Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          57mbpJqE01XdLWIASHcY4Spy1QGztODHo0MgRdLqojw=
Subject key identifier:   22:5F:5C:1E:9D:3A:C3:8A:7F:61:DF:8C:03:4D:C2:04:D7:18:B4:E6
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       01B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          01B7
Signing time:             Thu 18 Sep 2025 04:23:14 +0000
Manifest this update:     Thu 18 Sep 2025 04:23:13 +0000
Manifest next update:     Sat 20 Sep 2025 04:23:13 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: +NoZL0gm7YmoyCNKRap5h3A2bGJhlzNAZGQIZ0yQE5k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Sep 18 04:23:13 2025 GMT
            Not After : Sep 20 04:23:13 2025 GMT
        Subject: CN=68cb8932-135c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:0f:52:a6:9a:83:5a:47:6e:fc:a8:df:d7:
                    3b:95:cf:8f:1e:0a:85:f5:45:35:4f:42:82:27:5d:
                    d3:50:92:73:1d:26:87:21:e3:34:fa:05:31:ad:72:
                    35:ec:e7:82:8b:04:88:e8:11:31:41:6a:2d:d0:16:
                    c9:93:96:0c:25:30:5e:94:24:64:d8:eb:2d:9d:61:
                    d1:00:94:5e:c7:9b:91:14:11:aa:92:4c:af:28:2d:
                    8a:00:c3:b0:cd:ae:69:e3:4e:a3:f8:fc:f4:64:18:
                    a6:32:5d:10:03:05:72:e7:d4:0e:21:20:1d:fd:c3:
                    85:dd:c0:92:52:25:f0:35:2b:b5:b3:39:65:19:4e:
                    89:47:19:46:48:a7:3a:0e:30:db:f6:11:a7:19:38:
                    59:92:bd:e5:69:8b:3e:85:29:57:5e:40:9d:47:37:
                    70:17:33:5e:bc:f5:e4:3b:9c:48:4e:97:1c:c9:36:
                    2d:14:14:9d:ae:43:02:4c:be:f6:e6:c9:64:07:df:
                    7e:68:d5:86:67:5a:cc:4d:9a:0e:90:74:6b:df:83:
                    0c:68:2e:86:95:7f:a7:72:a4:6d:50:63:87:a8:57:
                    eb:10:94:0d:21:cc:cd:fe:2e:7e:a7:0d:b0:0c:ce:
                    93:3a:44:61:1a:de:17:f3:1f:1a:bd:d3:5d:0e:62:
                    24:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5F:5C:1E:9D:3A:C3:8A:7F:61:DF:8C:03:4D:C2:04:D7:18:B4:E6
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c9:e1:23:6e:d2:e6:a2:3d:74:6d:aa:d9:5b:6f:a9:0e:03:
         8e:eb:c9:eb:b5:87:e9:6d:27:a5:89:79:39:f9:b8:16:81:37:
         a6:d5:ba:b1:11:1f:0a:28:be:95:f1:aa:fe:2d:91:06:ce:e5:
         ed:4f:fe:17:1c:51:08:58:17:a6:33:d2:df:5b:2e:a6:11:ab:
         f9:0f:62:a1:a2:ef:5d:d1:19:7f:a5:df:8b:c1:27:65:56:01:
         47:35:3f:c1:4b:2e:be:6d:de:ce:fa:d2:8a:f1:69:90:f4:b9:
         e0:b3:15:c1:fa:cc:08:54:a8:64:ed:9a:bd:1b:85:30:dd:6f:
         8e:32:b3:d8:d8:89:92:49:d1:57:40:04:a0:80:37:25:27:c5:
         a5:2d:72:9a:c2:53:f6:c8:ad:66:f1:21:11:b4:27:b8:f9:64:
         99:88:fa:88:e9:15:b9:4e:a9:fc:68:b1:fe:36:ec:2b:ea:57:
         90:49:48:0d:f1:08:09:53:b7:7a:69:64:e7:7e:2d:a7:da:40:
         e0:3c:49:b9:61:b7:79:3b:02:5b:5f:2d:0b:84:30:e8:02:7a:
         87:ae:b5:0e:26:51:56:36:b3:95:5e:4d:97:ba:e0:46:9f:6a:
         c9:28:58:85:75:de:7f:a2:c2:68:73:cf:e4:91:56:02:2a:60:
         ee:09:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:44:44 2025 by rpki-client