Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          DRL/DE0vJ/luFdG48pS9wul/4YHU3+uTY7my26NAYwk=
Subject key identifier:   6F:2F:91:3F:70:1D:1E:A8:97:9E:0A:8A:C8:34:68:42:94:85:23:61
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       0300
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          02FE
Signing time:             Mon 20 Oct 2025 03:51:18 +0000
Manifest this update:     Mon 20 Oct 2025 03:51:17 +0000
Manifest next update:     Wed 22 Oct 2025 03:51:17 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: YSFl0rvtgEOSbTc0w192U2RIRO9M4FFPQrRrRsZ1rFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Oct 20 03:51:17 2025 GMT
            Not After : Oct 22 03:51:17 2025 GMT
        Subject: CN=68f5b1b5-37ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:36:5d:0f:37:20:4d:6f:3c:d7:f7:a1:b4:0f:
                    26:5c:de:cb:39:d5:51:38:cb:57:88:df:7d:f0:18:
                    21:42:07:61:de:c0:d2:fb:21:f4:ff:d8:46:3a:d8:
                    9e:b8:cc:2a:43:9d:b6:0f:2f:83:39:c0:65:b7:1e:
                    0d:54:a5:09:9d:b7:6e:f9:b3:29:80:06:37:a9:ac:
                    20:13:c5:73:0b:25:db:70:01:97:71:1d:cb:20:3f:
                    c1:6e:6b:ec:c4:8c:30:1f:3f:a9:0f:5a:94:3d:f8:
                    73:74:29:09:61:7c:f7:ae:c5:db:33:25:99:20:2b:
                    4b:94:d9:04:9a:92:a6:89:31:f5:4f:b2:21:fc:8e:
                    21:3a:39:90:7e:55:c1:a3:a9:33:34:d4:91:5d:74:
                    08:3a:78:3a:40:e6:9f:8d:f3:6c:77:e1:3f:45:94:
                    7a:0f:af:2b:fc:1d:f9:a0:4d:45:1a:20:64:19:25:
                    ed:c7:ec:93:da:46:0e:4d:b4:d8:fb:f7:d2:f5:e9:
                    d0:7a:57:2e:f6:39:6c:8c:37:0b:74:49:b2:6d:e8:
                    96:9d:d9:c2:23:fa:81:50:04:86:51:0d:47:b0:2c:
                    1e:bd:90:b7:c8:7b:92:5e:98:ce:a0:45:45:58:82:
                    69:df:0c:64:42:47:aa:4c:57:5c:e1:89:2c:70:9f:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:91:3F:70:1D:1E:A8:97:9E:0A:8A:C8:34:68:42:94:85:23:61
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c9:ec:0e:de:7c:b3:5d:35:f5:39:a8:d1:9c:72:df:e3:8a:
         a5:45:40:e6:08:fe:2b:65:b3:28:be:74:95:77:21:9c:d2:bf:
         a0:96:e1:fd:25:b4:9e:59:81:6d:d5:18:13:4a:3d:ce:ba:fe:
         cb:19:c4:d9:cd:b6:72:e7:43:d3:1e:d1:f5:7c:90:65:a7:5b:
         21:0c:ed:1c:3b:fe:13:45:b2:0a:fe:79:b0:3a:c4:7a:e0:a1:
         c4:19:13:9b:37:ab:3b:d3:04:b7:ed:01:63:b4:8c:5b:ba:df:
         42:aa:71:13:1e:a9:74:72:ae:e0:9c:69:28:87:a7:51:04:de:
         97:fe:a6:13:76:3d:c9:f7:6e:07:c8:cd:92:ee:e2:a8:04:f5:
         1d:25:26:c1:b6:18:9c:7d:a9:55:ac:7a:f1:cf:ce:6c:35:82:
         d1:5e:1d:cb:32:37:0e:eb:3b:c2:91:a9:fd:01:cb:9d:1e:35:
         1c:f6:88:cb:d3:23:3d:8f:8b:9a:39:48:0b:3c:b3:81:57:9f:
         c9:3a:6c:a9:19:b9:21:a9:e8:a4:5f:4d:0d:0e:f8:66:68:0a:
         b0:96:42:4b:99:a1:08:50:f1:fc:1d:63:96:4a:77:03:e9:97:
         54:d4:aa:65:7f:26:b9:07:fd:fe:d5:76:db:e1:6f:58:75:06:
         b4:fe:a7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:57:32 2025 by rpki-client