Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft
File:                     c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft (raw, json)
Hash identifier:          wgcpaD+4/IRLSDQ9x2Se2rNSZPmmXemV+cPxyOIRw5E=
Subject key identifier:   36:64:4A:BA:A9:8C:32:CB:64:42:F1:94:A7:5A:2D:25:AE:A7:9C:3A
Authority key identifier: 73:9B:13:9D:0B:79:78:B0:F7:50:E6:18:4D:24:CF:CB:27:87:45:79
Certificate issuer:       /CN=F36F633BAF/serialNumber=739B139D0B7978B0F750E6184D24CFCB27874579
Certificate serial:       05FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft
Manifest number:          05FB
Signing time:             Mon 20 Oct 2025 02:27:00 +0000
Manifest this update:     Mon 20 Oct 2025 02:26:59 +0000
Manifest next update:     Wed 22 Oct 2025 02:26:59 +0000
Files and hashes:         1: c5sTnQt5eLD3UOYYTSTPyyeHRXk.crl (hash: 5IW/xyMXUOrkDhPsnoEqc5L/q/138T0WfsPlDrfjuoA=)
                          2: FD879FF61A1D11ECA73A7933D8A014CE.roa (hash: hV+JVLLuxvKry3G2M958k6uBPwgNRZmxJ4VO4xm+iKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F633BAF, serialNumber=739B139D0B7978B0F750E6184D24CFCB27874579
        Validity
            Not Before: Oct 20 02:26:59 2025 GMT
            Not After : Oct 22 02:26:59 2025 GMT
        Subject: CN=68f59df4-e631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:14:10:ef:78:45:b9:c9:2e:3b:ed:2c:7f:
                    9b:92:ac:a5:b7:83:a0:25:1f:40:44:57:00:41:15:
                    48:4d:dc:4c:5f:af:ff:41:93:9b:55:d0:8f:4d:ab:
                    76:31:5a:71:bd:3c:f1:de:1d:e7:86:a4:21:df:c8:
                    8b:ba:d8:1a:6b:b0:c1:64:80:3d:9f:6c:d6:6a:16:
                    ae:e1:06:a5:0c:0e:8e:40:fc:09:d5:0f:e8:85:4e:
                    0e:84:a7:3f:47:6d:be:d5:0f:4c:0f:62:91:c3:5f:
                    1e:57:eb:33:3b:d6:e0:10:43:62:7a:ef:8e:62:ab:
                    ea:10:d1:2f:77:ae:65:ab:c7:ee:48:39:0f:c7:89:
                    1d:47:21:b4:38:97:99:39:a5:ee:c6:08:a1:b2:84:
                    b1:46:8e:47:23:b5:ec:13:c2:5f:74:e2:62:d2:63:
                    19:3d:90:2f:9d:dc:2f:49:11:c8:54:68:b0:4e:b1:
                    f7:53:26:ea:b7:6c:37:4d:3f:cb:bf:de:f2:85:e9:
                    12:87:50:e3:ff:2a:50:00:74:76:98:c1:97:81:86:
                    ad:f4:89:ea:ca:07:7d:5c:01:7e:ba:34:a0:e6:ef:
                    f0:92:53:b2:ac:56:7e:9e:3b:8a:43:0c:9e:5a:8b:
                    6b:f7:de:6f:57:a7:a9:56:03:db:1f:fe:e9:80:88:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:64:4A:BA:A9:8C:32:CB:64:42:F1:94:A7:5A:2D:25:AE:A7:9C:3A
            X509v3 Authority Key Identifier:
                keyid:73:9B:13:9D:0B:79:78:B0:F7:50:E6:18:4D:24:CF:CB:27:87:45:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/c5sTnQt5eLD3UOYYTSTPyyeHRXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F633B/B03BB9A81A1D11EC8A2AE432D8A014CE/c5sTnQt5eLD3UOYYTSTPyyeHRXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:56:3f:52:66:f1:9a:37:7c:a9:f0:cc:1e:cc:f2:1f:7e:f1:
         5f:22:ff:f9:c4:53:48:06:6f:a1:96:dc:2d:52:81:7a:e6:79:
         ae:08:10:56:50:a8:2e:b0:cd:9f:d6:da:e8:f4:f3:4f:dd:cb:
         78:fd:e9:95:15:57:ad:5c:38:30:5e:d0:02:6e:19:39:7c:af:
         ef:66:3d:ff:5c:fb:91:7f:c3:22:03:e0:b4:e3:90:48:71:e0:
         da:2f:67:b7:b1:51:80:ed:9a:e0:fd:af:2b:d2:b5:4d:77:c6:
         9a:b7:ea:99:bf:64:3e:9d:d7:37:ef:b7:29:94:8c:07:95:63:
         04:11:7d:96:d1:81:94:36:bb:61:df:bf:40:61:27:55:50:91:
         1c:6f:bd:d5:db:aa:6e:dd:0b:e2:a9:40:59:20:2f:97:a1:11:
         51:a2:47:0f:7b:60:fe:23:1b:be:50:ca:de:d2:2a:b5:50:c6:
         68:0f:85:1d:8f:56:aa:e5:fa:62:bc:80:ec:4d:9e:b1:74:3d:
         b1:a1:20:fa:2f:45:92:d9:75:b1:f0:1c:c2:73:9f:1e:b5:ed:
         38:bd:86:97:1f:f5:11:d2:89:e8:23:56:31:fc:2c:ae:68:95:
         64:d0:2c:55:0f:e5:1f:57:f1:b2:31:9f:60:3a:e4:e0:5b:22:
         02:23:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:52 2025 by rpki-client