Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
File:                     NzwYJ-JwTD_cFqh4mA-tyINfpII.mft (raw, json)
Hash identifier:          rA6v8XoUV1NbX22VmvVK60mey69T/+RoIQ/V3DecMiw=
Subject key identifier:   DA:B3:02:08:E9:5B:A9:33:17:6D:2A:33:3A:91:BD:40:07:55:61:3E
Authority key identifier: 37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82
Certificate issuer:       /CN=F36EB6AEAF/serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
Certificate serial:       080D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
Manifest number:          080B
Signing time:             Mon 20 Oct 2025 01:47:54 +0000
Manifest this update:     Mon 20 Oct 2025 01:47:53 +0000
Manifest next update:     Wed 22 Oct 2025 01:47:53 +0000
Files and hashes:         1: NzwYJ-JwTD_cFqh4mA-tyINfpII.crl (hash: 7he7r8EHGnEKsns7cmuRLsflQJnDw355AK35kdY6LRM=)
                          2: 194DF7D868FB11EFB7429B90762E951A.roa (hash: NFQt82rMb7NWbYXB4Ts4sK7O+uFyIpzTw3E2kXEqFmc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EB6AEAF, serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
        Validity
            Not Before: Oct 20 01:47:53 2025 GMT
            Not After : Oct 22 01:47:53 2025 GMT
        Subject: CN=68f594ca-41e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:a4:7e:70:c9:7d:04:9f:90:e1:95:6f:03:
                    b6:fc:0d:0a:35:81:ae:b1:66:32:97:04:76:7e:1b:
                    d6:70:23:06:65:ce:a6:a6:a7:9e:9d:9d:81:f2:1c:
                    5a:76:2c:76:fc:3c:3c:3e:6a:b3:dd:c1:84:06:42:
                    08:6b:6c:39:00:52:16:c6:de:6e:fa:85:bb:b8:7f:
                    bc:bc:c2:03:e9:69:fb:68:4c:cd:a5:c9:4b:46:04:
                    5e:9a:6d:94:89:a8:c8:84:ea:ed:df:4c:5f:3e:35:
                    97:d1:4c:65:6a:62:c0:f6:48:dd:94:74:84:55:6b:
                    23:43:72:8d:5d:e4:1d:a4:d7:93:5e:2d:85:e8:3b:
                    45:7a:46:60:64:a7:0c:a4:ca:1f:cc:37:1e:3b:d6:
                    51:e5:be:d5:d1:14:df:1f:a2:84:0e:99:1e:ad:be:
                    03:72:46:32:22:60:bc:22:32:5f:13:c9:ea:79:e5:
                    d5:cd:ed:27:29:0f:c3:3f:71:78:b6:68:00:07:bd:
                    8b:24:38:cf:1c:69:2c:00:4f:82:33:ac:14:be:7b:
                    86:3c:4e:eb:1c:33:b2:2a:f6:65:e6:fe:2e:36:81:
                    e7:01:99:e7:b5:98:cd:3c:cd:dd:6f:bd:23:ce:e7:
                    d8:99:00:e0:fc:a7:5b:56:d1:e3:e9:54:c8:ae:75:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B3:02:08:E9:5B:A9:33:17:6D:2A:33:3A:91:BD:40:07:55:61:3E
            X509v3 Authority Key Identifier:
