Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File:                     iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier:          febyMADKkXHcTgKlQ5m/oph3ChkLUQw3Dvg2VIB++KQ=
Subject key identifier:   67:0E:5C:4D:7A:FC:D8:EE:CD:CA:56:0E:4D:0D:71:03:56:21:42:89
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer:       /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial:       32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number:          32
Signing time:             Mon 20 Oct 2025 05:17:00 +0000
Manifest this update:     Mon 20 Oct 2025 05:16:59 +0000
Manifest next update:     Wed 22 Oct 2025 05:16:59 +0000
Files and hashes:         1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: IRBtG4KXIOQC+ouyojQ243JimTlr9GWZXho41gHzBo4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
        Validity
            Not Before: Oct 20 05:16:59 2025 GMT
            Not After : Oct 22 05:16:59 2025 GMT
        Subject: CN=68f5c5cc-0338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:c1:db:e5:e4:c2:4c:05:d7:26:a4:f8:f0:
                    d6:d3:13:7e:c5:cb:34:c2:64:c5:ac:0b:9e:f6:8c:
                    9d:2d:b7:d4:87:85:32:60:7b:6b:e1:67:28:df:39:
                    52:78:fe:e1:1c:ee:ad:84:b0:bd:04:af:48:af:15:
                    3b:27:b9:5d:09:7e:63:6d:b5:0e:ef:ba:3c:46:28:
                    d9:0d:17:dd:ae:d7:7a:ad:6e:32:87:73:f0:91:2e:
                    5b:e6:ce:08:0d:81:b8:33:fc:1a:d8:ab:38:2a:50:
                    57:26:cd:78:a0:27:f0:77:67:7e:5c:9b:d6:c4:8b:
                    d0:72:ab:9a:72:c0:78:a3:4f:2a:5e:0d:6e:f6:ec:
                    69:ed:3f:c7:19:13:91:d3:23:10:7d:c4:18:2e:7b:
                    bc:cd:40:9d:31:a8:90:32:15:66:da:fd:48:96:16:
                    0b:f5:9f:23:bf:07:3f:f8:70:b1:89:ab:ca:b7:66:
                    cd:c9:05:fd:88:04:0f:36:d9:1a:60:97:dc:58:c2:
                    7d:ca:eb:12:19:1b:6d:e9:ec:8c:02:8e:dc:5f:cc:
                    0f:43:29:30:4f:54:1b:59:da:c7:b0:f3:d5:20:6d:
                    7f:00:a9:4f:43:d7:17:b9:dd:21:41:8e:6d:df:a7:
                    3d:fb:1a:e4:55:6e:49:77:7b:fc:18:06:3e:4e:c4:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:5C:4D:7A:FC:D8:EE:CD:CA:56:0E:4D:0D:71:03:56:21:42:89
            X509v3 Authority Key Identifier:
                keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6e:7f:bd:65:0f:9b:e8:0f:81:8f:ae:3b:e3:dd:73:a6:62:
         74:7d:17:c6:39:14:12:c9:fc:0d:3b:39:e4:73:c8:59:d2:31:
         29:d7:9f:c3:fc:4a:a6:80:de:7e:d3:06:cd:cd:e5:4d:9c:5c:
         e6:1f:d7:59:72:bf:d7:4f:c9:ed:a1:81:4b:11:60:c2:e5:be:
         fb:d4:75:38:82:d4:95:ba:24:b8:ac:24:65:7e:24:16:ad:d4:
         33:a8:b1:c8:7b:5b:55:ae:8b:4f:4b:60:02:fe:47:5d:c2:04:
         aa:84:00:9c:36:c0:e1:e5:98:ac:a0:d9:00:e8:a9:48:1f:6d:
         c3:a9:c8:fe:c9:21:49:be:72:0e:c5:7a:53:13:d4:8d:e2:04:
         78:18:b0:e3:32:56:3e:88:ec:09:d6:26:cd:69:b9:e9:e8:91:
         8f:f7:ce:9f:c2:d5:82:b1:52:ab:8c:39:93:ed:37:b8:81:06:
         65:c1:2a:be:bf:d4:65:09:be:65:19:90:7d:5c:bc:64:c3:2d:
         49:4e:06:47:f0:07:b4:cf:e1:c7:62:86:be:85:bf:01:16:42:
         fe:a0:76:bb:26:79:a2:53:55:dc:3c:03:f4:eb:1f:ee:56:ab:
         8b:a0:33:bf:d5:0a:bd:31:2c:68:d0:29:6f:e4:8e:9f:85:db:
         6a:29:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:26 2025 by rpki-client