Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
File:                     6ET7WQu7iZkxvh7b23d61vkKmoM.mft (raw, json)
Hash identifier:          ImBLLc+h3pGICraslNx6K1OxKBR69xqxgLcoGVSBqyk=
Subject key identifier:   19:F3:1A:E6:63:1C:8F:D9:52:3A:30:36:5D:B3:41:EA:66:91:95:CD
Authority key identifier: E8:44:FB:59:0B:BB:89:99:31:BE:1E:DB:DB:77:7A:D6:F9:0A:9A:83
Certificate issuer:       /CN=F36D76CBAF/serialNumber=E844FB590BBB899931BE1EDBDB777AD6F90A9A83
Certificate serial:       0477
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
Manifest number:          0476
Signing time:             Mon 20 Oct 2025 03:05:29 +0000
Manifest this update:     Mon 20 Oct 2025 03:05:28 +0000
Manifest next update:     Wed 22 Oct 2025 03:05:28 +0000
Files and hashes:         1: 6ET7WQu7iZkxvh7b23d61vkKmoM.crl (hash: e024zrgwOvSq3c3PpH/SYOi91uXYA8pTS8SshUJU3cI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1143 (0x477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D76CBAF, serialNumber=E844FB590BBB899931BE1EDBDB777AD6F90A9A83
        Validity
            Not Before: Oct 20 03:05:28 2025 GMT
            Not After : Oct 22 03:05:28 2025 GMT
        Subject: CN=68f5a6f9-1f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:12:a6:b4:fe:d6:2a:52:18:f7:f5:6d:27:
                    00:82:9a:d7:36:8d:35:53:66:38:0a:b6:24:ce:ab:
                    89:20:60:aa:f5:9a:92:b4:87:f3:7c:0e:f5:4d:d2:
                    18:75:5e:d9:56:16:af:3c:ed:cd:8f:ff:b2:c8:65:
                    fe:8c:16:22:52:dc:c6:8b:c4:08:79:e7:0d:25:67:
                    91:8a:ea:c4:00:9b:03:e9:82:19:dd:e6:94:ba:b0:
                    c5:6a:18:80:6b:bc:4b:25:bc:6c:f8:3e:fc:38:9c:
                    01:6e:2d:60:89:a4:8a:de:df:22:09:59:b8:45:cf:
                    ee:28:ce:fc:42:e7:e9:58:c8:e2:d1:11:08:09:a7:
                    0f:b1:75:63:36:aa:37:07:ba:34:da:64:3f:27:39:
                    57:60:aa:19:6b:fb:30:27:8c:67:6e:ed:44:11:16:
                    47:91:2e:7f:0a:06:a4:01:4e:56:98:9f:a4:b7:c8:
                    50:c3:a2:da:5e:65:0a:39:ed:bd:b0:d8:09:f8:f1:
                    a5:26:45:e9:6f:92:c8:35:41:ce:a3:26:93:2f:e7:
                    05:e7:a7:38:ca:96:de:ee:b5:06:c5:aa:51:fa:d1:
                    8b:95:93:dc:78:5a:f0:4e:ee:dc:9b:83:04:e1:c2:
                    37:a8:15:df:e7:5b:61:c9:ac:f2:51:1d:df:e3:08:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F3:1A:E6:63:1C:8F:D9:52:3A:30:36:5D:B3:41:EA:66:91:95:CD
            X509v3 Authority Key Identifier:
                keyid:E8:44:FB:59:0B:BB:89:99:31:BE:1E:DB:DB:77:7A:D6:F9:0A:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d0:ba:1b:80:d3:93:f1:91:6f:fa:35:9f:90:90:fa:2e:97:
         21:6a:88:1e:df:36:fe:bc:b4:02:d4:c5:0c:09:5e:82:26:66:
         09:37:7b:b2:3d:95:69:5b:36:c6:67:2f:74:ff:ab:5f:aa:1f:
         8b:7f:98:7c:24:4d:d2:a9:d0:a5:95:0f:f4:7f:9d:e2:62:f9:
         2f:02:8e:ed:86:66:5f:65:ac:02:85:d7:15:a3:de:43:ab:71:
         89:62:ac:53:22:2d:63:7b:02:13:19:83:37:1d:e2:af:0d:16:
         60:58:fa:09:2c:f5:de:4d:7d:71:fb:7c:f4:4a:9a:60:68:42:
         fd:ae:84:7e:86:40:a0:a5:c3:37:68:e7:b3:2a:cb:fa:98:f7:
         9c:c6:02:d3:fe:03:92:d8:59:d8:44:18:cb:3b:27:8b:0d:78:
         12:c4:b0:42:4c:74:55:1a:cb:39:b8:33:ec:d7:ce:4d:3a:77:
         1e:dc:01:ec:f1:39:04:75:c3:91:dd:ab:ee:05:e3:71:53:03:
         c4:b8:08:1a:38:59:b0:15:6d:f1:90:66:3c:5e:c9:f9:9b:2a:
         3f:b6:e4:bc:0e:64:0e:ff:7d:16:1c:9b:7d:bb:dc:ea:f8:ce:
         eb:e1:e0:a4:ee:c9:99:6b:b9:e7:df:d7:35:f9:17:13:fb:a9:
         fc:b6:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:25 2025 by rpki-client