Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File:                     dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier:          cxBoXRcJlGNw4b74UKM9LaVaYvNj5SoeimQvmyJpMig=
Subject key identifier:   60:AA:3F:EC:CB:F8:22:44:71:AD:F9:CA:BC:C3:6A:4C:33:01:D3:77
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer:       /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial:       01BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number:          01BD
Signing time:             Wed 17 Sep 2025 04:22:59 +0000
Manifest this update:     Wed 17 Sep 2025 04:22:58 +0000
Manifest next update:     Fri 19 Sep 2025 04:22:58 +0000
Files and hashes:         1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: dGMF7YpHMOsdnUdb0FKv/6ARJg4zk/S+PdpQign2UnU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
        Validity
            Not Before: Sep 17 04:22:58 2025 GMT
            Not After : Sep 19 04:22:58 2025 GMT
        Subject: CN=68ca37a3-7d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:51:9e:22:a0:55:ae:46:3b:43:c0:3b:a7:
                    8a:19:f3:42:31:7d:cd:76:6d:16:b0:75:03:c2:71:
                    ea:3b:e1:8b:86:a1:78:d9:df:71:f3:8a:81:b0:14:
                    33:fe:8b:64:47:65:a6:35:c3:84:cc:be:6c:93:14:
                    4e:9c:d3:ed:6c:42:ac:87:8a:fd:95:c0:c2:c5:2d:
                    90:1c:8e:9e:27:7c:3b:15:ab:bd:0b:37:d1:5d:c0:
                    ab:83:ec:dc:19:95:7e:d7:91:1e:40:e5:96:fc:27:
                    01:a0:05:88:68:17:3e:a2:e6:94:4e:8e:5c:78:62:
                    9d:b6:e9:65:1b:90:e8:3f:21:bf:de:3d:8e:eb:97:
                    b5:20:98:3b:05:03:fa:6d:e0:33:51:ba:61:22:4e:
                    21:a9:eb:47:53:4a:db:cd:98:b4:c8:e3:e7:9e:22:
                    dc:5f:76:ba:45:e3:3d:3d:e2:a3:89:d8:c3:a7:68:
                    13:63:bd:69:d0:54:cb:f3:0d:2e:70:43:5a:17:66:
                    3b:75:ea:f2:a6:c2:e6:40:03:6c:a6:85:5f:c2:b8:
                    b6:c2:bb:50:02:73:a4:9a:f8:92:13:18:8a:93:e7:
                    1c:ca:e1:93:50:a9:27:2d:af:a6:45:b2:1b:0c:33:
                    6c:c3:ad:eb:cc:04:3a:15:7c:f3:fb:f5:0e:9e:08:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AA:3F:EC:CB:F8:22:44:71:AD:F9:CA:BC:C3:6A:4C:33:01:D3:77
            X509v3 Authority Key Identifier:
                keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:42:c0:98:3f:0d:67:9a:14:d3:51:54:e3:aa:57:a9:cd:
         da:3f:38:da:5e:72:da:6b:12:2f:48:ca:b0:57:9f:64:a7:e4:
         7b:4b:84:5d:14:2e:bc:62:25:44:b5:0f:b3:10:79:57:99:6d:
         be:80:ee:29:fc:d4:3b:8f:39:66:96:55:af:ca:47:59:cd:a9:
         90:c9:4a:30:e0:c5:43:4b:7a:19:5c:46:ca:e4:bb:87:63:86:
         de:05:d3:1f:27:f8:21:e2:2b:ad:1f:c8:01:60:9d:23:42:0b:
         e4:3a:a4:8b:74:08:4c:2d:41:48:32:df:9c:5d:76:ba:2d:b7:
         a1:d2:02:9b:98:aa:bf:08:0d:fa:f8:41:4a:71:4d:56:c9:be:
         59:19:1f:e5:4a:97:25:59:ee:63:75:f5:35:1d:d8:51:e4:48:
         af:91:82:f2:7c:9b:2e:cd:a8:9f:9b:51:38:ad:4f:d9:76:d2:
         ee:63:ee:c3:ef:db:aa:e3:bc:a4:cf:85:ab:67:7e:86:ed:53:
         0c:ea:9b:42:13:b6:7f:aa:8c:bf:f6:6d:de:91:cf:2d:4a:ca:
         de:54:00:92:8e:8c:c6:a9:2f:7a:b1:2b:24:13:e2:a4:b1:78:
         46:ce:af:7d:ed:41:ab:fb:ea:c9:fb:85:b2:f3:bf:ad:d0:31:
         8b:4f:6d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:05:56 2025 by rpki-client