Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
File:                     _JRbBmroeaYb32_LGIWcV6LnFtA.mft (raw, json)
Hash identifier:          aMALKOVFTMiaiDESc9Oilcj9KJmnFXSq6IWGWHZBM6Q=
Subject key identifier:   B9:EA:9B:7A:69:48:0E:37:46:7C:F5:73:7A:AA:2E:0D:C6:25:A2:20
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Certificate issuer:       /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial:       064F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
Manifest number:          0648
Signing time:             Wed 17 Sep 2025 02:14:37 +0000
Manifest this update:     Wed 17 Sep 2025 02:14:37 +0000
Manifest next update:     Fri 19 Sep 2025 02:14:37 +0000
Files and hashes:         1: _JRbBmroeaYb32_LGIWcV6LnFtA.crl (hash: tTPWjTZeYDfHG8UuKyDKK4y0mZzu0YJn4L/ylr26ms4=)
                          2: 9E14C3CCA2DB11ECAC4872A95A40D577.roa (hash: sqHCz7QhDeQNCk+Oi9HPhFuqRLltffe8AfdV9zemzA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D518DAF, serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
        Validity
            Not Before: Sep 17 02:14:37 2025 GMT
            Not After : Sep 19 02:14:37 2025 GMT
        Subject: CN=68ca198d-8ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:05:99:0c:7c:8a:03:40:69:85:6b:33:e4:
                    c7:71:30:c6:85:01:12:a4:2c:c3:84:55:34:14:4b:
                    aa:44:f5:d6:a6:d4:bd:09:16:f9:a0:37:0b:1f:45:
                    21:aa:a3:5a:4c:e0:3c:f5:96:92:19:62:12:0a:2b:
                    27:d8:69:c2:2c:7c:04:4c:b0:30:d0:92:cc:f8:e9:
                    bf:56:5e:b6:fa:49:43:a1:a1:ad:a4:94:dd:99:ee:
                    50:c4:d0:c0:fa:16:85:7b:77:25:27:fc:4b:ee:6a:
                    71:48:62:b1:58:e6:9b:ea:b7:24:4f:a4:29:d3:67:
                    cc:35:90:57:3d:1f:fc:2c:ef:ea:d9:69:43:39:6d:
                    0f:e2:cf:4d:aa:1b:0c:d4:22:5b:39:d6:8f:52:fa:
                    1a:f4:ec:c9:24:3f:7b:53:a9:3a:9d:e0:e6:6c:2e:
                    c2:f1:35:df:8c:7f:2d:31:e7:88:71:3c:d2:02:bd:
                    65:41:15:9a:96:37:c8:80:c4:5e:0d:3e:e1:b5:e2:
                    cb:0b:21:c8:6d:66:aa:32:99:9d:62:bc:80:2e:61:
                    5a:2c:88:75:8d:c3:ce:67:d3:cc:4b:a4:b8:2b:16:
                    da:2c:4b:c2:a8:4b:bc:eb:72:97:a0:a1:62:97:c5:
                    60:a0:d2:30:34:69:d3:bc:50:4d:67:eb:4c:ae:62:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EA:9B:7A:69:48:0E:37:46:7C:F5:73:7A:AA:2E:0D:C6:25:A2:20
            X509v3 Authority Key Identifier:
                keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:81:76:35:10:b0:db:75:dc:56:a0:1b:13:33:52:2e:60:
         93:30:97:15:29:6d:31:2f:96:c9:25:bd:82:85:79:e1:80:13:
         12:aa:7e:da:3f:7a:38:f0:25:85:8e:66:91:ad:11:19:2e:b8:
         4d:b0:35:b2:5e:d3:f4:6f:3a:6f:db:8f:40:a4:19:4b:bc:2f:
         ca:c2:0e:e6:3c:3a:90:f7:ad:6f:4a:a3:0c:40:bb:ff:9d:e1:
         2e:e5:36:45:98:a6:27:f9:da:46:8b:4e:ce:a8:fa:6a:b2:fc:
         8d:f8:ce:3f:44:ab:de:91:c0:7d:31:28:85:be:f4:9b:b6:e6:
         4a:5a:eb:42:15:b3:5f:0a:78:44:3a:bd:6a:ad:7b:40:b0:11:
         87:74:d6:81:34:a1:50:8f:8c:f6:97:52:d2:77:c9:e3:6e:ee:
         42:99:50:2e:a1:2a:ce:ac:04:c5:b9:de:85:9d:7e:45:41:01:
         83:fc:3c:40:b6:29:e0:e5:13:93:91:86:12:02:eb:53:16:8e:
         a6:80:f2:69:13:d1:16:22:c0:0e:bc:c8:08:fa:a1:10:d7:08:
         96:6d:31:c4:61:26:77:db:5e:e4:ea:62:02:09:17:d0:9d:10:
         67:0c:80:f8:fd:6e:2d:1e:83:d2:18:7e:4d:9d:1a:fa:bf:73:
         a5:ed:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:16:32 2025 by rpki-client