Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
File:                     gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft (raw, json)
Hash identifier:          wRKkRVu/7TzYATcDtBuYEbnVXN+sMhcKcCfTWOUUlhk=
Subject key identifier:   2B:9D:AF:A3:F9:0D:16:9D:64:D5:E6:87:49:52:83:81:24:BA:AC:68
Authority key identifier: 80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96
Certificate issuer:       /CN=F36D46F6AF/serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
Certificate serial:       40
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
Manifest number:          3F
Signing time:             Mon 20 Oct 2025 05:15:20 +0000
Manifest this update:     Mon 20 Oct 2025 05:15:19 +0000
Manifest next update:     Wed 22 Oct 2025 05:15:19 +0000
Files and hashes:         1: gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl (hash: RGJ1BY0uUPRCamUgCDTLEgspgJmRk4iBhq9dSyvCOH0=)
                          2: B341C57C7D8B11F098D9F7B2DAE4EC9C.roa (hash: gxdDf5YFTTIXUD0ePn6Oc2L/cMAyoWONeU7Dg/ah8UU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D46F6AF, serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
        Validity
            Not Before: Oct 20 05:15:19 2025 GMT
            Not After : Oct 22 05:15:19 2025 GMT
        Subject: CN=68f5c568-711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:39:f8:67:41:c0:6d:a6:a2:2a:dd:81:f3:b6:
                    68:c7:e2:17:58:8b:15:c5:11:d8:96:98:ce:69:83:
                    38:d4:c1:5f:eb:86:2e:34:53:cc:b2:ce:7a:cc:58:
                    06:27:5d:52:f7:3f:71:9a:61:ee:c9:47:79:97:2f:
                    86:13:ff:3d:e3:10:f5:f8:16:87:78:56:ba:99:51:
                    57:67:5c:f7:3c:bc:49:3c:f4:43:85:e9:f6:df:bd:
                    75:e3:70:53:41:5c:f9:0d:9f:4e:ae:b0:90:2c:31:
                    0a:73:e9:61:71:d2:b1:b9:ab:56:d1:15:03:7f:81:
                    5e:dc:df:3e:9a:e3:2c:ee:17:c5:af:22:88:cc:6f:
                    62:57:d4:fa:80:9b:3f:79:47:69:ae:9b:3f:fc:b4:
                    0c:95:04:1a:32:27:a4:6b:11:44:af:63:16:0b:46:
                    be:bc:db:2c:c7:6e:39:6c:85:93:1f:21:a9:0c:63:
                    98:9f:e9:59:fa:85:e7:66:5b:78:cd:d8:51:21:13:
                    61:01:85:fc:be:65:36:91:56:e8:bd:cf:7c:a1:f9:
                    bb:72:9c:08:7c:f0:cd:f6:93:c3:4e:f3:7b:77:ed:
                    d7:29:94:42:6b:43:02:d8:99:07:ec:1a:6c:29:74:
                    39:c8:4e:bd:1c:15:a8:66:4a:7a:54:48:0a:be:03:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9D:AF:A3:F9:0D:16:9D:64:D5:E6:87:49:52:83:81:24:BA:AC:68
            X509v3 Authority Key Identifier:
                keyid:80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:03:7e:7b:0a:63:79:19:79:1f:ff:05:3d:3c:29:09:bb:
         24:6d:a6:8f:0a:74:68:d4:27:b5:66:87:87:2a:c5:48:3f:a2:
         b4:da:13:2d:db:75:0e:6e:9d:3f:89:41:50:53:bf:2c:4e:60:
         d9:11:ea:3a:00:4a:06:1d:2b:62:9c:53:00:3b:08:e8:a2:4d:
         56:01:d8:c0:67:33:e7:cf:45:09:cc:5e:13:7c:cf:70:0c:f8:
         27:7c:43:3e:e7:b4:35:c8:8c:53:2b:31:00:44:35:e0:64:b4:
         24:b3:d6:7e:f1:99:87:e8:0f:59:bd:b4:05:ae:85:e7:a7:a5:
         ac:9a:a3:9c:c6:d4:00:eb:8c:32:81:41:6f:50:d2:0d:88:17:
         02:6f:d7:87:d9:d0:66:5e:fe:46:b8:78:de:fe:97:e2:72:0e:
         24:c1:9b:34:db:c5:23:f3:64:53:db:7b:de:52:01:eb:5a:5f:
         88:b9:56:3c:64:11:4b:07:a4:47:07:17:58:e1:37:eb:3d:2f:
         95:f0:aa:0d:0c:af:9b:64:e6:05:ce:16:e0:0a:bd:4b:40:cb:
         c5:f5:fa:63:56:19:8c:05:4d:de:91:10:f7:9e:af:13:fb:e2:
         bf:70:84:06:9a:83:26:c3:0f:7b:28:f8:65:52:18:cb:df:bc:
         c7:53:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:51 2025 by rpki-client