Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File:                     JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier:          MPK0ZCgwLA2emI0HE9/wZw1CUy+eCQVLko7w6CygfpM=
Subject key identifier:   A9:D7:38:BE:4C:09:71:84:1B:E9:25:85:A1:50:EC:0E:7E:C3:54:DB
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer:       /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial:       0285
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number:          0283
Signing time:             Mon 20 Oct 2025 04:07:39 +0000
Manifest this update:     Mon 20 Oct 2025 04:07:39 +0000
Manifest next update:     Wed 22 Oct 2025 04:07:39 +0000
Files and hashes:         1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: E99yGcyBZjS3aW28HECO+Ndz1nEPQ8XJNAZvD6RAIFo=)
                          2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
        Validity
            Not Before: Oct 20 04:07:39 2025 GMT
            Not After : Oct 22 04:07:39 2025 GMT
        Subject: CN=68f5b58b-485c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:88:05:6f:f1:2e:30:b6:65:7b:7f:fb:70:
                    39:09:02:fa:fc:53:08:95:99:ea:04:d6:87:3d:de:
                    61:d7:19:2c:4b:a2:38:61:8e:6d:de:72:98:79:5e:
                    b1:c6:43:5a:c4:8e:5a:2a:48:b6:5b:f1:9d:73:6a:
                    36:1a:ff:66:79:84:3b:bb:de:15:c0:4f:cd:d4:96:
                    7b:83:46:32:7f:d4:3c:58:18:5d:39:ee:9b:49:65:
                    63:f3:e2:0e:c6:11:d2:4f:e2:98:e4:56:fa:7d:cb:
                    c1:80:2a:54:50:15:2c:d3:ea:4f:a9:e6:83:e6:77:
                    bf:b6:23:9d:75:bd:1b:d0:bb:dd:e3:ef:e2:20:43:
                    ba:80:2d:92:26:41:c2:28:38:e0:8c:ee:57:ea:2b:
                    69:1c:fa:94:30:55:2c:26:aa:94:87:13:a2:e6:c7:
                    6f:7a:c7:7d:28:68:d6:97:96:ea:e7:26:54:a7:42:
                    e6:79:85:9f:dc:17:82:e0:f9:02:a7:4a:ad:56:22:
                    93:02:22:94:b8:a1:e7:54:37:f6:ec:78:9f:22:d0:
                    90:f1:0d:06:81:92:1b:44:bb:bd:74:63:13:ce:e5:
                    81:eb:c4:45:b2:32:37:8e:80:29:ed:64:c2:0d:09:
                    3d:19:0c:57:0d:dc:1e:42:1e:da:4b:50:a9:a7:ca:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D7:38:BE:4C:09:71:84:1B:E9:25:85:A1:50:EC:0E:7E:C3:54:DB
            X509v3 Authority Key Identifier:
                keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:68:62:a8:93:03:ac:7d:7c:98:71:f5:94:6b:20:b6:1c:31:
         67:82:ec:03:91:a9:6e:bd:4a:b6:e7:10:a1:f1:a7:ba:d7:85:
         58:95:85:08:1e:f3:88:5e:10:47:89:cb:ca:67:de:c2:df:23:
         84:17:fb:ce:68:31:db:b9:12:cb:09:ef:a1:90:e7:9c:d8:7e:
         fb:23:c8:48:48:3b:f3:26:81:af:6c:32:10:42:78:fe:63:5c:
         0e:43:c0:bd:32:96:a9:4c:3a:3b:26:b1:45:b5:01:19:c3:e5:
         5c:21:03:18:ab:6e:6c:6b:a9:3b:a3:7d:3d:c8:dd:d9:d4:20:
         e7:c5:35:42:fe:96:fa:07:f4:51:9e:53:aa:5a:ca:ca:33:00:
         6f:31:64:c5:f5:61:c7:2d:a8:63:27:49:2f:c8:82:c1:07:cb:
         d8:47:73:62:81:dd:ea:6b:f0:5c:81:0c:eb:a7:47:b1:d1:1f:
         80:06:f1:70:80:02:f0:71:c0:f9:bf:5c:87:bd:d7:a8:09:e1:
         d4:0a:33:93:03:c4:c5:9d:91:63:43:27:3a:21:ca:e6:34:a7:
         eb:bd:d1:ff:f8:9b:f6:fa:73:4b:24:af:a4:fc:7a:47:89:14:
         9e:5c:d0:e6:b7:b4:28:97:9a:38:08:fd:97:78:40:60:08:6e:
         53:2b:4a:4d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjM4N0FBRjExMC8GA1UEBRMoMjQ4Q0E0ODU4NzY5M0ZGMUNENUQ4MzY2MjI0QUNB
MEQyQjk3Q0EzQjAeFw0yNTEwMjAwNDA3MzlaFw0yNTEwMjIwNDA3MzlaMBgxFjAU
BgNVBAMTDTY4ZjViNThiLTQ4NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCs24gFb/EuMLZle3/7cDkJAvr8UwiVmeoE1oc93mHXGSxLojhhjm3ecph5
XrHGQ1rEjloqSLZb8Z1zajYa/2Z5hDu73hXAT83UlnuDRjJ/1DxYGF057ptJZWPz
4g7GEdJP4pjkVvp9y8GAKlRQFSzT6k+p5oPmd7+2I511vRvQu93j7+IgQ7qALZIm
QcIoOOCM7lfqK2kc+pQwVSwmqpSHE6Lmx296x30oaNaXlurnJlSnQuZ5hZ/cF4Lg
+QKnSq1WIpMCIpS4oedUN/bseJ8i0JDxDQaBkhtEu710YxPO5YHrxEWyMjeOgCnt
ZMINCT0ZDFcN3B5CHtpLUKmnymTFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqdc4
vkwJcYQb6SWFoVDsDn7DVNswHwYDVR0jBBgwFoAUJIykhYdpP/HNXYNmIkrKDSuX
yjswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYzODdBLzFDQTcxMEIwQzRENTExRUU5OUYwMjQ2QTc3NTQxMkU2L0pJeWto
WWRwUF9ITlhZTm1Ja3JLRFN1WHlqcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pJeWtoWWRwUF9ITlhZTm1Ja3JLRFN1WHlqcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjM4N0EvMUNBNzEwQjBDNEQ1MTFFRTk5RjAyNDZBNzc1
NDEyRTYvSkl5a2hZZHBQX0hOWFlObUlrcktEU3VYeWpzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLaGKokwOsfXyYcfWUayC2HDFnguwD
kaluvUq25xCh8ae614VYlYUIHvOIXhBHicvKZ97C3yOEF/vOaDHbuRLLCe+hkOec
2H77I8hISDvzJoGvbDIQQnj+Y1wOQ8C9MpapTDo7JrFFtQEZw+VcIQMYq25sa6k7
o309yN3Z1CDnxTVC/pb6B/RRnlOqWsrKMwBvMWTF9WHHLahjJ0kvyILBB8vYR3Ni
gd3qa/BcgQzrp0ex0R+ABvFwgALwccD5v1yHvdeoCeHUCjOTA8TFnZFjQyc6Icrm
NKfrvdH/+Jv2+nNLJK+k/HpHiRSeXNDmt7Qol5o4CP2XeEBgCG5TK0pN
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:09 2025 by rpki-client