Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
File:                     nZEfOSNannHK5JlXppouUkKg3TU.mft (raw, json)
Hash identifier:          sVbPPWS/xfUfR5Srssq9xz4Z2GkzyUIz56vitdEAUis=
Subject key identifier:   1E:52:F1:C5:B5:FB:D0:9A:ED:8E:0E:3D:4E:CF:19:12:8A:9D:8F:95
Authority key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Certificate issuer:       /CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Certificate serial:       0296
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
Manifest number:          0294
Signing time:             Thu 18 Sep 2025 03:56:30 +0000
Manifest this update:     Thu 18 Sep 2025 03:56:29 +0000
Manifest next update:     Sat 20 Sep 2025 03:56:29 +0000
Files and hashes:         1: nZEfOSNannHK5JlXppouUkKg3TU.crl (hash: yNpxjsGVhmiPCXoQq3qTRjRduuk3JOA/FU7OvmKXrKo=)
                          2: 6B19BD749DA711EE8B40AC5ED25BE465.roa (hash: NgzSPsDLZHTS8GcIuQL4M+RUtb2W4HialOJ/KKr08S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4CC8AF, serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
        Validity
            Not Before: Sep 18 03:56:29 2025 GMT
            Not After : Sep 20 03:56:29 2025 GMT
        Subject: CN=68cb82ee-61dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:61:d7:31:f0:fc:75:2e:f1:85:a6:b5:4d:
                    68:5e:d4:77:e3:62:48:e5:c8:47:07:dc:b6:fc:0b:
                    97:a9:20:4b:9e:5f:2d:29:a9:a2:66:fb:8e:ed:23:
                    a3:4c:2a:62:1b:a4:bc:2c:b6:ea:7f:a5:85:a6:31:
                    ee:20:4a:a8:08:18:90:ad:da:3e:8d:5b:ab:3e:a6:
                    bc:ee:a2:61:e6:8f:06:62:5f:c6:73:ce:ef:0c:a4:
                    fe:66:3e:2c:7e:f7:3d:67:a5:ed:71:e6:37:1f:3f:
                    61:3e:32:d4:da:52:7d:2f:4b:2f:01:9b:28:9e:a0:
                    cd:a1:64:de:c4:d9:5a:39:35:a7:8e:45:5e:ad:e6:
                    14:06:c5:7a:ad:60:a9:e5:33:06:c4:c9:d1:06:4f:
                    10:24:3f:58:41:ec:90:06:d9:6a:2f:c9:4a:d1:27:
                    c1:f3:3a:0e:43:ed:11:c4:13:2b:e6:06:52:67:ca:
                    bb:cf:f8:ec:7e:d6:b3:dd:ef:1e:60:0c:1e:5a:d5:
                    5f:de:f6:b2:d6:f9:f8:ab:bc:5a:8e:5e:86:4e:35:
                    69:8d:f5:b4:2a:bd:53:66:61:95:bf:3c:ea:c0:37:
                    82:68:74:74:82:dd:da:37:be:56:82:f5:b7:da:11:
                    5a:53:a8:d0:9f:f0:06:c9:c2:4f:ec:a0:7d:09:b3:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:F1:C5:B5:FB:D0:9A:ED:8E:0E:3D:4E:CF:19:12:8A:9D:8F:95
            X509v3 Authority Key Identifier:
                keyid:9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:85:dc:7c:c5:d6:ea:7f:a8:30:d5:1d:cd:b6:b5:99:fd:e7:
         3c:7c:45:5d:c8:f0:1a:c4:ef:38:e4:f7:96:a2:8a:25:d4:56:
         11:32:ed:fb:a8:2c:3c:2c:31:f7:56:df:75:51:8c:d7:78:6c:
         39:31:d5:36:5b:03:31:6a:78:4e:af:69:cb:bd:bd:c5:b3:c9:
         a2:d0:eb:ed:64:34:e3:bc:a0:57:e3:c6:22:2c:82:ca:93:62:
         25:6d:88:09:df:ff:37:cd:5f:22:60:d2:6e:d2:02:ee:20:7c:
         5d:00:39:69:92:e0:60:06:98:4f:d0:c4:e3:e4:41:a0:24:78:
         28:2d:2f:a7:44:1c:bb:29:07:82:84:ae:85:45:29:6e:0d:74:
         1d:91:8b:40:23:d2:9e:f1:c9:50:73:e0:e0:0c:55:d5:3c:d4:
         cf:07:03:93:ba:1d:d6:49:33:ce:48:b1:7b:a6:56:57:c5:58:
         3e:0d:64:df:b3:07:32:11:c1:fe:01:2a:08:28:f0:bd:ae:0f:
         3d:97:91:05:05:26:47:86:3b:c9:46:ba:76:69:81:48:ec:d7:
         8b:f1:cf:f4:31:e6:c4:ae:d2:f6:e7:77:08:7c:3c:07:2b:49:
         cd:2d:57:59:67:b8:d3:11:27:0f:58:10:9b:16:b2:10:f6:0b:
         47:c8:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:39:33 2025 by rpki-client