Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
File:                     RL5M5X4RXgvLNOa56wxXI669InQ.mft (raw, json)
Hash identifier:          T391raAkD6xzM2TAyvANFuToy58wtXXsx2seDbmGLYs=
Subject key identifier:   B9:56:F8:A6:1E:9E:24:5C:38:8F:F2:54:5B:72:43:6F:D8:D9:38:04
Authority key identifier: 44:BE:4C:E5:7E:11:5E:0B:CB:34:E6:B9:EB:0C:57:23:AE:BD:22:74
Certificate issuer:       /CN=F36ED057AF/serialNumber=44BE4CE57E115E0BCB34E6B9EB0C5723AEBD2274
Certificate serial:       095A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
Manifest number:          0958
Signing time:             Mon 20 Oct 2025 01:26:16 +0000
Manifest this update:     Mon 20 Oct 2025 01:26:15 +0000
Manifest next update:     Wed 22 Oct 2025 01:26:15 +0000
Files and hashes:         1: RL5M5X4RXgvLNOa56wxXI669InQ.crl (hash: frnp/We4TVFjODSm+R9RaniSZHg0e/xSxGghAE+2/EA=)
                          2: C96F4D9CC3F211ED8B3F1BD0F1222468.roa (hash: o7cW1+3HMZb5Mpe6+lzxsb3ID9BGRwC3rWFdxd+zpDk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394 (0x95a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED057AF, serialNumber=44BE4CE57E115E0BCB34E6B9EB0C5723AEBD2274
        Validity
            Not Before: Oct 20 01:26:15 2025 GMT
            Not After : Oct 22 01:26:15 2025 GMT
        Subject: CN=68f58fb8-0c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3e:ea:59:ec:dd:31:8d:8e:42:86:f5:b1:7d:
                    0b:69:b3:f8:05:2d:1f:55:d0:85:cc:ca:2f:8f:3f:
                    0b:92:8c:c3:86:c9:3f:cc:81:65:27:78:96:0d:3d:
                    6a:d4:08:7b:ed:79:15:88:45:8d:54:4f:5c:3f:6b:
                    af:29:6b:c9:04:76:ad:7f:67:36:2d:86:c5:12:83:
                    30:58:7d:f6:c7:36:f8:c6:f5:6d:e3:bb:0e:1d:df:
                    8a:8b:e8:f4:ab:ca:3a:c1:6c:7f:f9:41:82:e4:c7:
                    4d:0d:e7:13:79:df:64:5e:71:cf:c0:de:2b:97:8f:
                    77:11:30:1d:bd:c2:a9:2e:29:ce:92:b9:36:49:00:
                    8d:33:01:d7:a7:25:62:6d:ed:e6:89:bd:f8:2d:5b:
                    c8:8f:e8:3f:59:81:44:20:33:80:72:fa:06:1d:f3:
                    81:00:e4:b8:8d:b6:ea:f2:1b:5d:fd:b2:9f:1c:a6:
                    bc:d7:95:61:69:55:7d:e8:c1:54:41:e6:41:64:6a:
                    bb:e9:62:c3:3d:9a:72:de:8a:0e:dc:50:11:d1:08:
                    6b:97:a8:f1:b1:cd:32:ff:6e:de:e0:be:b5:d8:09:
                    23:6b:d6:cd:84:12:d1:f0:80:ae:b4:06:4c:77:38:
                    55:6b:f5:70:55:d0:05:f6:9f:bb:4f:ca:74:c1:1c:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:56:F8:A6:1E:9E:24:5C:38:8F:F2:54:5B:72:43:6F:D8:D9:38:04
            X509v3 Authority Key Identifier:
                keyid:44:BE:4C:E5:7E:11:5E:0B:CB:34:E6:B9:EB:0C:57:23:AE:BD:22:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:86:ef:13:fb:01:ea:31:2b:67:0d:40:83:27:85:3e:1b:ac:
         77:c5:c4:9d:94:b0:c4:8f:f2:65:61:96:53:87:5a:79:97:ca:
         f9:09:b2:e0:9f:5c:01:1b:c9:89:b0:a3:39:3f:0f:9e:60:da:
         f4:55:72:bf:67:88:3a:7e:66:77:54:5e:16:96:3a:c1:87:95:
         37:7b:a9:06:d4:c0:e0:de:c0:bb:e9:29:c8:bd:2c:b3:3b:55:
         7f:22:79:1f:35:95:26:32:8d:91:ad:b3:95:7a:20:83:fe:9b:
         b5:0b:b3:6d:27:6a:58:cb:31:7b:ce:c5:d2:e7:e3:a5:26:20:
         68:9a:1c:3b:4b:2b:c5:0b:24:46:3b:e9:3e:4d:00:53:83:e1:
         9a:b3:33:45:c3:37:56:73:72:d8:a0:03:fb:db:51:60:b8:8c:
         27:a4:d1:27:dc:ae:61:95:32:fd:be:50:f6:61:7a:cc:56:f1:
         23:d0:b9:c3:e3:c0:c9:48:39:18:0a:e2:38:9e:5b:55:23:d1:
         2c:20:13:9c:d8:75:ab:08:60:d1:dc:a3:51:f0:b4:7f:1e:19:
         b3:5f:55:fa:5a:68:76:57:f1:e3:b8:52:32:fe:70:18:06:2d:
         47:5d:c7:e6:bb:b3:2e:e7:fe:ba:12:c4:25:bb:13:eb:8d:7a:
         d9:b4:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:06 2025 by rpki-client