Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
File:                     TwSz--IMFQm6-aos_oN2Xy6WnK4.mft (raw, json)
Hash identifier:          pD+Q5hEauhWA4jTbFUz8hxkurcGzpCPn4n9kmmlda/8=
Subject key identifier:   2C:9F:FF:10:BE:BF:23:D7:DE:AD:DA:7A:58:97:7C:14:97:BE:CB:58
Authority key identifier: 4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE
Certificate issuer:       /CN=F368BE0BAF/serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
Certificate serial:       0179
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
Manifest number:          0178
Signing time:             Wed 17 Sep 2025 04:35:56 +0000
Manifest this update:     Wed 17 Sep 2025 04:35:56 +0000
Manifest next update:     Fri 19 Sep 2025 04:35:56 +0000
Files and hashes:         1: TwSz--IMFQm6-aos_oN2Xy6WnK4.crl (hash: 3B2sresG4fK7ohodNIPF3KRUmqnnyVxIGoaNGD4OZ30=)
                          2: 60B3D914750111EFA5E0E087762E951A.roa (hash: UtfppmUEN5RqKXCtw1VeKzrsyq6Tj8yeIDmUGAHWijE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BE0BAF, serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
        Validity
            Not Before: Sep 17 04:35:56 2025 GMT
            Not After : Sep 19 04:35:56 2025 GMT
        Subject: CN=68ca3aac-4ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:f2:de:0e:3e:f0:68:09:9f:f1:d7:2b:18:
                    18:7d:09:57:d9:1c:3d:5f:28:73:d3:ac:39:1c:3b:
                    ee:f3:dd:02:6f:57:08:de:12:48:7b:e5:e4:43:f7:
                    a1:19:5c:14:0a:c8:15:f6:58:76:cb:16:98:b0:68:
                    9e:65:07:5d:76:63:8a:07:bd:80:4e:8e:fa:96:17:
                    97:d4:4b:b2:81:5e:f3:06:52:14:25:d6:6e:e0:a5:
                    c7:27:fa:28:8e:80:9a:d1:39:a4:df:7f:a9:62:3c:
                    34:fc:0a:c2:b5:e8:a0:f3:1f:17:59:73:fb:7b:1b:
                    6c:3f:69:75:5a:14:d6:93:60:ff:ab:b1:d0:ab:c4:
                    9e:14:09:d6:3f:f9:8a:1e:d7:05:e9:60:02:1a:cd:
                    b8:c6:c5:1c:9f:c8:3d:5d:0c:32:dc:d5:09:f7:1e:
                    5b:5d:8f:87:ec:c5:8b:1c:b8:7b:48:89:27:ab:b2:
                    09:9d:19:dc:7a:6b:b6:e4:3c:2b:d4:68:f9:87:79:
                    97:e2:b5:24:e9:d0:c3:bb:50:24:98:61:c9:43:cb:
                    bc:41:09:8a:8a:22:31:5d:be:e9:a7:80:8d:0a:51:
                    39:34:2c:88:b0:01:c3:62:7b:ee:05:12:6c:04:43:
                    04:4a:1a:65:f7:b1:e8:34:7f:a0:85:4b:2d:af:5f:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:FF:10:BE:BF:23:D7:DE:AD:DA:7A:58:97:7C:14:97:BE:CB:58
            X509v3 Authority Key Identifier:
                keyid:4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:11:79:0c:29:83:63:26:33:a0:59:45:d7:45:2c:ba:a8:
         d2:50:37:7b:46:cc:26:b2:c0:d0:b7:34:52:d0:29:2b:51:82:
         d8:ed:ce:1d:35:39:a0:c2:ee:0b:18:e5:22:01:15:d7:cc:f7:
         06:f1:bd:a6:90:6d:68:44:98:a4:b2:ec:80:67:6e:be:7e:2b:
         f1:5a:6c:ee:dd:31:f3:59:48:19:63:33:9e:a3:68:13:08:36:
         85:32:28:e0:6d:d5:50:57:64:93:af:56:f4:45:f6:3c:11:a5:
         90:63:58:13:14:a7:89:02:0e:a8:9d:59:38:0c:1f:7c:67:19:
         a1:7d:aa:52:4a:cc:1f:6b:a5:68:4e:e0:ba:35:07:9e:ee:e7:
         38:45:78:89:a2:8a:e9:e5:e4:10:5a:e0:17:e2:b6:e2:f3:cd:
         65:ad:25:75:a8:86:3b:37:b8:1d:6b:79:6e:19:7e:10:87:ef:
         b6:40:d4:43:c7:b7:63:fd:e7:d5:d2:65:a2:bb:9a:2b:21:14:
         0b:7d:30:da:77:65:20:d3:a5:60:73:b6:21:a6:e0:7a:4e:33:
         66:90:22:ce:f2:f8:a0:ae:de:51:ab:e0:5c:d1:c0:86:7c:ab:
         61:c8:5a:56:88:15:6b:96:db:c6:b0:f9:b8:e2:e6:0e:8b:bf:
         70:0e:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:40:44 2025 by rpki-client