Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          mhUgF4bSiykFOhxEtR6Fv0hljk2p2hnwDrd2Dxc3r/o=
Subject key identifier:   EB:4B:6C:0B:43:9C:3C:BD:F2:1A:EF:EA:DD:86:09:66:0E:FA:FE:DF
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       02D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          02D5
Signing time:             Sun 19 Oct 2025 03:55:12 +0000
Manifest this update:     Sun 19 Oct 2025 03:55:11 +0000
Manifest next update:     Tue 21 Oct 2025 03:55:11 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: Wcpeqwnq5rWcNbDV3/2ioYfkrF2IvNmm0HrGG9yV47g=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
        Validity
            Not Before: Oct 19 03:55:11 2025 GMT
            Not After : Oct 21 03:55:11 2025 GMT
        Subject: CN=68f46120-cf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:f6:b8:5d:6b:78:88:c8:32:c7:5a:73:71:
                    ff:0e:c7:bd:63:b8:14:be:99:84:af:56:6a:70:19:
                    9c:55:50:25:c9:02:0e:ab:ee:58:9c:8a:50:d7:c8:
                    8d:9b:56:9d:e8:09:4d:45:34:eb:f4:9d:f1:50:50:
                    54:59:b1:a4:ad:e7:be:2d:b5:2a:33:89:b0:5b:c6:
                    ac:f5:e0:e9:f4:71:4c:c2:49:5e:7f:6d:3c:9a:d1:
                    09:28:c1:01:6e:4e:93:5a:a5:ef:b4:f0:c3:ea:ad:
                    e7:a6:3e:3d:6b:6e:11:5d:ae:da:c6:69:91:6a:98:
                    f5:81:e7:b3:ef:2f:43:b7:53:a3:5d:d1:57:fe:9a:
                    b3:40:89:30:28:52:f5:62:e2:ae:23:c3:bb:98:c4:
                    99:cd:0a:01:f7:71:d2:55:9f:69:f1:ef:69:9d:34:
                    a3:8d:cb:aa:73:d7:0a:9d:4b:5b:6f:5c:ae:f8:36:
                    ef:76:c3:92:fc:d6:92:90:8c:f4:8e:2c:8a:42:1b:
                    1b:28:84:5e:f4:25:42:fb:f5:d9:3e:8a:6b:fd:c8:
                    b6:2a:ff:b6:3b:7b:a5:c9:0c:1d:3c:f3:ec:5f:31:
                    d0:19:30:ae:c3:e6:0d:47:b1:5c:20:d0:59:0d:10:
                    e4:a2:75:86:84:5e:62:11:a0:a7:40:12:86:80:0a:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4B:6C:0B:43:9C:3C:BD:F2:1A:EF:EA:DD:86:09:66:0E:FA:FE:DF
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9b:4f:7c:1a:a9:a3:6e:d8:c1:b0:e1:09:af:29:40:43:7b:
         25:03:2f:43:82:6b:e8:40:e8:4a:bd:b4:f6:04:a6:44:28:7e:
         3b:68:ff:bc:2b:ff:62:1b:6f:4f:ed:76:06:c0:ef:fb:58:0a:
         20:59:66:54:ac:d2:96:a3:3b:c4:31:71:bc:b2:70:02:a9:59:
         fe:ff:29:0f:ae:b5:29:7e:3d:04:2f:6b:3e:4a:c4:95:22:ca:
         df:5d:21:9d:d6:00:a6:97:f7:ce:55:a5:df:be:68:5e:41:fd:
         34:0c:2c:80:8d:a8:85:1b:38:2a:43:be:08:46:ef:71:53:7e:
         48:03:11:b5:c3:64:8b:f6:89:df:0f:59:5a:90:d7:c5:b9:18:
         0e:4f:9f:02:e7:17:68:a1:fb:55:a3:15:67:56:00:0f:5f:59:
         f1:68:38:ad:7d:90:b3:06:ae:a8:c4:6a:cc:e4:30:7c:5a:5b:
         6d:d2:ee:aa:1b:11:0e:54:d3:e3:fd:f3:95:43:84:e4:65:95:
         68:c4:28:18:a9:96:5a:b7:1c:15:d3:13:af:ec:12:ee:1b:9f:
         8f:18:74:54:c9:ed:f1:e8:60:e0:79:ef:e4:f9:b8:3d:4f:c4:
         f4:a8:2a:7b:60:61:7c:a9:f6:ae:54:12:e8:66:79:3c:e8:bf:
         31:ef:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:44 2025 by rpki-client