Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
File:                     -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft (raw, json)
Hash identifier:          BxXyJX8Ztk9wCMZBcZO4NY+q2E15z2orLJSc1pshLaQ=
Subject key identifier:   21:2C:E5:AA:A8:75:6A:0C:86:B9:7A:8C:CD:C2:3B:E7:6F:12:2F:28
Authority key identifier: F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF
Certificate issuer:       /CN=F36EA516AF/serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
Certificate serial:       C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
Manifest number:          C6
Signing time:             Mon 20 Oct 2025 04:59:15 +0000
Manifest this update:     Mon 20 Oct 2025 04:59:14 +0000
Manifest next update:     Wed 22 Oct 2025 04:59:14 +0000
Files and hashes:         1: -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl (hash: pyl0k/CKj6fxyCfGCXmlM4KBdGNCSIUaTUKsxTgK5J0=)
                          2: 046CE482147711F0B01A890E6EB8BCC6.roa (hash: 1Ni3jdhyCUqGSNwJUD1MnDgs72urkU8YdE/yCBxVta0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EA516AF, serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
        Validity
            Not Before: Oct 20 04:59:14 2025 GMT
            Not After : Oct 22 04:59:14 2025 GMT
        Subject: CN=68f5c1a3-2a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7e:cf:73:f3:da:48:2f:13:c1:49:4e:1b:16:
                    04:16:10:2c:65:a2:35:4b:1c:65:e7:2b:c6:9a:fc:
                    64:4f:a6:9a:df:d7:e3:65:cf:0c:64:aa:80:0b:ca:
                    d3:ec:00:c6:36:cd:6c:99:31:4f:be:bc:8c:da:ef:
                    ae:65:67:3f:4a:30:ca:07:2c:ea:d9:08:3c:6e:f9:
                    c3:24:72:78:93:0b:d7:ae:57:7b:68:3f:4e:7b:b6:
                    f5:69:92:43:13:cc:4a:02:8d:1a:a5:c4:f0:b6:06:
                    3c:fd:19:21:3f:dd:72:b6:04:c6:1c:d8:f5:b3:28:
                    2c:e7:99:3d:6b:99:63:9a:2e:0d:ac:1a:0d:42:09:
                    b6:c7:6b:35:7b:b4:8f:f6:64:f7:94:f1:61:e8:3b:
                    4d:bd:0b:06:ec:d9:e7:47:f7:43:9e:56:73:e2:0d:
                    4d:c1:07:4f:48:21:d3:d2:80:69:63:8d:ae:b9:25:
                    47:b9:ed:8c:87:1b:26:94:ba:1e:8d:87:07:68:3e:
                    e7:3a:eb:c7:10:b5:58:a6:9a:37:4d:48:14:aa:5c:
                    d3:fe:1f:cd:dc:6b:5d:62:fa:78:b3:f7:d8:5a:06:
                    3b:e4:c5:5d:e4:9a:66:93:c9:cf:e9:d6:be:df:75:
                    c4:2c:34:97:a0:3d:cd:55:d5:d6:28:05:c4:69:98:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2C:E5:AA:A8:75:6A:0C:86:B9:7A:8C:CD:C2:3B:E7:6F:12:2F:28
            X509v3 Authority Key Identifier:
                keyid:F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:39:64:b9:d9:0b:45:0c:8a:e8:51:e9:d4:a7:17:e5:3f:6d:
         e5:74:ed:ec:bc:c5:44:a5:14:78:03:59:fd:87:f9:b4:43:78:
         54:22:60:28:b9:e7:d7:62:83:92:70:df:89:75:4a:e9:bc:89:
         76:c1:7d:cc:05:c0:05:7f:8a:b2:df:f9:8f:5a:41:2f:a9:44:
         5d:b0:92:68:b1:52:b3:06:9d:f8:fa:8d:b6:7e:7e:ea:85:72:
         92:2e:a8:34:46:dd:ef:1d:b2:2a:de:fa:e9:d5:5c:ee:84:21:
         5a:35:d0:22:cf:35:c8:ae:45:b3:5d:e0:f1:02:29:8a:7e:4e:
         99:28:24:3b:5b:f1:77:86:a7:6e:7f:99:92:77:03:48:ee:a8:
         8f:64:30:58:cb:3e:d2:c6:df:9e:d2:b0:de:d8:61:6e:b2:db:
         9d:b4:3c:17:53:15:57:14:9e:13:50:ab:82:2a:cc:22:a9:2e:
         2e:0e:fb:17:fb:ad:ab:36:30:44:10:4f:10:f9:c0:c3:c2:51:
         ff:b2:f9:a1:a5:1d:6b:0f:5d:42:2f:ba:d7:69:d7:a4:2b:f6:
         c7:30:18:7f:96:f9:56:31:ee:dd:14:ee:e8:17:cf:38:12:55:
         df:93:3f:11:35:27:50:61:b8:fe:c2:d2:8d:0e:50:70:e4:68:
         2f:af:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:40 2025 by rpki-client