Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier:          UeAAwOyhqndPBV/ndYjSqop+6PVg2H+587DwsP3TndE=
Subject key identifier:   D5:AB:E1:1B:BB:72:5B:C3:21:EE:15:33:E5:AC:1A:CF:EF:B2:2E:49
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer:       /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial:       CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number:          C8
Signing time:             Thu 18 Sep 2025 04:53:19 +0000
Manifest this update:     Thu 18 Sep 2025 04:53:18 +0000
Manifest next update:     Sat 20 Sep 2025 04:53:18 +0000
Files and hashes:         1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: W6tLJ2PIVnV5IiU2bed7FTiAoLTxy4Ahn2YmgMaZQyA=)
                          2: 51D56DFEFE6311EF8981AA93762E951A.roa (hash: v1iecGoXLrBsavXRX1kf0YmMMDAB2gV9RZnpPeiZxzU=)
                          3: 81829ED6FE6411EF86C6749A762E951A.roa (hash: p0zc+GDWSPngPzC4UqPmM1kDzoimJaQE4vWQrsCXryc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
        Validity
            Not Before: Sep 18 04:53:18 2025 GMT
            Not After : Sep 20 04:53:18 2025 GMT
        Subject: CN=68cb903f-da12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:f7:84:2c:5e:c3:5e:ba:86:45:76:33:2b:
                    be:d0:ba:b0:92:53:20:65:63:e9:39:16:7a:e7:7c:
                    39:0a:b4:30:2c:fe:d3:9d:35:95:f7:15:51:52:2b:
                    f2:f3:13:32:7f:9f:4c:4b:81:61:ca:1e:0a:ab:13:
                    6f:d5:c6:93:10:c7:0d:d8:f8:2f:82:63:7b:fd:18:
                    c3:19:50:d9:b9:b0:9c:95:1f:6a:fe:8a:85:cb:e8:
                    d4:25:0d:58:b1:cb:69:7f:b5:ff:c7:3e:39:e5:63:
                    44:dd:d4:98:47:1a:00:29:7f:06:3b:74:e5:ff:6b:
                    0b:8e:76:0d:af:ce:2a:62:30:4a:34:16:cf:aa:82:
                    93:40:34:f3:e7:57:72:51:11:ad:19:05:af:fa:f3:
                    98:a0:d2:07:41:a4:8c:77:55:49:01:de:30:0f:56:
                    33:56:7e:6b:1b:84:f5:1e:71:58:5a:8b:35:d9:c7:
                    6a:4c:8c:b5:be:cc:11:82:aa:c1:2d:16:88:29:e8:
                    26:08:cf:4f:a4:1f:9d:0b:38:f5:8c:60:e8:fa:a6:
                    9d:19:db:fc:6d:5d:93:67:57:d7:91:f7:6e:bf:33:
                    78:21:f3:98:3f:a0:4f:7e:40:28:87:0f:3f:28:2a:
                    b2:7d:fc:23:bd:bb:cb:bd:9a:cc:e5:0e:1f:2b:03:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:E1:1B:BB:72:5B:C3:21:EE:15:33:E5:AC:1A:CF:EF:B2:2E:49
            X509v3 Authority Key Identifier:
                keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8a:b6:b8:e3:b9:4f:92:4f:bf:da:d4:69:b2:d0:66:9d:d5:
         a0:08:82:fe:06:3e:06:df:d2:2c:ea:ea:05:67:41:a0:e6:72:
         f0:b1:fe:7b:1e:fc:c4:2f:3d:da:d7:27:1b:80:dc:be:a5:74:
         bd:ee:6a:62:e4:e4:20:4b:99:2e:20:ba:fe:ec:f6:ba:ba:29:
         7f:f7:22:49:74:db:e4:14:86:5a:0b:3d:82:48:2a:b3:81:d7:
         92:0b:ea:51:ec:01:0f:8a:6c:26:41:e4:15:e6:7d:70:67:73:
         06:fe:83:47:22:c2:6f:27:43:85:4c:09:dc:6d:d1:b3:26:70:
         c7:18:1c:d0:85:44:60:c3:9d:5a:7f:7e:7e:d7:e0:39:a8:4f:
         dc:7d:90:67:07:d1:18:25:21:da:8a:9a:30:13:86:b1:a2:bb:
         e3:17:b0:d9:fc:76:03:c9:87:e4:c5:39:6e:57:7f:ac:7f:c2:
         33:d1:af:ad:af:42:db:e1:a6:0c:dc:eb:92:40:7a:5b:88:9f:
         41:24:34:ba:04:71:58:df:76:6a:2d:8a:ae:24:68:aa:d0:7f:
         e1:fd:1d:bb:95:4f:a6:70:3e:d9:cc:68:21:e3:79:89:ff:67:
         de:ca:ce:f5:18:09:86:65:ea:57:c2:de:32:dd:bf:48:89:50:
         83:a4:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:12:53 2025 by rpki-client