Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File:                     1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier:          ZNT2H2I3qT1lp58p37nm2wRxj1ctvZAJ/yzjjj4satI=
Subject key identifier:   CD:32:A9:BE:85:6C:77:30:51:11:47:2D:22:B1:61:85:FD:F8:64:BB
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer:       /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial:       03F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number:          03F3
Signing time:             Mon 20 Oct 2025 03:21:03 +0000
Manifest this update:     Mon 20 Oct 2025 03:21:02 +0000
Manifest next update:     Wed 22 Oct 2025 03:21:02 +0000
Files and hashes:         1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: iPKuGuUCws24X4HT+G4zoNo1Ij6BRnn4lnjxYLasZCU=)
                          2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
        Validity
            Not Before: Oct 20 03:21:02 2025 GMT
            Not After : Oct 22 03:21:02 2025 GMT
        Subject: CN=68f5aa9f-fe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:af:df:19:1e:43:68:6f:7b:21:e6:3b:4b:
                    4f:42:a3:ac:79:96:fc:56:b6:ed:c2:ef:43:b0:d9:
                    39:bf:b0:e3:af:62:20:55:d5:07:16:30:93:15:2a:
                    eb:35:94:d5:4a:a8:74:36:fb:c9:ab:af:4d:f6:3f:
                    e1:30:e9:b2:fb:56:77:61:48:ab:40:84:92:af:06:
                    c4:53:82:2f:32:a9:91:58:51:23:ac:7b:50:04:39:
                    d7:65:47:dd:52:97:89:9a:68:3c:a6:04:37:09:d4:
                    28:f4:9c:3d:1a:b7:68:c1:92:4e:40:ec:52:39:45:
                    a4:54:39:a4:c9:c8:92:b4:2e:2b:90:0c:e8:e3:08:
                    43:f7:cc:79:18:8f:8b:a6:b9:f1:9a:51:d6:21:5a:
                    50:51:0a:ef:9a:81:5d:fb:44:9f:fd:dc:92:d0:ff:
                    5a:ae:5a:0e:c0:32:31:c9:94:9f:35:c1:f3:84:c6:
                    6f:2b:23:6b:77:af:bf:cb:f0:ef:6c:30:89:57:66:
                    a2:21:7d:b5:ff:af:66:53:73:47:ca:0d:e8:5b:ea:
                    4d:01:c5:7c:d7:de:5e:6c:09:63:fc:2a:a2:79:69:
                    c4:3b:83:ff:33:e1:5f:5c:8f:db:94:c5:da:28:e8:
                    5c:bf:93:c1:77:29:68:6d:83:02:87:15:46:b9:e1:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:A9:BE:85:6C:77:30:51:11:47:2D:22:B1:61:85:FD:F8:64:BB
            X509v3 Authority Key Identifier:
                keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:92:4c:b0:33:62:e7:6b:a5:67:bb:4b:5b:de:4a:20:64:3d:
         30:15:d1:cf:61:11:c3:ab:71:3b:ac:56:25:9f:2d:ab:54:12:
         9d:24:83:c7:95:6b:f4:10:55:46:a9:c0:12:e1:21:b9:29:6f:
         f9:f6:2c:35:89:39:08:5e:f1:c6:11:fc:6f:25:13:03:de:ea:
         a4:f7:a8:16:ab:ff:0a:8e:89:73:af:ec:76:fd:8c:a1:5a:c0:
         a7:ec:e9:ac:ed:29:aa:64:50:c2:14:0c:00:25:be:d3:d8:90:
         a2:e9:e4:6d:88:1b:7f:b2:02:0b:a6:3b:ff:f5:51:34:2e:9b:
         61:d1:b4:9f:0b:64:17:0f:8a:7d:81:35:39:84:80:16:bc:ae:
         9c:77:d7:b7:5f:ea:54:28:36:da:9f:aa:75:a0:46:4a:73:24:
         4f:87:53:98:a3:b0:78:2e:8f:e3:09:61:fb:61:b1:dd:e8:bb:
         e9:38:61:19:5f:cd:04:25:67:a9:3f:5b:e9:62:2e:5e:f3:cd:
         7b:0b:e7:ba:6c:b4:85:8f:82:54:e3:7d:40:72:3f:ad:54:9e:
         df:78:61:a7:7a:9a:19:d0:36:93:57:d3:62:f3:a1:76:aa:76:
         40:1a:19:f3:3a:86:fe:3a:ca:64:92:bf:32:06:f2:1a:e1:d8:
         a1:36:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:15 2025 by rpki-client