Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          MTPSbSXB/nQLDznJPwtICT+RSeCRKdnEcW+vxumEIrQ=
Subject key identifier:   0D:3C:75:51:F7:04:98:82:0C:03:FD:C0:50:F3:5E:B2:70:1A:87:D1
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       0F14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          0F0F
Signing time:             Mon 20 Oct 2025 00:51:41 +0000
Manifest this update:     Mon 20 Oct 2025 00:51:40 +0000
Manifest next update:     Wed 22 Oct 2025 00:51:40 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: 4ul1zUoDMYilwleMXn079ChDEHo4l47tdWLkk8NYgBk=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3860 (0xf14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Oct 20 00:51:40 2025 GMT
            Not After : Oct 22 00:51:40 2025 GMT
        Subject: CN=68f5879d-1c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:24:7a:ff:08:2c:4c:00:57:75:c3:96:db:
                    99:05:34:2d:c9:19:15:1b:a0:4f:42:67:aa:65:17:
                    aa:79:fa:da:49:2d:24:35:a7:c9:1c:c9:01:a9:e5:
                    df:4f:85:94:7c:81:ca:ba:e2:6c:76:fe:6a:7b:d1:
                    27:46:51:4e:d6:11:e3:c9:6e:41:60:e8:af:cf:e1:
                    00:78:c9:2c:62:d9:aa:f9:b3:ec:20:63:df:3a:21:
                    54:93:a9:c3:3b:2e:09:8b:30:f9:8c:c8:8e:4c:fe:
                    2f:c4:b3:9d:69:7f:43:e9:1f:41:8a:83:b1:25:c2:
                    48:19:99:50:23:32:13:83:0c:46:04:ca:1e:ec:48:
                    c7:51:50:c0:db:5b:93:09:6f:42:ab:6c:00:34:87:
                    90:c1:b9:2c:59:51:45:68:35:24:41:a5:9d:d6:9f:
                    63:d7:4b:e8:b6:f2:5a:e5:52:56:d4:6a:04:5e:56:
                    b2:62:88:ed:79:13:8a:41:b2:13:1d:15:38:e4:42:
                    00:9b:56:4b:a4:1e:27:f8:2f:ba:f4:43:b3:44:68:
                    95:e6:dd:40:91:85:58:76:a0:09:67:41:03:21:a4:
                    27:d9:85:03:fb:07:dc:75:af:62:db:bf:80:d3:fb:
                    05:67:4b:33:59:ef:c6:b1:38:95:4a:f7:41:4d:94:
                    f3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3C:75:51:F7:04:98:82:0C:03:FD:C0:50:F3:5E:B2:70:1A:87:D1
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:c3:dc:9a:c8:00:0e:6c:ed:2a:63:05:9e:2d:02:31:6c:
         9a:c3:94:12:7f:64:f9:91:b5:b4:19:c0:cb:a7:d8:2a:da:13:
         fe:e2:7f:8e:89:16:f5:43:2c:de:a4:77:d7:58:38:4e:2f:7c:
         83:af:4b:26:36:89:00:db:0e:d6:0a:c1:55:ee:05:f2:5a:05:
         73:45:35:ce:d1:bd:8a:f1:35:7a:d0:bd:26:a7:8f:52:4b:85:
         54:d1:f7:98:42:72:1f:d1:b4:b9:1e:aa:57:4c:b0:8d:1c:f5:
         c6:a9:ab:9f:b4:eb:e2:e6:00:1d:1b:37:92:25:ae:28:0c:f5:
         cc:5a:5c:98:b7:4f:ab:93:4d:1c:de:d3:0e:f0:dc:31:b7:33:
         c5:4f:c5:4e:22:ce:f9:5f:4f:b8:c9:5b:98:ce:cd:07:d9:15:
         f0:70:6f:cc:6e:21:32:39:ce:13:e7:ac:16:f5:96:62:f3:20:
         a5:f9:1d:32:20:91:bd:13:6c:7f:93:fc:83:4d:46:7c:f3:c2:
         08:a9:c9:29:7a:bc:dd:18:f8:a7:d3:7b:35:f6:da:c3:dd:f9:
         ac:c3:5e:d9:46:e8:72:82:6e:fb:ad:90:57:df:35:d0:7f:7b:
         7a:57:49:8e:ad:5e:0a:0d:62:8b:60:81:84:78:c7:d0:f9:b1:
         66:45:9a:ae
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhERkFBRjExMC8GA1UEBRMoRDY2OEJFQ0FGM0NCMTREQjYyNEEzNDI1RDY2NjYw
OUJGMjdCNTJFRTAeFw0yNTEwMjAwMDUxNDBaFw0yNTEwMjIwMDUxNDBaMBgxFjAU
BgNVBAMTDTY4ZjU4NzlkLTFjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxwCR6/wgsTABXdcOW25kFNC3JGRUboE9CZ6plF6p5+tpJLSQ1p8kcyQGp
5d9PhZR8gcq64mx2/mp70SdGUU7WEePJbkFg6K/P4QB4ySxi2ar5s+wgY986IVST
qcM7LgmLMPmMyI5M/i/Es51pf0PpH0GKg7ElwkgZmVAjMhODDEYEyh7sSMdRUMDb
W5MJb0KrbAA0h5DBuSxZUUVoNSRBpZ3Wn2PXS+i28lrlUlbUagReVrJiiO15E4pB
shMdFTjkQgCbVkukHif4L7r0Q7NEaJXm3UCRhVh2oAlnQQMhpCfZhQP7B9x1r2Lb
v4DT+wVnSzNZ78axOJVK90FNlPO7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDTx1
UfcEmIIMA/3AUPNesnAah9EwHwYDVR0jBBgwFoAU1mi+yvPLFNtiSjQl1mZgm/J7
Uu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4REZBLzBFOUIxOUJBMTQwQTExRTVBN0Y1RkM0Q0Y4QUVBMjI4LzFtaS15
dlBMRk50aVNqUWwxbVpnbV9KN1V1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFtaS15dlBMRk50aVNqUWwxbVpnbV9KN1V1NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhERkEvMEU5QjE5QkExNDBBMTFFNUE3RjVGQzRDRjhB
RUEyMjgvMW1pLXl2UExGTnRpU2pRbDFtWmdtX0o3VXU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxs8PcmsgADmztKmMFni0CMWyaw5QS
f2T5kbW0GcDLp9gq2hP+4n+OiRb1QyzepHfXWDhOL3yDr0smNokA2w7WCsFV7gXy
WgVzRTXO0b2K8TV60L0mp49SS4VU0feYQnIf0bS5HqpXTLCNHPXGqauftOvi5gAd
GzeSJa4oDPXMWlyYt0+rk00c3tMO8NwxtzPFT8VOIs75X0+4yVuYzs0H2RXwcG/M
biEyOc4T56wW9ZZi8yCl+R0yIJG9E2x/k/yDTUZ888IIqckperzdGPin03s19trD
3fmsw17ZRuhygm77rZBX3zXQf3t6V0mOrV4KDWKLYIGEeMfQ+bFmRZqu
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:25:11 2025 by rpki-client