Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          G6GbqdoWUZ8CxXdGyyAC7JvFMliV+kqPbf3M5/gw2Yg=
Subject key identifier:   AF:F1:E2:2D:68:D8:43:2D:03:5A:22:30:91:20:06:D9:2D:19:E0:DB
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       021D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          0217
Signing time:             Sun 19 Oct 2025 04:16:56 +0000
Manifest this update:     Sun 19 Oct 2025 04:16:55 +0000
Manifest next update:     Tue 21 Oct 2025 04:16:55 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: mny58zRqyEJmY+X4qFB2CnGBk1QgpIGp6HdtBWS1mTI=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Oct 19 04:16:55 2025 GMT
            Not After : Oct 21 04:16:55 2025 GMT
        Subject: CN=68f46638-19bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:2c:bf:03:d7:88:60:84:76:7a:af:8d:38:
                    b7:49:72:c4:ff:1b:67:3c:c4:aa:7b:b6:f1:f0:dd:
                    10:27:62:9b:46:86:2f:fe:55:4c:49:4e:c4:08:79:
                    d6:4b:c0:2e:4d:96:7a:4d:78:d3:e1:0b:d1:12:1e:
                    9d:fa:38:b5:3f:22:bf:2e:70:1a:c8:15:4c:14:06:
                    e6:6f:0f:a3:98:d6:f7:c4:38:94:e8:d7:6c:7a:ef:
                    a1:a3:05:e0:23:c4:6d:17:87:67:52:31:78:79:af:
                    80:75:d4:1f:e6:c8:1a:13:49:66:80:30:0d:6f:76:
                    af:35:30:41:c9:70:8b:ec:18:37:3d:4b:cd:f7:b1:
                    df:0e:ad:c6:15:5c:05:7b:b8:6b:6d:8c:f0:62:4b:
                    81:e3:ec:57:d2:c3:fe:65:89:32:9f:38:76:0b:9b:
                    2e:41:70:53:90:95:57:2a:d3:44:a0:e8:56:f4:11:
                    d5:4b:6e:96:f7:fc:74:32:73:43:01:e3:83:97:7e:
                    2e:3d:c2:83:d7:2e:a0:08:50:94:f8:33:d9:90:03:
                    7b:73:ce:1a:6c:e1:15:16:ff:90:39:9a:c4:a8:62:
                    54:ee:85:e8:9f:e8:58:f5:3b:c4:6c:b6:58:ba:84:
                    62:ff:cf:4b:23:28:89:cf:64:b2:60:f3:92:d8:bd:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F1:E2:2D:68:D8:43:2D:03:5A:22:30:91:20:06:D9:2D:19:E0:DB
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:63:a8:c8:aa:8f:ff:b9:e4:98:8d:7f:6f:2e:17:ac:43:
         70:16:8f:d2:86:b2:7b:b7:2c:8f:d0:1d:ba:5c:9e:95:9a:c5:
         5a:47:11:9b:c3:0d:ae:be:cc:a0:90:f3:2e:7b:a4:43:ee:77:
         5c:e7:24:f1:f5:d1:e5:82:5a:e1:c2:cb:5a:fc:3d:4c:e7:be:
         b7:15:4c:99:50:9c:fa:4b:54:1b:be:b8:4a:5a:44:42:62:a8:
         d2:bd:96:4f:da:85:0e:25:98:17:45:c8:82:32:4b:ce:8e:21:
         a2:92:86:40:bf:37:85:d6:31:f7:5d:69:21:95:6f:b8:6f:89:
         18:b0:9d:dd:b7:1a:0c:32:09:09:8c:e3:ed:c8:0e:51:df:52:
         98:93:3c:09:84:67:a0:fa:0a:c6:08:e8:62:34:5b:73:59:37:
         9d:a6:b1:e2:91:94:7c:74:9d:54:b2:cd:d3:11:cd:08:54:33:
         90:21:be:43:e5:ae:00:5f:b7:7c:70:99:ec:db:1b:a7:10:d2:
         49:fc:6f:50:e8:79:47:41:7e:a7:7e:e2:8e:62:f9:8a:34:34:
         08:89:f8:25:7e:ed:4b:f5:ce:c9:e1:16:79:f4:23:cf:e7:8e:
         e4:dd:3e:c5:09:6f:49:09:b6:b0:1a:b1:7e:0d:e1:b5:b7:13:
         1b:e3:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:42 2025 by rpki-client