Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
File:                     -RyaVXksG3JGcT_syDoE0La_EpE.mft (raw, json)
Hash identifier:          3RNHMTQyDUE2v5292eA6l8H3+ir3z/LHCuMtOqfls6Q=
Subject key identifier:   A1:26:5D:DE:75:39:07:0C:4B:61:CA:9C:DB:7E:9C:E2:24:0F:4F:9D
Authority key identifier: F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
Certificate issuer:       /CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Certificate serial:       02CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
Manifest number:          02C5
Signing time:             Sun 19 Oct 2025 03:57:17 +0000
Manifest this update:     Sun 19 Oct 2025 03:57:16 +0000
Manifest next update:     Tue 21 Oct 2025 03:57:16 +0000
Files and hashes:         1: -RyaVXksG3JGcT_syDoE0La_EpE.crl (hash: UlEBFjq58SUjHdWBvw6Kj0Mw7gTsz4fkZ8JXe1TuOXM=)
                          2: F85FFC4692E611EEB2D6445FD25BE465.roa (hash: muWneFlHYojsneBSKzrZDz/udMZ/g3nNGVbhuecawWo=)
                          3: 68052C5292E611EEB89A3D5ED25BE465.roa (hash: tfitjgyPV0bS1mdpb1R7yScmPtiSMrRxv3bQMLGjivw=)
                          4: 76838CE4E21211EEBB0FD29E775412E6.roa (hash: 83ixyn1DFACr3ZBupHAVOvYjpWf5hCNkOy2h0/nKuTw=)
                          5: 60DEE4F2E21111EEA9BF3698775412E6.roa (hash: kpV5c+Nm73LzjUsY4W/31mKZBHaBOvnt5Onm6QECScM=)
                          6: FFF44596E21111EE97790E9B775412E6.roa (hash: 3jeCnY7r5+OaUOOC086aUVH8hGb0UpeugYE741gqr+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9765AF, serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
        Validity
            Not Before: Oct 19 03:57:16 2025 GMT
            Not After : Oct 21 03:57:16 2025 GMT
        Subject: CN=68f4619d-9c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:26:38:e0:c3:c9:17:8d:39:6e:8a:98:ad:
                    df:2d:28:9f:12:68:38:41:1b:68:2b:46:1f:e6:23:
                    88:ed:df:7d:29:2d:50:03:48:d5:f9:34:6e:a3:50:
                    d9:22:0b:9f:1e:2e:64:88:ec:1c:c5:32:6e:2e:6e:
                    ce:58:cc:d0:bc:ea:bf:b0:42:8a:b8:58:83:ba:32:
                    1d:b8:48:b8:d4:35:61:cf:f0:39:7f:16:44:4f:1f:
                    eb:1e:3d:5a:47:1a:66:60:ae:65:38:68:ea:69:3d:
                    39:5e:29:ce:dd:36:c2:5a:b9:ef:f4:d7:a1:82:17:
                    b1:c6:03:7d:0b:c5:1e:94:7f:ff:e2:c9:77:63:34:
                    71:00:5c:1a:24:20:35:db:99:f6:ff:6a:e9:39:8f:
                    20:16:57:38:7d:de:35:63:89:1f:46:28:9f:67:86:
                    31:18:72:e4:99:7c:9f:99:80:19:ed:8d:73:f4:77:
                    3c:5f:ab:8b:51:27:b8:f7:93:28:92:5c:e6:65:3f:
                    1c:06:73:63:6e:43:5f:32:2b:44:f5:93:05:70:77:
                    68:9c:b2:5c:a2:7a:6c:46:d1:46:b0:77:5a:f0:12:
                    13:54:03:c5:3a:1f:4a:1b:b2:b4:ef:5f:b9:c1:34:
                    39:61:6c:27:80:63:25:da:d2:62:02:12:cc:9f:8e:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:5D:DE:75:39:07:0C:4B:61:CA:9C:DB:7E:9C:E2:24:0F:4F:9D
            X509v3 Authority Key Identifier:
                keyid:F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ed:22:7a:8f:8f:e0:33:df:49:10:41:32:e7:a3:0b:cb:47:
         69:fc:da:f4:65:ff:83:fb:4b:bd:8b:76:70:83:eb:3e:6b:c0:
         72:13:90:91:2e:57:04:44:9f:b3:82:28:be:63:e0:17:34:6f:
         69:25:8b:83:fe:fd:fa:46:08:42:aa:7f:58:fa:fd:d2:53:b5:
         49:bc:8c:d7:f6:0e:52:42:23:8f:1a:38:85:05:3b:c1:cc:cc:
         bf:ca:f6:b9:e4:1e:ab:8f:29:e8:ae:8d:86:97:f6:4c:87:62:
         f9:a4:f3:c7:a5:1c:ba:68:6d:b7:18:eb:2f:79:55:bb:5d:eb:
         66:42:2e:f8:cb:c3:35:ad:eb:fa:21:00:98:26:85:14:20:29:
         ee:71:d5:65:22:d4:36:90:b2:dc:21:d8:a5:a6:90:b8:27:56:
         31:ea:d5:f8:f6:6c:0f:e8:ee:18:f6:99:00:4f:06:57:dd:88:
         c5:a5:5f:88:72:ee:06:a7:8d:c5:f4:14:81:30:59:35:21:af:
         ee:6a:21:20:1b:e1:5d:ae:64:56:5a:ba:1d:5b:0f:e6:94:63:
         4d:22:49:ab:7d:5d:e9:ac:29:f9:e4:f2:75:41:85:e3:06:3d:
         ff:3e:37:4e:9e:21:bd:a5:7a:b2:39:33:00:ce:8b:dd:04:b4:
         62:e5:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:01 2025 by rpki-client