Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
File:                     Peh56gnhe4ORxyjbem-nsnOQS3o.mft (raw, json)
Hash identifier:          l1j0y0PPiJ5i+z9ik3EID6AJHvK9vYoHJZ8HW2aDGQc=
Subject key identifier:   AD:CC:8C:4D:70:63:6B:A2:49:63:87:17:B6:2D:6E:1D:9D:A6:74:8A
Authority key identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
Certificate issuer:       /CN=F36E6D28AF/serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
Certificate serial:       063A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
Manifest number:          0639
Signing time:             Mon 20 Oct 2025 02:19:21 +0000
Manifest this update:     Mon 20 Oct 2025 02:19:20 +0000
Manifest next update:     Wed 22 Oct 2025 02:19:20 +0000
Files and hashes:         1: Peh56gnhe4ORxyjbem-nsnOQS3o.crl (hash: NEsSe7sKHc7EzbXx0fxzpddAF5rULaE8Q987NFOVFyQ=)
                          2: 4CA13A74EA1D11EBAEB1FE0BD8A014CE.roa (hash: sIG4V1gL0C8GEyce4Zp/c68CcXuUBRgl5avwx6jTy/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6D28AF, serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
        Validity
            Not Before: Oct 20 02:19:20 2025 GMT
            Not After : Oct 22 02:19:20 2025 GMT
        Subject: CN=68f59c29-7319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:1c:5a:68:f6:d8:3d:c2:b5:63:2d:12:65:
                    86:61:bc:47:b9:ea:f4:4b:47:02:98:9c:69:2b:20:
                    04:a3:0a:dd:07:7c:06:1d:3c:24:4d:8a:4d:8e:43:
                    ba:a6:60:b0:02:1c:c1:7b:c8:aa:ac:47:85:5a:bf:
                    7b:82:bb:f4:75:23:35:01:bb:d2:04:22:69:2f:4b:
                    7e:e8:f5:53:38:f6:f6:ac:22:7d:2e:6f:a2:18:4d:
                    86:aa:ed:cf:18:8a:a2:6b:95:0b:da:79:1f:e7:c7:
                    3e:a4:f8:96:90:b3:98:1a:e3:58:a3:71:64:e5:2f:
                    7e:a0:3a:ab:14:ab:10:98:8e:f4:ce:94:1b:b2:f4:
                    d3:50:b3:08:bc:5d:7f:c7:a7:c6:6b:50:e3:14:bf:
                    e8:aa:0c:c6:80:e1:9a:9e:fb:48:db:06:9e:13:e1:
                    7c:09:f4:94:7d:cf:ed:16:ad:51:fa:64:00:15:ff:
                    db:62:59:45:76:a6:5d:95:44:94:7c:e0:74:a7:13:
                    aa:03:32:8f:6b:14:58:72:08:1a:ad:c7:4d:81:61:
                    70:de:2c:4f:6e:2a:1c:ae:b6:ee:0e:5c:5f:fd:3f:
                    bb:d6:b8:fc:0c:71:1e:a4:70:ba:8f:ce:f2:0b:fc:
                    bb:60:05:d9:0f:75:d5:42:73:e7:26:34:9f:40:fe:
                    06:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CC:8C:4D:70:63:6B:A2:49:63:87:17:B6:2D:6E:1D:9D:A6:74:8A
            X509v3 Authority Key Identifier:
                keyid:3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:0b:06:0f:ce:2c:46:fd:16:cb:d1:d8:69:b6:70:3d:3b:
         a5:1b:24:e4:1f:11:9e:74:02:6b:c6:b9:30:8a:1c:f2:3b:b3:
         1f:8c:68:e8:21:c5:07:0b:2d:ff:56:04:71:f5:35:2a:c3:78:
         63:fe:80:3a:ad:a9:56:ad:a2:29:b4:5d:8d:f0:ee:90:9b:6f:
         1b:25:2d:82:91:57:f7:fb:e3:68:06:b8:f3:ed:80:31:e9:44:
         c8:e8:da:70:0d:9a:a9:52:e4:a2:6d:7d:5b:14:05:bf:34:a9:
         6a:68:d0:3f:c1:7c:66:58:92:8d:47:8a:db:d4:46:25:70:04:
         56:70:73:82:dd:33:19:f8:11:35:8e:3c:6c:8b:a5:1b:70:11:
         42:a1:e6:42:59:eb:c5:6f:f9:06:cf:6e:69:2f:8d:be:7c:0e:
         97:e6:f2:87:7c:48:79:3f:c2:6c:c9:dc:69:7a:6c:65:e6:5c:
         0d:66:44:74:a2:5b:c7:12:28:dc:1e:17:3c:cd:ab:cf:c0:8b:
         2b:90:4f:94:8c:bd:9e:7c:38:1b:a7:94:05:f0:fc:ae:d7:cf:
         66:2e:de:93:bc:59:7c:19:67:6d:20:0e:36:12:ef:b2:9e:ba:
         1b:d6:da:b5:1b:76:76:1b:f3:18:0f:8f:62:45:44:77:5f:ce:
         cf:74:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:03 2025 by rpki-client