Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
File:                     ePCj07rEmhSIR2PZN9PKGSCVOxU.mft (raw, json)
Hash identifier:          s+4wGDe051N55OPbcaTDQ+0n+wt5FPoPkItPVHG5at8=
Subject key identifier:   6F:11:82:3B:CC:25:BB:F1:2D:D1:7A:DC:32:9E:7D:2E:C6:05:B4:41
Authority key identifier: 78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Certificate issuer:       /CN=F36FF74CAF/serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
Certificate serial:       0209
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
Manifest number:          0206
Signing time:             Mon 20 Oct 2025 04:22:09 +0000
Manifest this update:     Mon 20 Oct 2025 04:22:09 +0000
Manifest next update:     Wed 22 Oct 2025 04:22:09 +0000
Files and hashes:         1: ePCj07rEmhSIR2PZN9PKGSCVOxU.crl (hash: 4+DRko6regRkB5CicYN8mX/HjxrV3WWaAD/hUa4ut1c=)
                          2: 6883EC322C8211EF82CEC0ED7CDC24C2.roa (hash: Al+25UVZ/TGZulMqlsc3cCdFsOzq/5m8B34hb4F8eiM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF74CAF, serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
        Validity
            Not Before: Oct 20 04:22:09 2025 GMT
            Not After : Oct 22 04:22:09 2025 GMT
        Subject: CN=68f5b8f1-895d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:d5:12:9d:31:bf:c7:3d:bb:84:e7:f8:4a:
                    4a:da:9b:94:11:43:30:e0:bd:44:37:3d:2a:e5:c9:
                    42:2b:1e:84:88:de:09:00:fc:fd:7e:55:a8:5c:bf:
                    36:54:a2:ae:95:92:f1:b6:ab:c3:9c:16:ba:33:9b:
                    ad:16:10:10:65:ca:0c:07:50:1e:aa:6f:a6:ac:ca:
                    9d:39:aa:6f:b0:0a:c7:b9:b0:05:27:6d:3b:fc:89:
                    65:0f:b2:95:9c:d4:61:e6:24:ec:88:c2:fc:d2:95:
                    f5:c9:28:61:bc:67:c8:9b:ed:18:5a:a6:4d:55:30:
                    32:96:ce:af:45:dc:e4:b7:77:8b:0e:19:ac:19:06:
                    ba:bf:56:0c:59:a5:6b:6b:dc:71:43:61:8e:93:2d:
                    c5:9e:1a:57:a4:ad:b5:38:a2:1d:41:f2:8d:72:52:
                    73:ff:52:f9:70:33:50:8e:be:0f:1e:a2:cf:5d:1d:
                    ea:25:46:47:1c:72:9f:1b:f0:6b:df:e9:73:9d:67:
                    7b:37:d9:00:b3:71:3f:75:b0:ea:04:45:28:6a:1a:
                    d1:d2:b9:4f:e4:67:bb:c2:48:ce:4b:48:0e:ec:ca:
                    d6:50:a6:73:a5:2c:a2:f1:cc:c7:b3:f7:40:1a:42:
                    ea:db:67:f8:49:96:97:ab:2a:1d:b6:82:05:ab:ea:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:11:82:3B:CC:25:BB:F1:2D:D1:7A:DC:32:9E:7D:2E:C6:05:B4:41
            X509v3 Authority Key Identifier:
                keyid:78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:15:a3:dc:60:fa:8f:47:5a:60:29:cc:67:fa:6e:30:a6:38:
         ff:12:55:b6:c5:c6:01:a2:f8:38:8d:0f:15:24:5c:eb:cc:4b:
         ee:77:02:6f:18:46:70:5f:d3:29:38:12:9b:33:cd:d6:ac:16:
         58:f1:d0:83:6b:f3:50:ca:44:a0:f5:3e:ad:76:16:36:73:9a:
         94:f1:5d:eb:30:e3:12:e1:c0:4a:39:15:4e:d6:a4:66:2f:26:
         9d:1d:dc:78:3f:89:e2:81:ad:1b:a5:92:b3:9e:88:45:42:f1:
         e0:a2:cd:e3:de:76:68:9b:04:29:b1:18:f9:e1:ca:4f:05:86:
         38:f7:41:ab:66:c0:c2:76:0d:bc:c2:17:33:b4:7d:48:93:1a:
         25:16:cb:29:57:98:41:ed:b4:e5:ac:6f:14:1c:aa:ad:1c:a1:
         b8:ea:6e:e7:55:9a:e3:16:a6:21:f3:1e:6a:c4:e5:a2:69:33:
         fb:8e:c3:fd:cf:c2:cc:e2:83:40:37:0d:41:a0:39:43:00:90:
         58:86:d9:22:3d:29:64:fd:a3:64:a2:23:05:d5:80:29:d5:b2:
         2b:a6:d5:a0:49:f5:11:0d:66:11:a8:4d:75:51:29:99:11:1f:
         9d:7b:e2:22:fe:4b:fe:9a:28:c3:00:80:5d:2d:36:b1:a9:14:
         0e:80:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:46 2025 by rpki-client