Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
File:                     4a66tLHvdNsvpuf2sMhhKwzhv9s.mft (raw, json)
Hash identifier:          nikefxpzK+YhPvyAnZJlor26qeiCBRvjzoANZGYuq68=
Subject key identifier:   C5:29:D4:06:16:FB:EB:76:0E:40:FE:B9:3C:CE:75:CC:E4:BA:A5:59
Authority key identifier: E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
Certificate issuer:       /CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Certificate serial:       0D47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
Manifest number:          0D45
Signing time:             Mon 20 Oct 2025 01:04:59 +0000
Manifest this update:     Mon 20 Oct 2025 01:04:58 +0000
Manifest next update:     Wed 22 Oct 2025 01:04:58 +0000
Files and hashes:         1: 4a66tLHvdNsvpuf2sMhhKwzhv9s.crl (hash: CaUxsnarY+y35M40IDu5i3t1jDn3hWRDXiV/iFO0k4k=)
                          2: A9CE075A727B11EBB196600DF8AEA228.roa (hash: 2lOEEWfkem+GQmI+FhB9pSh9A8qYyCMy8BSlQP5EokY=)
                          3: BEBDF2D279B111E6830FCB69F8AEA228.roa (hash: EouzcL5tOeyVAza9Ny4WgUhhP+v0Y2hxWM5v0/DIPwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDB53AF, serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
        Validity
            Not Before: Oct 20 01:04:58 2025 GMT
            Not After : Oct 22 01:04:58 2025 GMT
        Subject: CN=68f58abb-7c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:c2:0c:27:c2:49:d0:d7:3d:01:7b:ce:0c:
                    fe:cc:27:27:a0:36:32:ee:1e:f3:fa:88:2b:12:fc:
                    83:36:85:7e:0f:f6:9b:24:ef:8a:da:2b:d5:e2:4a:
                    07:c1:91:ef:cf:2e:41:fc:f8:eb:17:66:f7:83:70:
                    9d:61:dd:1c:88:3b:c9:44:21:bb:cc:6a:d4:9e:14:
                    00:c9:6f:2c:84:f8:93:b7:dc:bb:04:f5:f6:57:68:
                    f0:90:53:d5:db:83:0a:e7:b8:6d:13:16:0c:82:a2:
                    bd:c1:7b:af:35:5d:38:1f:75:df:e5:4e:fc:9d:16:
                    8e:61:75:26:58:b7:43:c4:a8:55:20:fb:e6:c1:6d:
                    11:00:e7:fd:39:0e:3a:2a:8f:7e:c7:81:06:0d:85:
                    74:0a:48:8c:ef:45:c3:99:d3:c7:ae:5d:5c:32:27:
                    6d:92:f0:75:ec:27:4a:d2:a8:69:23:d0:21:b3:9a:
                    71:90:37:22:86:07:04:6b:d4:8a:51:26:c2:e4:53:
                    0a:f7:53:d0:a8:cb:4f:c1:0c:a4:94:d3:a9:53:6e:
                    74:f9:43:a0:be:e5:b7:41:3c:3c:62:b9:e7:34:18:
                    45:c9:ef:60:86:49:4f:bc:09:2b:ac:ab:3e:dc:57:
                    ed:b6:62:99:38:be:60:18:f7:3a:a8:87:ac:6b:c3:
                    fc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:D4:06:16:FB:EB:76:0E:40:FE:B9:3C:CE:75:CC:E4:BA:A5:59
            X509v3 Authority Key Identifier:
                keyid:E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:58:c9:55:db:aa:1d:df:01:39:07:c1:db:0f:7a:cd:d4:dc:
         e0:10:78:9f:28:a5:eb:41:f0:83:b5:3a:d3:cd:bc:69:49:ab:
         b3:78:ab:ff:f4:1d:62:76:77:e7:93:d6:26:ff:cc:c8:6b:9d:
         13:fa:48:0c:c4:53:5a:53:dc:9d:4c:e7:74:b5:51:3b:2e:ec:
         de:81:79:12:a9:91:5b:5b:15:b5:b3:3a:5e:4b:f4:bc:70:11:
         a5:a7:ab:b1:f0:4d:8e:10:bb:81:1b:61:0b:2b:45:39:c3:71:
         6e:a6:2e:b1:89:e4:d1:3f:a1:18:fd:44:6a:d7:97:52:a2:d9:
         81:16:97:5a:61:e2:ad:2e:ae:3a:8d:02:da:3c:12:33:bc:50:
         a4:48:65:27:8d:26:17:b8:ae:b9:58:10:56:79:7b:e8:c7:cd:
         cc:7a:5e:7b:1a:c4:89:2c:52:df:89:55:07:7a:6b:85:d3:88:
         a6:6a:40:2b:e7:5e:45:ab:a8:d8:a3:5a:45:53:4f:79:73:4f:
         84:b6:99:6b:99:77:1d:a9:19:76:02:ca:ed:2f:3e:d1:24:98:
         83:fc:16:bb:d4:2a:c5:1c:15:85:54:2e:ce:9d:37:46:5b:b2:
         84:bc:b1:13:8c:f1:d8:62:8e:6e:31:ba:f7:6c:86:e5:43:98:
         c5:8e:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:04:05 2025 by rpki-client