Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
File:                     37GYokEhr76oC-bCVT7Qn4UiUDI.mft (raw, json)
Hash identifier:          PQaH7MoeqaEjykCVuYZ1dLDIugREFmnqbdMIE2AkMJs=
Subject key identifier:   72:38:C8:0E:91:57:73:2A:6B:F0:03:08:DE:F6:AC:73:EE:77:33:3B
Authority key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Certificate issuer:       /CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Certificate serial:       0B89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
Manifest number:          0B88
Signing time:             Mon 20 Oct 2025 01:10:40 +0000
Manifest this update:     Mon 20 Oct 2025 01:10:39 +0000
Manifest next update:     Wed 22 Oct 2025 01:10:39 +0000
Files and hashes:         1: 37GYokEhr76oC-bCVT7Qn4UiUDI.crl (hash: f8wo37wo4ZHmHwO8Y+5Es0S+O2P3Rz6ZHJhgE84x0aU=)
                          2: FA78454ADDC111E8B15C694DF8AEA228.roa (hash: uu495Ulte7M9lqyB0F6mlOadgmAPbSCrWmqWcuFpoQU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2953 (0xb89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1839AF, serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
        Validity
            Not Before: Oct 20 01:10:39 2025 GMT
            Not After : Oct 22 01:10:39 2025 GMT
        Subject: CN=68f58c10-375c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:83:29:75:4c:0b:2d:46:d8:94:88:3b:ae:
                    65:43:1a:68:f0:2a:8e:51:cb:a5:34:1c:08:2f:35:
                    a2:c6:8d:5a:53:31:46:4c:94:d9:05:a3:c7:44:b1:
                    d7:87:d6:0e:85:0a:ff:8e:4e:d5:dc:5e:9d:7b:9a:
                    1c:c3:b9:c2:8a:92:e4:1f:70:fa:54:3e:23:e7:bf:
                    a2:7b:be:5c:32:39:a0:1a:52:55:b3:e0:c9:76:9c:
                    60:89:2b:b5:9d:b7:66:92:8e:ca:85:f8:c8:c6:7b:
                    fd:45:06:b2:82:0f:a4:69:de:df:5e:ff:ef:d4:56:
                    93:b5:2a:d2:89:0a:12:0e:10:20:e6:8d:a6:fe:cb:
                    7b:23:4a:19:b6:27:b4:9f:e2:74:c8:79:98:a3:70:
                    a5:7f:2d:ce:71:e5:6f:3d:c3:fe:5a:47:37:e9:5f:
                    e6:f6:db:44:4b:ec:3f:95:9c:1f:a9:5b:fe:57:9d:
                    fd:08:6c:39:7a:d3:c6:ff:ae:02:32:7e:45:bc:d7:
                    2f:d5:df:54:50:68:02:74:78:d5:b7:da:b3:ff:96:
                    5e:a9:c2:60:bc:d8:72:3a:b4:cd:9b:5e:f5:11:a5:
                    a5:59:2a:ea:e8:a1:56:ff:6a:c4:94:22:cf:89:78:
                    77:0e:0b:85:cf:f0:2f:cb:98:59:b6:e2:91:a8:da:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:38:C8:0E:91:57:73:2A:6B:F0:03:08:DE:F6:AC:73:EE:77:33:3B
            X509v3 Authority Key Identifier:
                keyid:DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:a8:34:81:42:fb:fa:a3:ef:97:de:40:5c:e3:76:eb:2c:
         94:59:b4:6c:0d:20:e4:82:e0:73:2f:9d:9c:32:1a:7b:a5:ab:
         95:b8:ab:dc:5b:58:3e:bc:ab:dc:85:44:1d:87:f7:6d:96:d5:
         dd:91:73:35:43:16:1e:af:6f:9b:a2:b6:fd:6d:fb:94:e1:71:
         67:1b:b2:1d:86:4a:0b:08:00:bc:8b:65:56:4e:62:08:f1:f3:
         2f:10:19:4e:9f:a2:86:49:1d:3c:a8:7b:60:bc:e6:96:6e:c8:
         e8:f8:ff:c0:fd:10:a1:46:84:f8:79:40:1a:c9:7f:25:b9:4f:
         51:2e:50:37:4c:37:bc:39:c6:66:65:24:ec:3d:0a:46:8a:fd:
         5f:e2:a1:29:fa:77:c2:ff:81:e9:1f:9f:04:9f:ba:06:66:95:
         7d:5d:5d:6a:78:b1:d6:a1:73:f9:4f:35:17:1b:47:6d:89:f9:
         93:23:2b:14:46:ec:a6:e4:e1:90:7f:f7:db:8b:c2:11:26:47:
         93:c3:cf:90:83:3d:80:ce:16:ca:7f:c4:c0:4b:f9:a5:be:31:
         e2:44:63:d8:5a:8d:c8:70:d2:f2:9e:f6:f8:89:d0:43:e4:f1:
         d0:d4:ca:35:4b:53:b9:90:51:06:c9:f4:cf:00:06:90:2c:0a:
         cc:04:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:30:01 2025 by rpki-client