Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
File:                     9e2RvGqsS_b5N0e41TmTDZwMAis.mft (raw, json)
Hash identifier:          p8Z98kekQHIQBHyzwhN3oc9eUBd87wq4M78Jdy0blh8=
Subject key identifier:   7F:22:4F:29:17:50:D6:0A:DB:EF:36:8F:F9:F4:0D:33:BC:EA:55:E2
Authority key identifier: F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Certificate issuer:       /CN=F36E558EAF/serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
Manifest number:          2A
Signing time:             Sun 19 Oct 2025 05:15:22 +0000
Manifest this update:     Sun 19 Oct 2025 05:15:21 +0000
Manifest next update:     Tue 21 Oct 2025 05:15:21 +0000
Files and hashes:         1: 9e2RvGqsS_b5N0e41TmTDZwMAis.crl (hash: JoZFPeRtDvBCX5odiuN7xt95JF87qPuODAfeHgbZrqU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
        Validity
            Not Before: Oct 19 05:15:21 2025 GMT
            Not After : Oct 21 05:15:21 2025 GMT
        Subject: CN=68f473e9-7734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:bf:98:5b:48:b4:e1:a5:89:38:2d:a1:fd:
                    9a:75:36:00:ac:8f:3c:26:32:b8:2e:5c:30:eb:0b:
                    30:c6:3b:de:25:65:2c:76:c9:74:73:63:31:55:47:
                    41:75:11:40:4d:76:12:d1:ec:bf:67:25:a2:f8:7c:
                    76:2f:d2:d4:34:ec:d8:b2:f7:0e:d9:2a:a3:fa:71:
                    a5:66:7e:b9:c3:32:74:13:c0:a4:71:3b:f9:4e:93:
                    0e:5d:0a:5d:4b:34:15:7b:da:ac:9d:fe:cf:22:fa:
                    2f:a2:5e:a3:ac:8f:07:a2:8a:a8:d4:f7:86:9a:dc:
                    0a:55:72:da:43:bc:66:2c:19:3d:9a:3a:0a:1f:31:
                    4d:5f:d0:40:8a:92:bb:ea:43:1d:ce:00:72:27:c5:
                    99:7e:4e:d4:56:d6:ac:ee:ab:93:b5:b1:a8:d1:c1:
                    f6:d8:d1:4a:4d:34:96:82:bd:1f:69:cf:f7:13:76:
                    b3:12:3d:1d:13:52:2c:f4:1c:22:43:4a:d3:be:4a:
                    54:ac:dc:dd:6e:c4:1b:53:91:08:4f:eb:22:88:4d:
                    72:07:8b:46:46:75:a1:23:97:cf:2d:2d:38:52:bb:
                    89:ac:c0:4a:5d:ae:dc:76:70:a7:02:d9:60:9f:bf:
                    62:30:fa:24:36:c1:37:6a:da:f4:d3:24:67:03:a3:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:4F:29:17:50:D6:0A:DB:EF:36:8F:F9:F4:0D:33:BC:EA:55:E2
            X509v3 Authority Key Identifier:
                keyid:F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:e5:69:c4:3f:4e:2a:2a:b4:83:be:ab:3c:c6:64:4b:f1:
         6e:24:28:68:a2:d1:a8:81:3c:e6:41:30:e9:38:35:1a:e6:1b:
         de:59:bf:91:d4:28:a7:b4:44:b7:c2:21:e9:d7:f5:a4:41:e1:
         1c:4f:33:ec:18:c0:90:f2:fe:4d:a9:5f:e3:c0:2d:19:43:4f:
         10:c6:b9:43:70:1d:d8:f3:1c:c2:e7:28:f9:3e:71:cb:99:5b:
         c7:4b:e7:e1:06:a2:ca:1e:bb:6e:46:26:43:8e:11:ff:9e:8d:
         54:7b:d3:dd:f1:e3:db:aa:de:a9:95:ff:01:79:46:ac:1b:9e:
         ad:5f:98:88:be:04:a3:a6:13:a9:c6:36:4c:5f:b2:3c:b2:1b:
         94:1c:90:72:e6:81:75:f9:39:32:55:6d:ad:ca:7d:c1:3a:2e:
         25:9a:35:2e:05:08:5c:38:4d:57:2e:04:62:06:22:e9:92:12:
         de:83:bf:df:8d:47:fb:fd:34:a8:67:f2:f3:00:4d:e3:10:62:
         d4:d4:07:cb:36:de:ab:49:6b:44:38:be:bf:7c:e9:94:27:4a:
         8c:5c:84:af:77:96:25:10:81:54:4a:86:b8:a7:3a:c6:77:b9:
         43:4b:05:95:84:87:15:24:a4:5e:f9:5e:b2:7c:85:11:65:63:
         b7:45:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:55 2025 by rpki-client