Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.mft (raw, json)
Hash identifier:          cIDl/TqG+EmA/NJaVr5Ma8fE+NqdhM0zKU0XE1yaOec=
Subject key identifier:   2A:27:B6:79:31:5D:07:BC:FF:73:DB:70:E5:2E:3B:64:07:D9:84:7C
Authority key identifier: C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Certificate issuer:       /CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
Certificate serial:       0244
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
Manifest number:          0243
Signing time:             Wed 17 Sep 2025 04:07:03 +0000
Manifest this update:     Wed 17 Sep 2025 04:07:02 +0000
Manifest next update:     Fri 19 Sep 2025 04:07:02 +0000
Files and hashes:         1: wzA4fNIYxMz6UivFNddwdVvPe28.crl (hash: ycvi/TY1TCi20pCwlZdgG2+Njk4RLkXJ3wSV88zTYUg=)
                          2: D27A6A28D7C111EE8A342CA3775412E6.roa (hash: peA4+LIUnTnNHVNJXvAgPW0H2f9Uqrwu8nzHISX24Zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D591BAF, serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Validity
            Not Before: Sep 17 04:07:02 2025 GMT
            Not After : Sep 19 04:07:02 2025 GMT
        Subject: CN=68ca33e6-ad73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:a8:d1:87:ea:60:c3:ab:93:fe:26:25:34:
                    42:b6:dc:c6:e3:23:a3:62:a7:92:20:16:04:bb:c3:
                    d6:85:9a:fb:4f:eb:89:84:b8:cc:19:bf:29:b0:e1:
                    39:da:bd:e9:2f:a3:34:30:ae:44:29:4a:9e:56:09:
                    97:c4:18:47:75:69:22:1a:0a:12:4b:dd:c6:67:19:
                    2c:49:f2:36:0e:19:1a:c8:db:98:eb:4c:ee:58:37:
                    2d:10:a2:72:c7:35:69:cd:9c:7d:b0:46:6e:10:e7:
                    f9:ab:08:58:eb:36:33:4e:2c:4e:1d:98:e9:7a:8b:
                    35:51:5f:88:ef:af:eb:bc:55:9a:91:56:54:78:ca:
                    fd:dc:fa:45:04:b4:80:c5:ac:60:51:c0:20:c2:36:
                    f0:15:70:fe:b1:52:df:15:37:a1:e8:54:ef:7d:a3:
                    1b:87:12:48:ff:52:5a:fc:5d:06:89:c0:cd:7b:73:
                    ce:9e:fb:ba:3c:ad:6b:e2:13:e6:6a:5d:be:d7:b0:
                    c7:54:17:2c:21:16:4a:c3:be:d0:4f:56:3e:61:d0:
                    e8:24:91:87:3a:b7:b0:2d:cf:96:09:0d:c7:17:21:
                    8f:ac:e3:ec:29:ec:fb:2a:0a:46:07:d9:12:3f:a6:
                    10:91:71:bd:f6:17:cc:7e:13:8a:b4:9c:c7:5b:df:
                    f3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:27:B6:79:31:5D:07:BC:FF:73:DB:70:E5:2E:3B:64:07:D9:84:7C
            X509v3 Authority Key Identifier:
