Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
File:                     w65QOim-1QyTfBVKYYkTncTGHIM.mft (raw, json)
Hash identifier:          ODNN144IHG/FA48zXXVRUGCsaHaqS9fl7z4d8uol9uE=
Subject key identifier:   2D:DF:44:7D:5B:C2:DE:55:D7:0C:0D:7D:36:D9:AD:D1:5B:81:98:B9
Authority key identifier: C3:AE:50:3A:29:BE:D5:0C:93:7C:15:4A:61:89:13:9D:C4:C6:1C:83
Certificate issuer:       /CN=F36C52E6AF/serialNumber=C3AE503A29BED50C937C154A6189139DC4C61C83
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w65QOim-1QyTfBVKYYkTncTGHIM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
Manifest number:          1B
Signing time:             Wed 17 Sep 2025 05:13:49 +0000
Manifest this update:     Wed 17 Sep 2025 05:13:49 +0000
Manifest next update:     Fri 19 Sep 2025 05:13:48 +0000
Files and hashes:         1: w65QOim-1QyTfBVKYYkTncTGHIM.crl (hash: tRvdAmVguBXAItLLFL4bZgmdoSzbuV4MUzrEfhqZabA=)
                          2: 1C69F6C081B811F095573EE9DAE4EC9C.roa (hash: KbI9ucB4f9JH39XALKEY3t2+qdSeCHt4BU89HAR/5iY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w65QOim-1QyTfBVKYYkTncTGHIM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C52E6AF, serialNumber=C3AE503A29BED50C937C154A6189139DC4C61C83
        Validity
            Not Before: Sep 17 05:13:49 2025 GMT
            Not After : Sep 19 05:13:48 2025 GMT
        Subject: CN=68ca438d-8cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2e:25:24:28:3a:88:c6:2e:8b:f2:d0:c9:94:
                    12:7e:f6:48:f6:82:b4:da:70:bf:03:ad:c8:df:63:
                    93:22:e5:25:10:4e:49:52:cc:53:3f:5a:3c:72:de:
                    b8:7a:45:c1:1e:db:3c:14:44:c9:4a:62:5c:75:1d:
                    f0:22:bd:2d:0c:31:ba:4c:72:08:dc:d1:08:8c:0b:
                    0a:d7:aa:74:e2:f5:c2:43:97:7a:45:e4:cc:cb:6e:
                    df:31:3d:da:45:76:8e:98:e8:91:13:63:74:21:64:
                    60:b0:5a:2f:13:89:0b:9c:66:49:e3:28:73:ce:3f:
                    e5:97:e8:bd:4f:e9:e7:26:2d:e6:78:a5:f5:53:9b:
                    30:e1:15:21:7c:43:f7:ca:f6:df:80:39:f1:2e:3b:
                    79:7a:e8:fa:fb:48:2e:96:05:00:ef:83:11:bb:d4:
                    c8:e7:37:aa:33:ce:76:6d:93:42:2b:39:8f:3b:8b:
                    bd:93:1d:5f:9c:08:a4:6b:bf:62:8a:38:c2:41:41:
                    23:1d:24:10:11:6d:ce:73:99:08:4c:0f:5a:1d:49:
                    0b:d9:97:ea:a2:5c:07:f8:18:c5:ee:fa:16:97:a9:
                    4e:b6:0f:f6:9b:73:6c:fb:96:e7:36:23:81:32:16:
                    40:31:e8:6f:e0:87:8a:32:51:e1:26:ad:87:11:5a:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DF:44:7D:5B:C2:DE:55:D7:0C:0D:7D:36:D9:AD:D1:5B:81:98:B9
            X509v3 Authority Key Identifier:
                keyid:C3:AE:50:3A:29:BE:D5:0C:93:7C:15:4A:61:89:13:9D:C4:C6:1C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w65QOim-1QyTfBVKYYkTncTGHIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:c0:24:de:48:b5:a2:25:f7:e9:65:8c:7d:7b:1a:d8:56:
         06:72:12:ba:45:7d:f2:ff:07:56:1d:bf:eb:a4:2a:b8:5b:e1:
         2e:4c:88:ef:d2:b4:a1:a6:2e:90:02:66:63:62:4d:0d:5a:e0:
         e3:56:36:9e:69:e3:6f:08:81:aa:dc:c6:a8:85:67:32:8b:79:
         1c:bf:b7:16:4a:d6:98:67:0f:f2:80:88:24:db:7e:9d:31:92:
         95:27:29:53:b1:dd:25:9d:f6:85:f4:8b:d3:e7:af:45:58:6a:
         81:bc:e0:fd:df:7f:f9:23:08:2d:2f:fc:3e:fb:52:ea:fe:da:
         c9:47:a4:69:bb:7e:35:63:f2:de:86:f9:36:24:a1:f4:96:18:
         ea:88:d1:a2:4b:87:1a:7e:76:fd:fc:93:d5:8c:ff:c6:e7:7c:
         cb:46:6a:ea:2f:c5:aa:ca:e9:b3:77:87:95:58:57:75:bd:57:
         8a:9d:d6:e0:52:47:5c:d6:2b:1d:82:9a:54:1f:1d:72:d1:6f:
         1f:c4:7e:07:9c:10:7d:74:d1:da:39:99:b5:d6:91:da:80:45:
         52:1e:6b:79:51:83:71:39:61:15:e8:f4:1e:6e:21:30:bc:16:
         ff:fe:26:25:21:ae:86:b3:a5:15:e2:5f:1e:66:64:1a:5b:28:
         0e:fa:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:19:38 2025 by rpki-client