Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
File:                     SdbI5u983B6XdR7zkR1lCLYMIp8.mft (raw, json)
Hash identifier:          OzhRLoLGiERKS1jVdWnqNWRDXhwHPJZBQFin3Vzo09U=
Subject key identifier:   4D:D2:E6:84:BF:1C:29:6D:F1:B2:C1:92:6C:FE:0F:E5:A9:EC:64:6D
Authority key identifier: 49:D6:C8:E6:EF:7C:DC:1E:97:75:1E:F3:91:1D:65:08:B6:0C:22:9F
Certificate issuer:       /CN=F36C3523AF/serialNumber=49D6C8E6EF7CDC1E97751EF3911D6508B60C229F
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
Manifest number:          05DD
Signing time:             Thu 18 Sep 2025 02:24:11 +0000
Manifest this update:     Thu 18 Sep 2025 02:24:11 +0000
Manifest next update:     Sat 20 Sep 2025 02:24:11 +0000
Files and hashes:         1: SdbI5u983B6XdR7zkR1lCLYMIp8.crl (hash: 2VZZ48ATjgdiEAtZq2jGQIiDpTVvZOS7VZVJQDLuD3k=)
                          2: FCF10AB0177E11EC84E7E317D8A014CE.roa (hash: HPeV5JmUdMTQYeBgBaFOsrkpgeUYi5t/R0s6LNiDl1A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3523AF, serialNumber=49D6C8E6EF7CDC1E97751EF3911D6508B60C229F
        Validity
            Not Before: Sep 18 02:24:11 2025 GMT
            Not After : Sep 20 02:24:11 2025 GMT
        Subject: CN=68cb6d4b-6ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:2f:cf:cf:6e:67:b6:43:f7:59:e5:02:19:
                    84:20:1e:03:7b:32:f0:8b:79:56:dd:7b:0a:a7:66:
                    ba:f1:4e:96:68:e8:40:44:ee:aa:de:c6:1b:89:cb:
                    73:f8:c0:a1:e2:4f:d4:88:1a:57:d9:66:5e:ef:87:
                    86:76:99:10:c7:85:49:97:d9:44:56:49:ea:5f:cf:
                    bd:82:cb:22:97:67:bc:7f:ae:12:76:42:60:cf:b3:
                    40:db:49:48:13:41:07:1c:50:ee:86:c0:a5:f1:39:
                    b1:ae:de:da:47:03:de:9e:2a:0f:82:a4:ae:71:16:
                    e3:85:32:e3:20:a3:98:4a:a9:91:fe:b0:b0:75:38:
                    11:de:e1:d1:54:df:3d:31:3d:27:de:34:3d:cf:c8:
                    ba:41:18:3e:b9:53:88:47:3a:83:a5:91:c3:b4:b6:
                    47:8f:5d:ba:dd:32:4c:e9:10:fd:63:8c:bd:52:71:
                    8b:18:5b:c1:cf:f7:05:ee:6f:e1:de:57:5d:b9:8d:
                    e5:ac:8e:53:2f:eb:0a:f6:95:f1:22:82:51:5b:3f:
                    c4:1d:dd:5b:24:1c:11:c7:32:dd:c8:12:c5:a6:40:
                    b0:e7:c8:6f:68:8c:7f:b4:3b:b8:ca:05:21:6a:69:
                    c8:d8:bb:47:74:02:b7:9e:07:6e:de:e1:a1:86:7f:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:E6:84:BF:1C:29:6D:F1:B2:C1:92:6C:FE:0F:E5:A9:EC:64:6D
            X509v3 Authority Key Identifier:
                keyid:49:D6:C8:E6:EF:7C:DC:1E:97:75:1E:F3:91:1D:65:08:B6:0C:22:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:95:d5:89:90:cb:b3:b6:18:06:70:ad:50:8f:26:0b:26:ee:
         dc:e1:39:72:73:66:bc:ca:c9:57:59:12:d6:90:be:01:4c:d7:
         5b:d4:71:1e:ad:b1:77:43:96:43:39:68:55:cf:4a:5a:d5:52:
         d9:fe:c8:3c:66:32:71:af:66:e4:dd:9c:25:bd:d1:d9:66:b8:
         5a:8a:11:20:ac:de:7d:00:f0:85:7a:99:a7:2e:29:95:30:0f:
         53:75:24:39:37:3d:fb:38:c6:65:ca:21:54:d5:97:c3:84:0e:
         3e:46:7c:56:2a:01:06:0e:56:fe:04:47:e4:cb:d2:aa:9a:fc:
         80:67:28:84:a6:c0:c6:01:de:38:bf:f6:9b:29:c8:db:72:98:
         e7:9f:8a:66:8e:b2:84:dc:ed:70:8c:fa:a7:de:2a:a4:a1:af:
         c0:7a:8b:26:60:79:d2:14:89:1c:1b:a4:b0:82:53:3a:a4:d9:
         7e:c7:b9:f9:64:78:06:ae:66:d6:5b:aa:6b:a9:53:d1:1f:9f:
         7c:30:9a:29:a4:1e:17:6a:e6:58:d0:ad:61:48:e9:c4:ff:5e:
         8a:7e:31:5a:ca:0d:a1:e2:55:3c:54:07:7b:37:d9:56:d4:65:
         17:fb:cf:a6:09:28:d2:fe:d7:df:7a:a1:f0:7c:0d:58:93:68:
         57:a0:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:51:05 2025 by rpki-client