Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
File:                     wDEb4pGTolThzVxYy7dlalArlVo.mft (raw, json)
Hash identifier:          AOmwSTwcAQ/Dg7sY6gLoiceorK1LdQoxLNwyiGeeqfU=
Subject key identifier:   5B:91:34:87:4D:1C:09:08:90:D3:00:CC:B2:EA:9D:7B:31:A9:05:E1
Authority key identifier: C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Certificate issuer:       /CN=F36C2FCAAF/serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
Certificate serial:       14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
Manifest number:          14
Signing time:             Sun 19 Oct 2025 05:17:11 +0000
Manifest this update:     Sun 19 Oct 2025 05:17:11 +0000
Manifest next update:     Tue 21 Oct 2025 05:17:11 +0000
Files and hashes:         1: wDEb4pGTolThzVxYy7dlalArlVo.crl (hash: 9s9Q3+GIxfL6NgCA+mQ4HjfHuY46weEioZc8Hmdwy1A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Validity
            Not Before: Oct 19 05:17:11 2025 GMT
            Not After : Oct 21 05:17:11 2025 GMT
        Subject: CN=68f47457-5d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:e9:99:92:5a:2f:ce:0e:2a:ff:cf:c7:9b:
                    45:81:ce:6d:63:dc:ae:50:7c:2e:21:14:2b:7e:d6:
                    ac:17:73:94:0f:e3:0b:cd:50:74:ec:49:fb:87:2c:
                    fb:77:9a:52:71:af:08:23:b7:18:37:13:ff:05:74:
                    87:5c:46:eb:7f:63:3a:5f:de:ef:7a:3c:76:53:7d:
                    b7:8e:a9:3e:53:c8:06:4a:cd:d6:4c:ae:18:83:e7:
                    f5:9e:cf:52:be:a1:8f:b2:f9:cc:b0:d7:24:5b:c8:
                    98:3a:08:af:18:5f:fb:4a:fc:9f:2f:b2:17:46:cf:
                    df:1c:ff:ab:3c:39:fb:1a:e0:7d:61:76:51:f5:3a:
                    b7:3e:39:e0:57:68:06:2d:f1:77:cc:04:fb:d0:68:
                    fc:2a:6a:22:f4:05:b0:6f:0c:bf:8b:9b:b4:cd:6b:
                    f1:a2:68:82:5c:68:53:4a:15:99:67:85:94:d0:0b:
                    4b:c1:5d:8b:7a:23:9c:c9:be:f7:df:1c:f9:3b:5b:
                    a5:15:58:ce:83:cf:e5:8c:e0:0e:74:58:28:0f:d7:
                    29:6c:78:9f:ad:14:0c:45:f2:d5:c2:b2:b9:0c:5a:
                    c6:99:97:8b:73:2b:d7:ef:48:98:c9:06:9b:53:b9:
                    e3:e4:88:dd:74:c4:d1:fe:2b:34:77:91:19:a8:65:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:34:87:4D:1C:09:08:90:D3:00:CC:B2:EA:9D:7B:31:A9:05:E1
            X509v3 Authority Key Identifier:
                keyid:C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3f:6d:fa:69:34:d8:b2:4c:a0:4e:06:f4:97:4a:b9:13:4f:
         d1:0a:c5:1b:60:0c:14:fc:d8:73:28:47:88:c3:4f:c9:bf:1b:
         00:3a:aa:72:b4:8f:e1:17:bd:d7:fe:f8:03:ce:ed:11:57:49:
         4c:cd:8a:88:79:7f:8d:8c:bc:ba:ad:64:f4:e0:15:83:d2:1e:
         c7:bb:c4:94:66:7d:53:48:03:bd:ac:15:3c:22:cd:a9:ff:11:
         db:34:39:79:32:c5:84:22:e0:5c:22:12:55:da:c6:be:20:cd:
         d5:63:14:10:bf:b8:49:b2:30:13:79:d0:f9:dc:3f:eb:dd:82:
         78:bb:3a:42:de:30:34:a7:b9:14:8a:24:a8:0d:30:29:d9:4f:
         70:66:4b:e0:f6:b7:86:a1:67:7e:3f:ed:b6:12:d6:e7:2a:92:
         6e:bf:d1:6b:30:75:e9:0f:21:07:c8:2d:9f:81:80:91:fc:af:
         05:59:85:48:3c:2d:29:a9:00:f1:9f:c0:9a:fc:81:2b:03:d6:
         a2:b0:4b:33:1a:33:37:ea:a2:dd:f0:15:a9:87:52:5d:df:f8:
         9d:8b:e0:c8:84:32:9c:e6:72:a5:f8:92:ae:f3:9e:ab:67:3e:
         23:0c:07:5b:c3:4c:df:b2:a2:38:34:9f:32:0b:fa:14:57:5e:
         25:50:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:56 2025 by rpki-client