Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft (raw, json)
Hash identifier:          RudrjgvoPZ2fyDA79CVWC3T9c+iTix70D1zK74PhZeA=
Subject key identifier:   9F:13:31:95:91:C9:4A:92:2B:0B:C9:DA:5C:82:CE:BF:E0:98:4E:1E
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Certificate issuer:       /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial:       0601
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
Manifest number:          0600
Signing time:             Sat 25 Oct 2025 02:25:18 +0000
Manifest this update:     Sat 25 Oct 2025 02:25:18 +0000
Manifest next update:     Mon 27 Oct 2025 02:25:18 +0000
Files and hashes:         1: fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl (hash: 5jq646bORaGZTKyW8imPXbFZJpuWOK7jKG0ULkluhdg=)
                          2: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (hash: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 Oct 2025 00:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Validity
            Not Before: Oct 25 02:25:18 2025 GMT
            Not After : Oct 27 02:25:18 2025 GMT
        Subject: CN=68fc350e-565d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:80:a1:ba:c4:79:b9:2f:17:c7:36:cb:46:
                    10:ba:80:83:40:56:c4:a6:b3:2e:3e:b4:f8:1c:a4:
                    c5:9a:61:90:5f:ce:18:3b:37:78:55:ab:d5:f0:5e:
                    4a:99:e6:a2:6a:8a:f4:02:b0:d7:ab:1f:2b:43:b3:
                    dd:50:75:6b:ae:56:67:4a:66:fe:b1:b5:c8:2d:67:
                    35:90:92:24:fd:a5:60:3a:eb:e8:d5:53:a4:54:73:
                    0c:37:12:24:93:a3:2c:79:e9:03:36:2a:1d:96:9e:
                    18:5f:04:8e:48:0c:86:10:be:97:88:6d:89:00:c2:
                    95:43:75:b0:d7:52:c9:1e:77:b0:b5:fc:76:39:b9:
                    5e:74:24:8a:a3:a4:1d:1b:1e:c1:7c:4b:21:bd:e3:
                    67:a5:86:56:1d:f1:57:55:9b:c9:0f:80:2d:b9:81:
                    e1:ba:f5:8f:70:2c:2f:f0:80:ec:bb:b6:8e:04:05:
                    3d:02:d4:31:c6:a7:6a:d9:77:21:1f:ac:20:25:1e:
                    68:3b:f9:e3:ee:45:09:7e:0f:02:d4:4f:7a:c5:35:
                    5b:3f:f8:05:da:29:12:29:7a:08:7b:57:61:58:ec:
                    6a:c6:24:1a:22:81:b7:ea:41:03:cf:14:f7:73:99:
                    46:0e:c6:90:10:c3:12:99:9f:c1:46:f1:fd:29:78:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:13:31:95:91:C9:4A:92:2B:0B:C9:DA:5C:82:CE:BF:E0:98:4E:1E
            X509v3 Authority Key Identifier:
                keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:72:14:ab:fe:0c:dc:bc:b8:07:53:e7:4f:c0:89:5c:15:
         0c:15:76:2d:df:19:14:6f:a9:87:c9:14:ed:38:7b:ec:ea:08:
         72:01:0f:b7:e8:e3:48:a3:8b:a3:b9:72:f5:94:0d:38:ad:ee:
         0c:bd:95:2e:e8:46:b1:ed:bf:e6:19:cc:e3:f3:87:79:c8:32:
         ab:fa:a3:e8:ab:af:da:0d:de:c2:84:ea:46:4b:55:4a:68:86:
         32:b1:b5:b6:00:48:4a:cb:a3:94:63:21:6a:b4:f7:83:ba:a5:
         7f:c1:4a:38:18:fe:08:e4:ba:d7:d1:d0:37:d6:3c:6f:46:c7:
         d3:e0:12:77:6a:f9:4e:28:15:da:ac:f7:70:f4:9b:d9:c1:b8:
         3d:5e:ae:33:70:15:a6:9b:a7:9a:9d:5b:be:ad:1d:76:98:78:
         d6:ac:75:d0:c4:5e:36:3b:b3:d2:2b:5f:3d:a4:32:33:ba:fd:
         9b:e8:13:13:b4:04:72:36:1a:37:43:d6:0b:42:3f:35:4a:fd:
         a5:9e:12:45:13:4a:2c:90:fd:0f:a6:40:8e:81:e6:39:82:f0:
         9b:1d:47:48:cd:cb:74:65:c4:8e:4d:8f:42:65:c9:ce:00:57:
         e3:05:0e:f7:ae:5d:44:c0:19:00:95:58:47:f1:1a:a5:d2:fe:
         d2:85:53:ea
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTFEQzJBRjExMC8GA1UEBRMoN0M3QUY4NjA5QjZGQkQ1NkJDQzAyNDRDRDMyRDYw
RkZFODVGOUVFNDAeFw0yNTEwMjUwMjI1MThaFw0yNTEwMjcwMjI1MThaMBgxFjAU
BgNVBAMTDTY4ZmMzNTBlLTU2NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjuYChusR5uS8XxzbLRhC6gINAVsSmsy4+tPgcpMWaYZBfzhg7N3hVq9Xw
XkqZ5qJqivQCsNerHytDs91QdWuuVmdKZv6xtcgtZzWQkiT9pWA66+jVU6RUcww3
EiSToyx56QM2Kh2WnhhfBI5IDIYQvpeIbYkAwpVDdbDXUsked7C1/HY5uV50JIqj
pB0bHsF8SyG942elhlYd8VdVm8kPgC25geG69Y9wLC/wgOy7to4EBT0C1DHGp2rZ
dyEfrCAlHmg7+ePuRQl+DwLUT3rFNVs/+AXaKRIpegh7V2FY7GrGJBoigbfqQQPP
FPdzmUYOxpAQwxKZn8FG8f0peBwFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnxMx
lZHJSpIrC8naXILOv+CYTh4wHwYDVR0jBBgwFoAUfHr4YJtvvVa8wCRM0y1g/+hf
nuQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxREMyL0ExMjE3MTgyMUExRTExRUM4RDM0NUQzNEQ4QTAxNENFL2ZIcjRZ
SnR2dlZhOHdDUk0weTFnXy1oZm51US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZIcjRZSnR2dlZhOHdDUk0weTFnXy1oZm51US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTFEQzIvQTEyMTcxODIxQTFFMTFFQzhEMzQ1RDM0RDhB
MDE0Q0UvZkhyNFlKdHZ2VmE4d0NSTTB5MWdfLWhmbnVRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXX3IUq/4M3Ly4B1PnT8CJXBUMFXYt
3xkUb6mHyRTtOHvs6ghyAQ+36ONIo4ujuXL1lA04re4MvZUu6Eax7b/mGczj84d5
yDKr+qPoq6/aDd7ChOpGS1VKaIYysbW2AEhKy6OUYyFqtPeDuqV/wUo4GP4I5LrX
0dA31jxvRsfT4BJ3avlOKBXarPdw9JvZwbg9Xq4zcBWmm6eanVu+rR12mHjWrHXQ
xF42O7PSK189pDIzuv2b6BMTtARyNho3Q9YLQj81Sv2lnhJFE0oskP0PpkCOgeY5
gvCbHUdIzct0ZcSOTY9CZcnOAFfjBQ73rl1EwBkAlVhH8Rql0v7ShVPq
-----END CERTIFICATE-----
Generated at Sat Oct 25 10:42:01 2025 by rpki-client