                keyid:C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:50:e9:c2:48:ed:cd:11:2b:2f:d6:9a:bf:57:94:b1:7e:fa:
         34:36:cc:60:0f:d7:8f:6c:71:8a:b2:88:38:59:c3:df:80:d7:
         2e:64:51:47:9a:aa:52:8a:87:37:71:85:28:f1:79:2a:c0:40:
         5f:a7:b4:2b:ad:cb:8a:a7:c8:a8:72:b1:de:74:07:df:cb:d7:
         00:5b:4a:e3:71:1f:ad:46:d9:a2:20:55:89:2a:cc:d1:1c:0e:
         fe:86:df:06:de:a6:37:69:3e:b0:16:5d:79:a3:e0:2c:c3:65:
         88:46:ec:be:12:68:15:25:65:85:6f:a9:ec:de:35:3b:9c:fd:
         84:ea:38:23:df:9d:ee:94:a7:bc:8a:e1:65:a3:8c:b1:bc:0a:
         1d:c8:aa:94:de:41:36:53:dc:2e:3f:d4:dd:2f:ec:91:00:d7:
         8e:44:c7:2a:01:6f:0c:b5:21:70:59:00:0e:ff:18:f9:88:92:
         a4:64:8f:3e:cf:38:ff:68:5f:a8:bd:d3:45:7b:58:1a:3e:c4:
         36:f6:b8:56:5d:0d:80:86:4f:20:71:25:1e:46:b3:e1:40:59:
         2d:e8:e4:f0:40:8b:d1:11:b3:24:d2:c1:d9:00:f3:6e:66:d9:
         4d:04:67:74:e9:76:fd:3c:25:80:93:0d:84:6a:67:f5:66:56:
         7c:ad:3f:f4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDU5MUJBRjExMC8GA1UEBRMoQzMzMDM4N0NEMjE4QzRDQ0ZBNTIyQkM1MzVENzcw
NzU1QkNGN0I2RjAeFw0yNTA5MTcwNDA3MDJaFw0yNTA5MTkwNDA3MDJaMBgxFjAU
BgNVBAMTDTY4Y2EzM2U2LWFkNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCTuKjRh+pgw6uT/iYlNEK23MbjI6Nip5IgFgS7w9aFmvtP64mEuMwZvymw
4TnavekvozQwrkQpSp5WCZfEGEd1aSIaChJL3cZnGSxJ8jYOGRrI25jrTO5YNy0Q
onLHNWnNnH2wRm4Q5/mrCFjrNjNOLE4dmOl6izVRX4jvr+u8VZqRVlR4yv3c+kUE
tIDFrGBRwCDCNvAVcP6xUt8VN6HoVO99oxuHEkj/Ulr8XQaJwM17c86e+7o8rWvi
E+ZqXb7XsMdUFywhFkrDvtBPVj5h0OgkkYc6t7Atz5YJDccXIY+s4+wp7PsqCkYH
2RI/phCRcb32F8x+E4q0nMdb3/O/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKie2
eTFdB7z/c9tw5S47ZAfZhHwwHwYDVR0jBBgwFoAUwzA4fNIYxMz6UivFNddwdVvP
e28wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ1OTFCLzFGNkI1NjdDRDdDMTExRUU4RjI5MTdBMjc3NTQxMkU2L3d6QTRm
TklZeE16NlVpdkZOZGR3ZFZ2UGUyOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3d6QTRmTklZeE16NlVpdkZOZGR3ZFZ2UGUyOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDU5MUIvMUY2QjU2N0NEN0MxMTFFRThGMjkxN0EyNzc1
NDEyRTYvd3pBNGZOSVl4TXo2VWl2Rk5kZHdkVnZQZTI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCUOnCSO3NESsv1pq/V5Sxfvo0Nsxg
D9ePbHGKsog4WcPfgNcuZFFHmqpSioc3cYUo8XkqwEBfp7QrrcuKp8iocrHedAff
y9cAW0rjcR+tRtmiIFWJKszRHA7+ht8G3qY3aT6wFl15o+Asw2WIRuy+EmgVJWWF
b6ns3jU7nP2E6jgj353ulKe8iuFlo4yxvAodyKqU3kE2U9wuP9TdL+yRANeORMcq
AW8MtSFwWQAO/xj5iJKkZI8+zzj/aF+ovdNFe1gaPsQ29rhWXQ2Ahk8gcSUeRrPh
QFkt6OTwQIvREbMk0sHZAPNuZtlNBGd06Xb9PCWAkw2Eamf1ZlZ8rT/0
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:22:20 2025 by rpki-client