                keyid:37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:7f:a3:d1:63:c2:3f:be:61:b4:51:ad:ef:8a:ec:a1:c7:
         b3:c5:88:e6:8f:38:e0:d3:35:cc:d3:e1:38:44:54:0a:4c:03:
         aa:d2:3e:53:8c:61:9c:57:f8:af:f4:d8:59:01:ec:9b:ae:08:
         7e:13:ad:c5:da:64:b1:a1:cd:47:4a:65:6c:f3:cd:f4:6f:4f:
         f0:56:62:99:7b:79:52:24:9c:90:d2:36:6a:b1:a4:45:dc:93:
         1b:3d:12:55:84:0f:3d:cc:6c:9f:a8:64:e2:fe:68:31:b0:4e:
         9d:b1:42:23:b6:c3:be:5f:0a:03:0f:81:7b:0f:a3:65:d9:e1:
         55:34:91:f7:79:78:d8:37:13:ce:24:4c:d1:20:57:07:4c:ff:
         e7:85:3e:2b:b2:c3:08:38:eb:3b:37:77:a5:8d:29:12:18:4e:
         5f:e5:e9:67:65:d7:ad:a7:47:2a:a5:47:2a:aa:ec:85:ac:8c:
         9b:04:26:06:61:ce:42:d2:c6:34:f3:7b:ae:ba:f6:6f:83:b9:
         8c:48:bb:b4:44:49:a0:81:34:61:f2:f1:ec:92:bc:01:e0:b3:
         f0:f1:84:20:a2:27:60:33:98:47:1a:db:6c:b3:76:54:1e:7b:
         ba:a9:2d:97:b5:00:f3:cc:81:8c:9d:85:82:d1:03:cf:b3:b0:
         f2:d7:8c:27
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUI2QUVBRjExMC8GA1UEBRMoMzczQzE4MjdFMjcwNEMzRkRDMTZBODc4OTgwRkFE
Qzg4MzVGQTQ4MjAeFw0yNTEwMjAwMTQ3NTNaFw0yNTEwMjIwMTQ3NTNaMBgxFjAU
BgNVBAMTDTY4ZjU5NGNhLTQxZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC95qR+cMl9BJ+Q4ZVvA7b8DQo1ga6xZjKXBHZ+G9ZwIwZlzqamp56dnYHy
HFp2LHb8PDw+arPdwYQGQghrbDkAUhbG3m76hbu4f7y8wgPpaftoTM2lyUtGBF6a
bZSJqMiE6u3fTF8+NZfRTGVqYsD2SN2UdIRVayNDco1d5B2k15NeLYXoO0V6RmBk
pwykyh/MNx471lHlvtXRFN8fooQOmR6tvgNyRjIiYLwiMl8Tyep55dXN7ScpD8M/
cXi2aAAHvYskOM8caSwAT4IzrBS+e4Y8TuscM7Iq9mXm/i42gecBmee1mM08zd1v
vSPO59iZAOD8p1tW0ePpVMiudRO7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2rMC
COlbqTMXbSozOpG9QAdVYT4wHwYDVR0jBBgwFoAUNzwYJ+JwTD/cFqh4mA+tyINf
pIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCNkFFLzM4MTI4OUIyODNEQzExRUE5NkQzQ0M0RUY4QUVBMjI4L056d1lK
LUp3VERfY0ZxaDRtQS10eUlOZnBJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL056d1lKLUp3VERfY0ZxaDRtQS10eUlOZnBJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUI2QUUvMzgxMjg5QjI4M0RDMTFFQTk2RDNDQzRFRjhB
RUEyMjgvTnp3WUotSndURF9jRnFoNG1BLXR5SU5mcElJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8dn+j0WPCP75htFGt74rsocezxYjm
jzjg0zXM0+E4RFQKTAOq0j5TjGGcV/iv9NhZAeybrgh+E63F2mSxoc1HSmVs8830
b0/wVmKZe3lSJJyQ0jZqsaRF3JMbPRJVhA89zGyfqGTi/mgxsE6dsUIjtsO+XwoD
D4F7D6Nl2eFVNJH3eXjYNxPOJEzRIFcHTP/nhT4rssMIOOs7N3eljSkSGE5f5eln
Zdetp0cqpUcqquyFrIybBCYGYc5C0sY083uuuvZvg7mMSLu0REmggTRh8vHskrwB
4LPw8YQgoidgM5hHGttss3ZUHnu6qS2XtQDzzIGMnYWC0QPPs7Dy14wn
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:05 2025 by rpki-client