Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
File:                     R_ufMc9PLRlxHITTLiO9AG4ALpY.mft (raw, json)
Hash identifier:          0zC8+IWJndSuKSG4qhjHlzhRChO0MbN6aIPWWb21+BA=
Subject key identifier:   3B:38:65:37:10:6C:CE:DE:57:28:09:6E:41:2E:87:C5:9A:9D:75:CD
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Certificate issuer:       /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial:       05DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
Manifest number:          05D9
Signing time:             Wed 17 Sep 2025 02:27:16 +0000
Manifest this update:     Wed 17 Sep 2025 02:27:15 +0000
Manifest next update:     Fri 19 Sep 2025 02:27:15 +0000
Files and hashes:         1: R_ufMc9PLRlxHITTLiO9AG4ALpY.crl (hash: p3lmkLZWH0ptBzWCVbCOfmUTdaUZM6pp76zCL38XwkY=)
                          2: 3CBE5F76212011ECA2098832D8A014CE.roa (hash: 8d9G2F7SeXBUC0RrFhpkoC1cMwO502CPGYGL0obQDBM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A36C8AF, serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
        Validity
            Not Before: Sep 17 02:27:15 2025 GMT
            Not After : Sep 19 02:27:15 2025 GMT
        Subject: CN=68ca1c84-4a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:42:7d:63:67:51:a2:9f:d8:a7:17:35:a8:
                    7a:71:8f:8c:e8:b8:9f:44:bf:5a:f4:0d:d2:29:9e:
                    27:8c:84:61:84:1c:41:aa:30:81:e2:78:f9:c0:f1:
                    7e:42:aa:c7:1b:fa:a5:83:52:35:19:dd:88:84:b8:
                    e6:90:47:51:f8:b5:5d:1b:53:a7:e6:05:7e:60:0b:
                    e2:f6:46:ea:24:f9:fc:1e:76:93:b2:d2:d1:bb:b7:
                    21:25:75:41:10:18:25:bd:5c:26:eb:36:21:8c:37:
                    43:5d:bd:1d:20:b1:7e:ca:bb:bd:90:21:a4:36:89:
                    18:7b:1d:ac:44:e3:74:ec:9b:29:11:b2:2f:0b:fc:
                    d5:19:a2:40:19:4c:94:0c:6e:e2:6b:18:1d:d6:66:
                    86:df:13:05:70:01:b8:6d:4e:9a:81:45:b4:f3:ae:
                    10:18:01:aa:7c:a0:ad:99:33:71:6e:2d:ac:86:77:
                    72:30:2c:4e:a6:cb:e2:d2:e5:d1:89:0a:20:c8:de:
                    32:8f:43:38:f1:54:15:a7:2a:8e:e4:8a:dc:9d:0c:
                    21:33:5f:4e:a3:95:08:38:93:3d:2d:29:b8:6a:ce:
                    35:a3:4e:f5:1b:3f:55:30:26:9a:6d:7f:f0:a2:2d:
                    3d:d3:41:8d:44:5f:04:40:47:69:3d:ed:74:bf:5d:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:38:65:37:10:6C:CE:DE:57:28:09:6E:41:2E:87:C5:9A:9D:75:CD
            X509v3 Authority Key Identifier:
                keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a1:f6:80:25:12:80:9c:1c:82:cb:e4:4f:40:6d:4a:92:8e:
         5e:26:01:21:05:19:ce:7c:43:69:d9:ca:9d:b5:01:47:f1:a3:
         af:f5:91:42:b3:81:9c:0c:53:43:da:2e:9e:32:06:12:2a:5e:
         74:1d:fb:86:ca:6f:41:f6:d7:11:09:a3:ac:d9:28:b5:95:98:
         05:b1:eb:af:27:96:b4:38:25:95:38:3c:34:a8:82:35:e5:1a:
         a6:83:5e:02:5a:7e:11:ac:05:41:d7:63:45:af:1b:da:9d:b2:
         6f:9e:cd:04:71:a7:0f:a1:24:ff:02:c8:77:67:68:66:e4:b2:
         60:1e:d9:42:9b:a7:cc:24:8b:1e:4c:64:d4:13:9b:7e:51:73:
         dc:3c:70:30:81:c8:ba:bf:cb:6f:61:29:e5:bf:07:7d:8e:b0:
         7f:23:62:4f:c9:db:88:1c:c5:b7:0d:ff:6d:d0:ba:c8:83:39:
         8d:fc:98:86:81:e0:2c:08:ea:46:d5:11:7a:78:9f:fe:7b:79:
         fa:76:92:2c:67:cb:3d:ab:d3:37:c4:06:e3:b4:26:fd:b3:93:
         b6:24:e6:7c:48:c2:b3:63:56:ed:7f:e3:ca:83:16:78:99:8b:
         bb:b9:05:8c:22:5f:64:75:15:a4:4b:ac:f5:9c:dc:d9:18:1a:
         c5:5c:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:23:44 2025 by rpki-client