Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          SykveKVbnxSdV/wJfrHho8k9HKFahqnQjCyIN0vGexQ=
Subject key identifier:   AC:E0:72:56:06:46:E0:1E:BE:55:BD:24:64:F9:1E:FF:DB:3B:BB:42
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       014D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          014C
Signing time:             Wed 17 Sep 2025 04:40:59 +0000
Manifest this update:     Wed 17 Sep 2025 04:40:58 +0000
Manifest next update:     Fri 19 Sep 2025 04:40:58 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: fXkHZNOX6Dl8O8IVHXLCp5GLZ7VLYyeP2HrrtA/Xfq4=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Sep 17 04:40:58 2025 GMT
            Not After : Sep 19 04:40:58 2025 GMT
        Subject: CN=68ca3bdb-75c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:57:8d:86:90:55:f2:7e:40:93:ac:c9:76:8e:
                    7d:c6:76:f5:1b:1c:bd:13:16:a9:47:49:78:36:6d:
                    74:5a:5e:fd:fb:08:d3:9d:f6:47:c7:61:6f:69:36:
                    3d:69:24:64:41:6d:da:32:02:73:85:ae:fc:29:0e:
                    99:43:ce:de:ca:b1:db:57:20:f9:da:2d:45:30:b7:
                    db:de:18:3b:d5:67:06:b8:0a:37:63:cb:72:66:3f:
                    c3:8b:c3:de:41:ef:2f:a8:79:eb:14:1a:d6:5f:11:
                    9f:dd:60:21:33:3e:d4:d3:e3:86:f2:42:dd:f9:b8:
                    c7:ba:ae:1a:e5:e5:dd:2e:06:28:21:32:f2:d6:ba:
                    3f:76:68:87:e7:5f:d7:f8:8c:18:b8:09:88:68:de:
                    cf:18:89:b4:e9:da:d4:b1:de:2d:71:6c:ec:c7:36:
                    8c:4f:88:ef:90:63:b7:b4:ad:ec:50:80:93:18:35:
                    f9:5a:7c:ec:24:11:76:70:25:fe:14:3d:ef:05:09:
                    ac:04:0b:0d:03:2a:e7:3c:f8:f1:e5:a1:0c:01:6b:
                    8c:e6:0a:f5:1f:ad:be:4c:a8:71:04:e4:7f:2d:d4:
                    f2:e3:1e:da:e3:f2:06:80:db:e6:a3:0f:73:d1:69:
                    71:fe:a3:8a:2e:e2:82:97:7a:37:e7:c2:2f:03:74:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E0:72:56:06:46:E0:1E:BE:55:BD:24:64:F9:1E:FF:DB:3B:BB:42
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:00:78:00:92:c8:2a:7f:67:2b:89:d4:ab:53:71:d7:42:
         59:fa:7e:a9:bb:dd:06:02:da:8f:c6:a7:de:7b:37:c6:d3:26:
         4e:18:81:fd:57:a2:4c:17:2d:08:f0:b2:4f:51:a0:83:c5:d0:
         fe:d0:41:87:e5:28:1e:95:bd:fa:ed:d8:4d:ab:c8:1a:9a:9a:
         1c:4b:0d:14:c3:75:46:59:5f:08:32:ec:65:cb:7f:62:53:8d:
         4b:e4:f0:96:f6:3b:1d:86:dd:6a:71:82:44:0d:10:be:65:46:
         5c:a5:1f:de:18:e5:d2:e6:9f:4b:49:64:07:5e:a7:b4:7a:1e:
         e3:2a:c3:78:ef:26:7b:c8:01:5f:06:87:02:79:9a:22:2d:3f:
         44:4c:60:6f:44:e1:49:94:b9:50:52:cc:c0:2f:3e:fb:5a:81:
         09:be:3d:8c:3b:94:c9:c5:5a:96:46:67:1a:28:50:a1:16:13:
         ee:98:59:7b:d3:b1:93:f2:1b:5f:6c:3d:bc:63:3c:79:b0:66:
         20:f6:6d:88:aa:72:e8:af:84:4d:41:00:43:51:60:15:5e:37:
         33:05:bf:1d:b7:66:04:00:f7:89:32:a5:cd:99:ee:c0:02:02:
         b4:45:7d:98:ce:df:98:51:22:30:20:99:a0:cc:49:cd:f2:64:
         aa:2e:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:05:52 2025 by rpki-client