Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
File:                     f5DbGDX56nljonlPXDJUNY30PvQ.mft (raw, json)
Hash identifier:          F8+MpUxBdZLvHl3A+cXWoGaMIRPxuBmvZbBoAJClRfk=
Subject key identifier:   1C:69:35:0F:13:20:04:03:95:E2:90:93:42:A4:37:47:37:D7:2E:3A
Authority key identifier: 7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
Certificate issuer:       /CN=F36B9B8FAF/serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
Certificate serial:       01B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
Manifest number:          01B8
Signing time:             Wed 17 Sep 2025 04:23:39 +0000
Manifest this update:     Wed 17 Sep 2025 04:23:39 +0000
Manifest next update:     Fri 19 Sep 2025 04:23:39 +0000
Files and hashes:         1: f5DbGDX56nljonlPXDJUNY30PvQ.crl (hash: cUimGUrxMxSZE8uUQStranTVP7l0KFrZ8tcdxSIpSQk=)
                          2: 7921BA68440811EFB7E56F6E762E951A.roa (hash: OFKWVelsleyjCktlWeukpXxjLHKBpGPL6o0/dWVRFWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9B8FAF, serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
        Validity
            Not Before: Sep 17 04:23:39 2025 GMT
            Not After : Sep 19 04:23:39 2025 GMT
        Subject: CN=68ca37cb-98b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:71:63:f3:6f:5d:92:8e:97:4a:1d:54:2b:
                    62:dc:6d:c9:1e:0d:a2:d1:48:97:dc:68:7a:a7:54:
                    71:78:7e:4a:06:02:e9:a8:5c:89:16:bf:4d:58:be:
                    9f:20:ce:64:0d:c2:17:22:dd:24:50:ad:c5:71:5c:
                    28:b0:c6:84:9a:53:23:67:e7:1c:88:28:38:db:73:
                    e6:b1:f2:44:f7:60:13:cc:99:f2:cb:85:6f:f6:8c:
                    ed:58:1b:c8:f6:fd:c8:d1:84:c5:43:30:2b:18:ff:
                    64:e6:0c:a7:be:a6:ea:94:d6:bc:72:15:e7:44:67:
                    61:83:bc:1c:2b:79:8e:9a:c1:d6:17:50:b9:3a:e5:
                    35:f8:a6:90:b4:a9:4c:0d:ec:98:a8:31:16:65:a5:
                    07:fa:74:4f:a6:7c:5e:a7:83:f2:8e:16:9e:50:94:
                    06:13:67:41:7e:ef:13:7f:5d:07:0b:a3:46:9f:10:
                    68:c4:e7:7e:30:21:d6:62:da:d1:11:4a:1f:c5:9f:
                    3b:54:52:9b:8f:9f:ed:69:82:71:1d:f0:49:e2:4d:
                    b6:85:ec:4f:ac:99:d5:3b:16:87:b2:cf:00:08:33:
                    a3:92:b9:ed:58:7b:8f:02:52:f6:18:1a:88:32:61:
                    1f:4e:e2:45:c3:79:04:bd:97:71:46:71:81:64:5a:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:35:0F:13:20:04:03:95:E2:90:93:42:A4:37:47:37:D7:2E:3A
            X509v3 Authority Key Identifier:
                keyid:7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:f4:23:f4:03:62:28:48:de:44:4d:86:0b:55:9b:e7:6b:
         25:58:94:97:f0:68:ef:5a:0f:f1:00:d7:b8:7b:29:50:bf:88:
         08:ea:01:92:1a:36:07:07:9c:14:64:ea:b4:61:1e:4f:c2:b7:
         3d:3f:0f:17:26:88:bc:ff:d8:6b:00:4d:de:f2:67:8e:07:58:
         32:49:b8:4a:4f:40:02:c2:ad:ee:81:b4:fb:a2:75:a4:05:d5:
         c5:e7:37:fb:62:64:a7:36:09:69:66:47:ab:47:28:8f:b2:91:
         2c:35:60:21:00:ce:6e:51:8f:4a:d4:b9:09:63:94:6e:1d:c2:
         16:a7:90:42:5a:e7:fe:8d:72:0a:f6:32:d9:fd:de:9f:37:d0:
         cf:71:b2:0b:2a:51:55:e7:5f:5a:fd:d2:d9:d7:ce:69:f0:a1:
         83:66:a3:7a:f9:10:bc:97:d7:0c:70:91:91:41:dc:7c:6a:82:
         2c:e1:53:1a:1d:6a:53:73:84:2f:ad:23:67:70:20:49:6d:4a:
         ee:f5:a1:49:e1:d9:45:9f:3e:8f:70:8a:33:63:02:92:38:dd:
         c3:3a:1e:e4:de:80:85:e1:77:b0:49:fd:a9:fc:7b:87:dd:d6:
         87:f3:30:de:df:37:ec:c4:69:f9:ba:aa:c3:e5:ac:35:07:25:
         12:67:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:03:51 2025 by rpki-client