Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File:                     bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier:          5vNv/0panGC5ph4u7JOEB6IliDV+z5FREgCTNMgQDC0=
Subject key identifier:   39:01:1C:4B:72:BA:FB:2E:1E:C2:E3:6D:BE:C9:4C:70:2F:DB:96:47
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer:       /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial:       0631
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number:          062F
Signing time:             Mon 20 Oct 2025 02:22:29 +0000
Manifest this update:     Mon 20 Oct 2025 02:22:28 +0000
Manifest next update:     Wed 22 Oct 2025 02:22:28 +0000
Files and hashes:         1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: ISZ4MspPH2dVsvp+aK0gKHFwMaayA6sYvZPumoLZ4QI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                          rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
        Validity
            Not Before: Oct 20 02:22:28 2025 GMT
            Not After : Oct 22 02:22:28 2025 GMT
        Subject: CN=68f59ce5-c38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2c:7e:47:6a:b3:8e:f7:8e:51:ac:63:76:e0:
                    d3:93:ed:0f:15:23:ac:90:55:0e:e3:9b:08:09:c5:
                    0f:9c:a0:dd:c3:d6:69:ef:03:01:2e:0f:56:5e:3a:
                    cd:0a:2d:e5:67:aa:9c:f6:dd:40:ed:30:92:34:73:
                    db:12:b7:7f:da:4e:d8:bc:27:1b:d8:cf:04:8c:e5:
                    8f:03:51:f8:36:b6:e1:bd:04:35:2d:00:0c:34:9d:
                    00:87:8f:4f:7d:f8:7b:ce:0a:97:ec:2f:f8:d6:01:
                    02:05:ff:0b:a6:14:fc:9f:d1:37:1b:d3:f6:74:96:
                    db:a1:0c:0a:94:9e:0c:2c:36:cd:8f:63:fd:33:59:
                    86:f6:a2:25:90:01:29:ec:db:70:dd:8f:b3:6f:6c:
                    58:f2:ac:80:d6:79:c1:39:53:a9:fb:60:bb:09:50:
                    7a:25:ed:9a:6a:8a:9f:75:e4:a4:cb:b3:f2:31:ef:
                    03:01:5b:bb:24:4c:80:6e:5c:5c:70:41:5a:47:c9:
                    82:b1:d4:60:98:5d:20:a0:4d:8e:a7:5f:4d:bc:87:
                    f6:f5:c7:89:9e:42:6c:dc:97:2e:2a:66:db:67:24:
                    ba:2e:87:f2:f2:39:ff:4e:fb:89:7e:35:8d:0c:4a:
                    d3:3a:5a:a3:2f:12:c8:02:53:2d:12:da:09:9a:14:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:01:1C:4B:72:BA:FB:2E:1E:C2:E3:6D:BE:C9:4C:70:2F:DB:96:47
            X509v3 Authority Key Identifier:
                keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d1:83:85:db:61:84:b2:4b:3d:1f:df:e6:89:ee:62:15:48:
         99:00:0e:74:16:4b:71:e3:d9:95:12:61:8b:df:26:da:59:55:
         a8:8b:01:fa:8c:c4:d5:a0:f8:f3:20:38:83:a3:92:fb:04:16:
         87:82:e0:49:23:a3:41:fa:6b:77:c3:5b:30:f2:22:bf:cc:11:
         b6:ca:82:a9:3d:1c:4d:0a:77:c1:65:b8:94:15:e7:fc:09:c3:
         ba:b0:b8:6e:a6:76:80:41:37:06:70:4d:a7:6e:4a:d9:4c:29:
         f2:5c:0f:8d:41:cf:a0:be:3e:15:0a:f0:1c:95:ab:b0:18:57:
         78:2b:50:09:8f:ee:f2:e4:cd:4e:85:52:e4:ca:92:53:be:33:
         3b:4e:b7:a0:d7:58:76:fe:75:a6:ac:71:f5:b1:65:65:7d:d0:
         ea:02:81:07:10:eb:b2:26:92:63:6a:cf:ca:fd:6f:a2:cd:0e:
         47:31:e4:6f:fe:73:0c:53:43:a6:e9:cd:0d:e0:19:31:e4:7a:
         4f:5e:e5:c9:7e:c9:ce:1d:01:c7:57:e9:e1:7a:3d:ce:8b:a8:
         3a:ed:87:3f:84:8d:1f:eb:cb:39:70:1b:c1:07:18:92:4b:51:
         9e:51:34:37:18:e5:2b:5c:ad:bc:1c:65:d4:59:3f:27:23:18:
         d0:f3:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:17 2025 by rpki-client