67:02:36:cf:50:53:c6:b2:e6:aa:be:88:
                    8e:87:57:b6:cb:1d:75:da:b6:70:20:d1:c8:46:55:
                    76:00:99:19:1d:90:a9:94:0b:c9:b3:3b:65:a9:cc:
                    46:56:32:2a:a5:2b:c3:4e:9f:16:4e:d5:bb:e0:05:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5A:FD:90:EC:8E:DD:09:AD:9B:89:B6:35:B8:A8:62:48:8C:96:C0
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:da:2b:1f:27:11:d2:59:65:94:ed:af:92:52:01:b8:35:
         6a:26:e2:89:13:fd:1b:ae:15:fb:cd:be:a1:af:03:f8:83:76:
         dc:20:19:7e:8b:36:fb:89:04:a5:5b:22:9b:9b:4e:16:a7:cc:
         e0:ae:4d:78:10:b9:29:ca:5b:0e:f2:fa:a4:e5:85:4e:f4:cd:
         78:96:36:a7:8f:8a:2d:23:54:25:2b:35:f4:df:45:fd:1c:4f:
         29:98:59:9c:6d:7b:d0:9d:29:2d:03:c2:23:20:bf:39:ce:83:
         41:86:39:35:30:2e:b6:7b:86:35:7e:90:a7:89:a5:5e:07:df:
         eb:37:4a:57:f5:55:45:f0:97:f9:33:19:21:5d:81:ca:71:af:
         74:aa:6d:98:74:93:ca:ef:28:52:97:6a:ba:37:96:47:3f:40:
         ff:0b:8d:ce:f7:20:d8:23:ed:66:04:94:fd:cd:e1:0f:de:1a:
         ab:82:84:28:35:60:96:c2:ef:54:91:b4:b1:9d:aa:29:00:6a:
         75:17:ca:27:bb:9b:9c:30:32:42:d6:ba:50:33:46:b5:b8:c0:
         1b:58:e3:e5:86:a4:42:60:57:03:42:e9:3a:fd:35:6f:eb:75:
         b7:64:ef:69:0b:92:d3:8d:78:74:ea:25:22:e6:74:c3:b2:97:
         cb:f4:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:20:53 2025 by rpki-client