Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
File:                     PTg51e4dl7STFVYoMdygQJMxSB8.mft (raw, json)
Hash identifier:          +ypmX0naEJG4pxLl8FTDweNNFVF3G3syMNw9ye/85k8=
Subject key identifier:   71:0E:EF:4C:C3:50:F4:E6:D1:54:6E:4F:BE:43:FC:7C:15:18:BE:5D
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Certificate issuer:       /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial:       08C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
Manifest number:          08B6
Signing time:             Wed 17 Sep 2025 01:37:30 +0000
Manifest this update:     Wed 17 Sep 2025 01:37:30 +0000
Manifest next update:     Fri 19 Sep 2025 01:37:30 +0000
Files and hashes:         1: PTg51e4dl7STFVYoMdygQJMxSB8.crl (hash: HwwtLaQIZoORUVef/bOZmP67RzqfLKC484lnF7jKU2o=)
                          2: 4B570182DD7E11EF953B3052762E951A.roa (hash: cnNWOgAP08vu5OxVNv8TRnI6O25BJrmogxuLKnzytb8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 01:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36763E5AF, serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
        Validity
            Not Before: Sep 17 01:37:30 2025 GMT
            Not After : Sep 19 01:37:30 2025 GMT
        Subject: CN=68ca10da-3d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:46:db:af:17:24:92:87:8e:04:9c:06:4d:
                    b4:c2:0b:f9:28:a5:82:82:eb:54:ec:bd:81:a9:8d:
                    46:c1:b7:b1:60:ee:be:dc:ab:ff:fb:66:7e:1f:7f:
                    8a:30:64:9c:1c:b2:98:2e:de:6a:ec:bc:6d:1d:88:
                    85:19:f5:79:91:d6:a2:32:ec:a0:2a:8f:90:0d:de:
                    5b:6f:51:29:d8:ff:28:70:71:c9:84:68:2b:c4:f5:
                    37:91:39:aa:18:9b:9e:0c:82:9a:bc:2a:9b:c9:4b:
                    d3:d4:34:44:aa:d7:49:78:78:ca:d5:0d:4c:b8:bd:
                    41:3f:7f:5b:65:87:9e:1c:91:de:1d:a8:61:36:da:
                    d3:8b:e0:e0:b5:7d:4d:79:de:cf:15:d4:0e:64:05:
                    18:90:9c:9a:ae:48:2f:0c:0d:c4:b3:de:e4:18:7d:
                    07:28:4b:d2:e2:66:bc:b1:97:c6:8f:57:cb:1c:df:
                    cb:97:74:c1:66:60:15:f3:67:38:22:85:e5:50:e8:
                    e6:ec:59:72:da:d0:c0:cb:02:32:8b:8b:5e:b4:d2:
                    e5:0a:67:38:83:49:e9:20:93:0c:1b:0f:ef:e3:71:
                    7c:e0:6d:a9:2b:3f:2b:f1:c6:2e:b4:c9:aa:d3:c4:
                    b4:47:05:78:be:56:5e:6e:59:d5:1e:15:e7:57:de:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0E:EF:4C:C3:50:F4:E6:D1:54:6E:4F:BE:43:FC:7C:15:18:BE:5D
            X509v3 Authority Key Identifier:
                keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1a:27:5c:5a:c2:c8:3e:e6:24:27:a0:4f:dc:15:19:6b:84:
         b7:46:ec:a0:6c:3e:e6:79:e3:0e:33:25:55:64:7a:69:0d:49:
         9e:f8:a9:a3:a4:0c:ff:59:d2:f8:91:ec:85:d5:c7:91:b1:c1:
         01:9d:6f:9a:6b:13:5d:7e:98:5f:d4:88:aa:9e:4d:ee:4d:e5:
         4b:c2:0d:c6:5d:06:8f:ce:4b:02:6e:68:d3:68:cf:60:59:f7:
         35:f3:0d:48:d1:c3:d3:14:16:02:e2:4f:f3:2f:ab:bd:a2:65:
         18:64:0f:b9:d3:eb:c4:94:af:1a:7d:ff:fc:46:51:31:53:7f:
         d9:78:1f:15:64:76:78:49:a0:f5:91:92:e4:20:76:fd:af:4d:
         92:7b:3d:0e:21:24:75:2f:54:b5:05:d4:07:04:72:03:cb:78:
         76:73:7c:9e:da:3b:99:fb:a3:11:47:4b:f7:c0:79:cf:89:4f:
         7e:d0:d7:bc:51:65:cd:5a:37:e6:54:1e:76:c1:c8:b3:18:7d:
         d5:dd:25:72:86:b1:a9:d6:14:e8:3d:de:ba:51:8f:8a:75:55:
         c9:ae:fa:0a:74:3b:2f:a5:a3:2d:67:19:45:8b:cc:97:9c:2d:
         fc:09:88:e7:bb:7f:75:72:fc:ee:fb:22:cf:ab:34:ee:07:88:
         93:67:57:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:25:22 2025 by rpki-client