Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
File:                     BkapmNbNXVvutQ9MkpExVTb3xbQ.mft (raw, json)
Hash identifier:          Ivt0eejjrIFj82F+qlsix3siZBDqUNw0tLZcGvrQoGo=
Subject key identifier:   33:3A:1F:3B:83:4B:4C:A5:36:4E:68:34:A9:03:5E:0A:10:26:0D:13
Authority key identifier: 06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4
Certificate issuer:       /CN=F36CAE5AAF/serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
Certificate serial:       0712
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
Manifest number:          0711
Signing time:             Mon 20 Oct 2025 02:00:28 +0000
Manifest this update:     Mon 20 Oct 2025 02:00:27 +0000
Manifest next update:     Wed 22 Oct 2025 02:00:27 +0000
Files and hashes:         1: BkapmNbNXVvutQ9MkpExVTb3xbQ.crl (hash: brAlDSBFN6nzFf/pDyDwo3Axl2/5pPwsEGJSFjCRGWU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAE5AAF, serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
        Validity
            Not Before: Oct 20 02:00:27 2025 GMT
            Not After : Oct 22 02:00:27 2025 GMT
        Subject: CN=68f597bc-51af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:0a:38:af:e7:77:7c:5a:51:6b:f3:d3:ea:
                    13:f3:55:5e:05:b5:ed:1e:18:ea:34:41:42:fa:5f:
                    4c:1e:49:05:81:a9:fc:77:55:6f:38:f9:11:c9:d7:
                    c1:ce:d6:84:1a:62:61:64:16:82:01:ef:4f:3c:a7:
                    19:48:15:0a:da:f5:09:e2:36:dc:d1:5b:7a:82:a7:
                    4f:be:bc:9c:2a:02:79:b5:31:0d:b7:f8:6c:89:a5:
                    a8:e8:59:b3:0a:03:a6:d3:36:36:bd:75:a9:99:3b:
                    2e:75:b5:24:2f:6a:18:78:a5:71:38:8c:95:90:7b:
                    e4:05:a2:1c:e7:e8:68:90:7c:f0:70:75:f5:90:25:
                    b1:97:93:8f:ff:f3:7c:4d:25:7c:c2:1c:43:65:bb:
                    e9:8f:8c:e5:02:06:1d:4e:b9:cb:9c:f3:81:b5:b1:
                    2c:99:f3:69:75:1c:50:1c:eb:6c:91:bd:03:c2:b3:
                    f0:f7:10:0e:94:59:f2:19:f2:16:af:41:c2:b4:9b:
                    f2:b4:bf:f3:4c:33:07:53:75:d2:c6:94:9b:da:26:
                    2f:64:0d:0d:c7:93:5d:14:89:d2:c5:dc:54:14:a9:
                    be:a7:e3:16:0c:3f:66:7e:5f:d2:8f:54:08:4a:e0:
                    ee:ee:4c:f0:85:11:b8:1c:85:99:2a:84:36:77:eb:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3A:1F:3B:83:4B:4C:A5:36:4E:68:34:A9:03:5E:0A:10:26:0D:13
            X509v3 Authority Key Identifier:
                keyid:06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6c:5d:84:b2:b4:91:4f:80:a2:9f:39:8e:50:7c:8d:5f:62:
         0b:a9:82:a4:03:12:df:f5:a5:73:15:05:f6:23:72:3d:3f:90:
         17:2a:38:52:39:ab:45:57:8f:77:8c:8e:d3:05:4e:f7:b5:c7:
         60:71:51:7a:8e:c6:6d:56:c7:9a:ba:97:ca:97:b4:2c:cd:b8:
         75:35:61:e1:13:c0:1a:1c:35:67:65:86:b6:aa:d5:14:88:ae:
         a3:10:e9:7b:ab:92:6f:61:55:ec:89:9b:50:28:97:7a:1c:8f:
         b7:32:c6:13:3f:29:37:7f:ba:55:77:d3:0f:f4:03:3f:06:66:
         1c:7d:57:e9:a7:e0:c3:65:6c:4c:1e:b7:ea:e3:cf:a9:f3:df:
         42:33:1c:38:62:8e:c0:b4:9b:2a:a9:7e:65:e2:cd:39:a6:5a:
         de:99:33:5a:c8:be:ea:f5:c5:ec:f7:a1:ea:f9:b0:a2:b4:b4:
         c1:e1:1c:d8:f6:d2:0b:63:6d:4c:6e:fd:06:bb:41:84:5d:c6:
         1b:66:21:e7:16:ac:d4:c8:74:56:53:b8:aa:4c:f1:b6:ed:80:
         70:16:2e:d5:7c:76:55:94:71:8d:5f:27:1f:76:94:6a:f0:b8:
         46:66:08:38:24:61:06:2b:99:69:57:9f:c7:2a:aa:b1:9f:4b:
         a9:51:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:13 2025 by rpki-client