Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          ILjZCwdzmk43h3bVBh8drgh5rJnRhKU8AxsbudQIPhc=
Subject key identifier:   9F:F2:FE:3F:65:F6:40:E2:00:53:5B:4C:71:1E:47:0A:F5:63:A2:E3
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       0515
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          050D
Signing time:             Mon 20 Oct 2025 02:48:35 +0000
Manifest this update:     Mon 20 Oct 2025 02:48:34 +0000
Manifest next update:     Wed 22 Oct 2025 02:48:34 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: 9PesuqRQBC0pPgJpfJfWBdqyKfKJP/6ufLbUDCXWcto=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Oct 20 02:48:34 2025 GMT
            Not After : Oct 22 02:48:34 2025 GMT
        Subject: CN=68f5a303-a537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:c3:62:18:50:fd:f5:71:1d:5d:f9:ad:0a:
                    2f:c8:54:dc:b8:7c:60:cf:8b:43:36:21:58:8b:07:
                    eb:25:69:0f:7c:fc:e5:54:c7:71:7b:a6:52:ab:8e:
                    31:2d:bd:c5:37:35:e7:3f:07:7d:e4:2a:a4:27:d0:
                    19:97:d8:cc:32:9e:3d:be:fe:7a:47:4f:ff:9b:23:
                    b4:1e:f3:88:be:60:81:1c:00:bb:b9:9b:34:8e:26:
                    bc:31:6d:c9:fe:a0:81:2e:d5:dc:39:40:70:8a:5c:
                    0b:e8:02:08:10:0e:69:5d:08:b3:63:ab:df:06:ec:
                    32:05:e0:e0:7d:86:4e:c1:8f:4d:13:a3:d3:83:b7:
                    cb:07:7b:ce:19:e1:f5:5d:41:96:a8:f4:ec:4e:c8:
                    3c:9f:41:4f:39:8a:4c:c9:c6:87:47:cb:dd:dc:e4:
                    58:99:b5:ab:21:fe:ba:88:5c:f2:40:b0:80:d8:c7:
                    78:f8:1d:65:cf:ba:de:8c:61:ea:62:c1:f5:15:dc:
                    1b:fc:69:0c:ac:ff:06:00:ae:e4:77:7f:dd:56:40:
                    7b:a3:57:36:86:af:20:14:51:d9:39:fc:d0:2e:ff:
                    77:4b:42:66:ae:fb:56:48:26:98:03:95:4f:c3:ac:
                    d7:ee:33:1f:56:44:ed:f3:bd:47:99:b6:bf:c0:44:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:FE:3F:65:F6:40:E2:00:53:5B:4C:71:1E:47:0A:F5:63:A2:E3
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:9b:3c:d1:84:61:29:c9:c9:1a:ca:58:3f:84:81:ef:32:a4:
         9e:09:8d:fa:c4:89:1a:55:ea:ad:93:63:65:3c:d3:2c:08:84:
         17:71:39:ad:0e:32:54:92:18:f4:df:1e:99:e5:ba:8e:25:0c:
         20:8e:5a:b5:0b:3e:08:b8:3a:42:e9:e2:7d:11:60:52:3d:f9:
         8c:3f:99:cf:47:c2:3a:00:45:f2:2a:3e:94:5b:75:91:88:f8:
         09:09:de:45:0e:65:82:8e:f5:71:ad:ca:a2:3d:a2:8b:c2:59:
         5a:09:42:b5:be:90:dc:ac:95:f3:32:93:e6:2f:04:13:fc:9a:
         c5:5f:64:d3:04:3a:bc:12:05:24:a8:e2:82:df:d5:a9:9f:bb:
         19:75:a6:49:40:13:96:9c:29:68:da:be:2d:91:d8:92:b7:a7:
         23:9e:f1:5d:48:cc:b3:29:54:63:f3:f5:ab:72:3c:92:b1:a2:
         3d:b3:35:3e:cd:8a:3b:7c:1f:35:f5:06:2e:c1:71:f4:8b:f8:
         5e:86:f8:e8:54:0a:9f:d6:04:02:eb:e8:01:87:dd:1a:e5:fb:
         6d:f6:e2:70:4e:a9:6e:2e:29:92:a4:88:17:c2:18:1d:c7:de:
         6f:40:b9:18:6a:74:68:cd:62:70:36:56:62:6a:2f:f5:a5:8e:
         e0:18:6e:b9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTI5RURBRjExMC8GA1UEBRMoMkEzQ0M5RTU1MTlBNUE1QkIxM0QwODMxMENBOTM0
ODI0ODk2RkE1QTAeFw0yNTEwMjAwMjQ4MzRaFw0yNTEwMjIwMjQ4MzRaMBgxFjAU
BgNVBAMTDTY4ZjVhMzAzLWE1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTGsNiGFD99XEdXfmtCi/IVNy4fGDPi0M2IViLB+slaQ98/OVUx3F7plKr
jjEtvcU3Nec/B33kKqQn0BmX2Mwynj2+/npHT/+bI7Qe84i+YIEcALu5mzSOJrwx
bcn+oIEu1dw5QHCKXAvoAggQDmldCLNjq98G7DIF4OB9hk7Bj00To9ODt8sHe84Z
4fVdQZao9OxOyDyfQU85ikzJxodHy93c5FiZtash/rqIXPJAsIDYx3j4HWXPut6M
YepiwfUV3Bv8aQys/wYAruR3f91WQHujVzaGryAUUdk5/NAu/3dLQmau+1ZIJpgD
lU/DrNfuMx9WRO3zvUeZtr/ARPH5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUn/L+
P2X2QOIAU1tMcR5HCvVjouMwHwYDVR0jBBgwFoAUKjzJ5VGaWluxPQgxDKk0gkiW
+lowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyOUVELzFDNUI1RDAyREMwOTExRUM5Q0VCREU5QkYxMjIyNDY4L0tqeko1
VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tqeko1VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTI5RUQvMUM1QjVEMDJEQzA5MTFFQzlDRUJERTlCRjEy
MjI0NjgvS2p6SjVWR2FXbHV4UFFneERLazBna2lXLWxvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDOmzzRhGEpyckaylg/hIHvMqSeCY36
xIkaVeqtk2NlPNMsCIQXcTmtDjJUkhj03x6Z5bqOJQwgjlq1Cz4IuDpC6eJ9EWBS
PfmMP5nPR8I6AEXyKj6UW3WRiPgJCd5FDmWCjvVxrcqiPaKLwllaCUK1vpDcrJXz
MpPmLwQT/JrFX2TTBDq8EgUkqOKC39Wpn7sZdaZJQBOWnClo2r4tkdiSt6cjnvFd
SMyzKVRj8/WrcjySsaI9szU+zYo7fB819QYuwXH0i/hehvjoVAqf1gQC6+gBh90a
5ftt9uJwTqluLimSpIgXwhgdx95vQLkYanRozWJwNlZiai/1pY7gGG65
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:57 2025 by rpki-client