Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
File:                     e5q4nC36bjo-yHXuV_4sDZpxQcA.mft (raw, json)
Hash identifier:          2Nlm5tgVgCqQSS/16uXtOstFVjCBuRv9vtRqG+OlizM=
Subject key identifier:   C3:DA:C8:BE:77:50:FD:85:08:B5:D1:F4:0A:96:79:C4:92:88:D8:72
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Certificate issuer:       /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial:       0206
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
Manifest number:          0205
Signing time:             Mon 20 Oct 2025 04:20:31 +0000
Manifest this update:     Mon 20 Oct 2025 04:20:30 +0000
Manifest next update:     Wed 22 Oct 2025 04:20:30 +0000
Files and hashes:         1: e5q4nC36bjo-yHXuV_4sDZpxQcA.crl (hash: r0gZO2gQR7eso24Ehqbmk0MAUBlCEZxnDX9udImo2Hc=)
                          2: 41B9BD06230F11EF89072D357DDC24C2.roa (hash: Vju6CP63vk7sWntfujwYKbfkTEsNT3KYrBm9nMWtFv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
        Validity
            Not Before: Oct 20 04:20:30 2025 GMT
            Not After : Oct 22 04:20:30 2025 GMT
        Subject: CN=68f5b88f-1534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:92:54:c1:da:ba:c6:46:2e:16:86:4c:12:
                    6f:aa:9a:53:21:f4:55:fd:a8:a8:0f:aa:e7:0d:56:
                    3f:de:71:4d:9f:41:ff:75:78:b7:7f:20:5f:f8:7a:
                    db:f4:61:83:cd:74:e9:0c:7b:a8:d1:02:41:a8:cf:
                    82:c5:73:f9:08:08:80:f3:41:9b:bc:f0:cb:f5:85:
                    29:8f:11:7b:22:88:59:b7:cb:b8:d0:df:d9:b0:0c:
                    9b:7b:76:29:01:68:1e:19:fa:c8:d9:f8:2a:58:c4:
                    06:0e:1a:36:bf:b6:cf:f8:7d:0e:28:b6:4f:61:d9:
                    6c:54:58:ee:54:0b:d8:4d:5e:46:31:f5:51:36:61:
                    f1:95:b7:7b:ef:cf:9a:21:a5:ec:2b:2c:97:5a:b7:
                    9f:49:d4:a6:2e:80:b1:ce:45:2c:3f:18:e2:30:c5:
                    b3:5b:8f:16:a1:62:b2:d9:4c:a5:94:e0:b9:5a:00:
                    21:69:3f:98:22:4d:cc:97:e0:f3:aa:b3:b5:63:fb:
                    83:91:7d:90:5c:c0:ce:a6:d9:ef:55:ba:41:95:72:
                    65:85:e0:ce:41:c0:38:7e:54:b4:4e:c0:c0:84:4c:
                    c0:ab:41:99:79:32:bd:21:ea:e0:d8:36:c6:d4:73:
                    9b:bf:a3:a3:aa:5e:0d:2d:08:71:ea:22:6e:3d:b4:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:C8:BE:77:50:FD:85:08:B5:D1:F4:0A:96:79:C4:92:88:D8:72
            X509v3 Authority Key Identifier:
                keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:86:cf:09:9f:fb:d6:c3:4b:be:e8:2c:69:9f:29:2d:3e:
         82:33:51:04:bc:a3:29:da:52:ce:c5:08:62:33:31:d5:a2:d6:
         91:a5:eb:84:07:6a:d9:05:f5:7d:2c:60:d9:46:3a:3f:c6:cb:
         0f:f9:15:39:86:03:17:aa:9b:5e:85:eb:a3:f5:03:f6:81:b0:
         08:25:b8:5f:30:39:b4:b1:a1:bf:ed:20:aa:57:6d:eb:92:3c:
         7e:20:58:60:a5:18:80:d8:0f:a6:1a:87:12:39:e7:bc:b2:a8:
         9d:78:8c:1b:76:9d:ca:c5:10:2e:c0:20:71:74:71:d8:6b:e3:
         ac:17:1f:f9:48:be:f0:bd:6d:bf:3e:e6:0b:bc:83:27:f4:bc:
         5c:e5:d9:e5:0a:2a:9f:32:20:ca:01:86:e5:15:1f:ca:88:34:
         4b:14:90:32:03:22:17:ed:63:a6:ec:09:42:b1:dd:85:4c:e3:
         bf:b4:40:b6:e2:91:ac:1b:93:4a:6b:d7:86:0a:97:d5:94:e4:
         ab:60:f2:58:04:d3:09:fb:1e:50:d5:d0:1a:28:88:17:cf:61:
         f8:1e:50:50:52:33:13:34:57:66:81:85:c1:44:23:50:9c:c4:
         84:e2:25:c8:5a:52:65:3c:aa:0e:99:71:0d:24:f3:94:24:ac:
         8e:e7:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:52 2025 by rpki-client