Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          bEyNnYGu2YT3rec7Xg237DITYfbFY4zBaE45gYHnLT4=
Subject key identifier:   66:7D:27:58:BE:64:7D:53:AB:B1:AC:E1:9C:EF:ED:4C:1D:EA:46:D3
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       0632
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          0630
Signing time:             Sun 19 Oct 2025 02:20:41 +0000
Manifest this update:     Sun 19 Oct 2025 02:20:40 +0000
Manifest next update:     Tue 21 Oct 2025 02:20:40 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: hww1CBUKguU/GKP+FP0Up04yeSagfcCw3T1o84emCY0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 02:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Oct 19 02:20:40 2025 GMT
            Not After : Oct 21 02:20:40 2025 GMT
        Subject: CN=68f44af9-7f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:17:a2:07:38:a8:b7:7d:ed:f1:fb:ae:3d:
                    c8:6f:23:91:20:48:d9:14:7c:2c:26:5e:d2:1e:a4:
                    87:4a:d6:c1:c7:ee:63:5a:74:80:97:69:fb:e3:0c:
                    c6:e6:dd:c0:a1:fc:fa:5d:38:b1:cc:fe:b7:3b:23:
                    bb:40:23:dc:ba:b2:3c:22:45:3d:00:ff:00:c0:21:
                    70:dd:13:45:1f:05:b2:2c:95:16:a0:88:75:75:89:
                    bd:89:5e:47:55:7b:f6:66:a7:72:9e:b3:ab:8a:48:
                    7e:57:24:a5:dc:d8:ac:74:d0:57:75:5f:83:e1:f2:
                    93:4d:65:6f:06:29:9c:99:d1:c5:f6:4b:8d:67:f3:
                    5f:ca:bb:c1:82:d8:c0:bf:25:8c:52:84:7f:3b:ca:
                    01:fb:09:5a:47:83:f2:8a:64:da:bd:89:2d:ef:99:
                    53:cb:15:12:5b:4d:c5:0e:3f:4f:14:69:c1:e8:6b:
                    a2:60:31:e2:4f:d4:96:8d:46:74:ef:b0:73:17:34:
                    7b:23:13:67:9c:0b:8f:ea:d4:23:60:7d:4f:25:22:
                    52:12:fc:9a:7c:b2:fe:76:8f:7b:89:e5:f6:a3:17:
                    f4:b5:fa:ba:85:3f:30:fd:e6:4a:07:53:b9:d9:29:
                    68:07:83:7f:ab:4e:bf:25:fc:dd:2e:9e:50:7f:db:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7D:27:58:BE:64:7D:53:AB:B1:AC:E1:9C:EF:ED:4C:1D:EA:46:D3
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:b4:f4:c8:0a:e6:29:7e:c7:fa:fe:11:2b:f9:fc:d5:dc:
         fc:3a:cf:91:b6:e0:24:d1:78:5e:b6:99:4f:39:6c:87:b4:6c:
         46:1a:ce:04:24:55:f6:4f:29:09:1e:9d:be:b6:1a:2e:34:7c:
         4b:d6:8b:1b:4d:84:78:8a:e7:72:d4:66:9f:d9:50:57:48:da:
         14:2b:c7:96:a9:43:36:26:9a:f2:75:da:4f:2b:fd:23:47:3c:
         69:4d:b1:43:f5:bd:a3:21:a1:f2:30:75:63:d1:b1:99:57:63:
         68:3c:92:50:62:85:d5:30:a5:11:5b:ff:de:8f:0f:03:b7:60:
         ac:e6:cb:03:2d:7c:ae:2e:86:b6:3c:2f:3c:92:e6:86:0a:3e:
         93:59:72:6a:a1:3b:87:1e:be:90:d7:13:34:3e:47:df:56:9a:
         bb:97:e4:87:66:29:f9:35:b1:20:d5:a6:a9:68:3e:f3:06:33:
         73:12:08:84:49:22:4e:a0:22:46:77:4f:67:d1:ff:7d:22:a9:
         ce:81:6b:e1:ea:f5:34:4c:cd:71:24:03:37:5e:75:0e:4b:5d:
         d0:39:84:75:ac:32:67:24:54:ca:65:4b:dc:af:d0:ed:43:47:
         28:ba:fc:a6:60:ec:b9:50:ed:fa:36:01:8a:00:81:94:ed:15:
         67:6d:b9:99
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTcwRjRBRjExMC8GA1UEBRMoQTk0MjNGQTRDMDAyNkQyRTREQTgyMTJEMTI4RDlE
MjcwN0U4MURDOTAeFw0yNTEwMTkwMjIwNDBaFw0yNTEwMjEwMjIwNDBaMBgxFjAU
BgNVBAMTDTY4ZjQ0YWY5LTdmNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8vReiBziot33t8fuuPchvI5EgSNkUfCwmXtIepIdK1sHH7mNadICXafvj
DMbm3cCh/PpdOLHM/rc7I7tAI9y6sjwiRT0A/wDAIXDdE0UfBbIslRagiHV1ib2J
XkdVe/Zmp3Kes6uKSH5XJKXc2Kx00Fd1X4Ph8pNNZW8GKZyZ0cX2S41n81/Ku8GC
2MC/JYxShH87ygH7CVpHg/KKZNq9iS3vmVPLFRJbTcUOP08UacHoa6JgMeJP1JaN
RnTvsHMXNHsjE2ecC4/q1CNgfU8lIlIS/Jp8sv52j3uJ5fajF/S1+rqFPzD95koH
U7nZKWgHg3+rTr8l/N0unlB/2x31AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZn0n
WL5kfVOrsazhnO/tTB3qRtMwHwYDVR0jBBgwFoAUqUI/pMACbS5NqCEtEo2dJwfo
HckwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU3MEY0LzY5NTY4NDE2RjA1OTExRUJBRjU2RjQzQkQ4QTAxNENFL3FVSV9w
TUFDYlM1TnFDRXRFbzJkSndmb0hjay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FVSV9wTUFDYlM1TnFDRXRFbzJkSndmb0hjay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTcwRjQvNjk1Njg0MTZGMDU5MTFFQkFGNTZGNDNCRDhB
MDE0Q0UvcVVJX3BNQUNiUzVOcUNFdEVvMmRKd2ZvSGNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwoLT0yArmKX7H+v4RK/n81dz8Os+R
tuAk0XhetplPOWyHtGxGGs4EJFX2TykJHp2+thouNHxL1osbTYR4iudy1Gaf2VBX
SNoUK8eWqUM2JpryddpPK/0jRzxpTbFD9b2jIaHyMHVj0bGZV2NoPJJQYoXVMKUR
W//ejw8Dt2Cs5ssDLXyuLoa2PC88kuaGCj6TWXJqoTuHHr6Q1xM0PkffVpq7l+SH
Zin5NbEg1aapaD7zBjNzEgiESSJOoCJGd09n0f99IqnOgWvh6vU0TM1xJAM3XnUO
S13QOYR1rDJnJFTKZUvcr9DtQ0couvymYOy5UO36NgGKAIGU7RVnbbmZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:57:28 2025 by rpki-client