Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
File:                     i-QDW-vJyDQotaJ76Fuslm125cs.mft (raw, json)
Hash identifier:          2DGG+iy2mfiDRd5lHOT2jZzQSX4ODi2NwcUFE4ANHX8=
Subject key identifier:   5C:95:46:7E:EB:02:42:1B:54:12:9C:6C:C1:81:8F:52:A9:4D:61:EE
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Certificate issuer:       /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial:       03D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
Manifest number:          03CB
Signing time:             Thu 18 Sep 2025 03:17:44 +0000
Manifest this update:     Thu 18 Sep 2025 03:17:44 +0000
Manifest next update:     Sat 20 Sep 2025 03:17:44 +0000
Files and hashes:         1: i-QDW-vJyDQotaJ76Fuslm125cs.crl (hash: PlBGBz4oOOaLkaur40QsY9+OTvXtvhaFQNLwRpZO4bE=)
                          2: 557725A0B21511EF88D2448C762E951A.roa (hash: opZztqXESofrVmYo2p5Jk1wm+34HapZU5YnopzpKiHA=)
                          3: 9394FD62B21511EFBC825D8E762E951A.roa (hash: lu1oced98iyT24G4vw7hwl0wpa8JR56UCd+rbr6ylXY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A854FAF, serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
        Validity
            Not Before: Sep 18 03:17:44 2025 GMT
            Not After : Sep 20 03:17:44 2025 GMT
        Subject: CN=68cb79d8-b37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:5e:34:81:d7:d5:33:d8:85:da:5d:32:1c:
                    7f:8b:27:32:49:23:98:ad:5f:39:f7:d5:75:a3:29:
                    3b:ba:6a:06:8c:92:9f:fe:98:69:fc:ed:96:57:93:
                    2f:7a:90:cc:ad:63:e0:fe:13:f8:8c:47:3d:8a:1e:
                    32:81:b6:d4:d8:d3:eb:11:1e:14:9a:d1:a5:91:aa:
                    5e:aa:69:8f:83:18:ed:61:ec:9b:06:6a:0e:bd:06:
                    9f:f9:b2:6e:56:c7:bf:9c:06:fd:8e:d8:9d:c7:40:
                    18:72:94:b9:a7:95:3f:6b:87:fd:c0:9b:69:10:13:
                    69:aa:98:f9:6a:75:f6:74:38:91:cf:ee:cd:19:c6:
                    2e:5a:88:2a:f5:38:6e:7f:25:e9:ce:0c:32:cd:59:
                    72:bb:57:76:34:40:4c:ae:9e:d1:73:b7:e5:33:91:
                    96:d9:fa:a2:5c:e4:95:94:2b:b0:a3:b2:6e:ae:1b:
                    cb:52:3c:67:0c:6c:1d:05:40:d3:f4:eb:54:6f:49:
                    0f:c9:df:de:b7:a1:19:b6:c2:79:2b:48:01:20:8c:
                    a7:1b:31:bd:a0:ed:97:d8:7e:66:c0:bf:31:4a:2f:
                    d9:6d:52:6a:dc:a9:73:c3:ea:f7:8b:67:ad:15:bc:
                    61:68:1d:4e:d5:82:3e:fb:a2:ce:5d:a5:20:c5:61:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:95:46:7E:EB:02:42:1B:54:12:9C:6C:C1:81:8F:52:A9:4D:61:EE
            X509v3 Authority Key Identifier:
                keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:f3:2e:03:15:b9:c8:d9:9e:c8:ed:4a:a0:00:db:12:ce:
         62:cd:0d:c9:88:9c:c5:c4:1b:96:1c:d5:53:25:06:f8:54:34:
         9d:88:b8:b0:41:5f:c7:01:6e:4d:81:15:30:ce:3c:64:46:37:
         28:d3:eb:33:12:7a:0f:06:5c:44:df:53:f5:ac:df:e3:4c:dd:
         f9:02:05:be:6c:b0:d8:cf:f8:6e:84:b4:ed:44:0e:d2:7c:16:
         a5:9d:f4:8f:cf:1f:f3:cd:0b:b9:d1:cd:12:5b:ba:d4:2d:44:
         68:1c:bf:9e:b5:43:ce:e4:14:8f:42:52:71:c0:99:29:00:2b:
         e7:22:d7:83:49:51:2d:4a:a7:4d:78:c8:5f:05:65:c5:5e:55:
         d9:1a:0a:21:a6:2f:be:45:91:03:00:09:68:a2:6b:fb:37:59:
         46:20:b6:46:ce:95:15:57:d1:66:76:33:61:a2:ff:5b:82:4f:
         55:80:b2:5b:b5:30:25:0f:6d:de:67:f1:7b:84:a0:ad:a2:cd:
         53:85:11:43:16:c9:fd:f0:b6:62:8a:83:f6:26:eb:89:7c:79:
         08:e8:a3:cf:ff:fd:fc:7d:70:6d:a8:cd:72:0a:d4:ef:22:d6:
         91:a6:a4:e7:52:b2:d9:e8:b1:a3:37:e7:13:2e:ac:d6:03:75:
         37:43:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:32:56 2025 by rpki-client