Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          ptjqrBeCNx51fswbsZINRR3/+N7a57OjJnfo5sOnwuQ=
Subject key identifier:   B1:70:24:A9:D3:2A:1A:EE:D5:86:98:6C:9D:FB:CC:DF:B3:0F:0A:9D
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       01C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          01C0
Signing time:             Thu 23 Oct 2025 04:29:45 +0000
Manifest this update:     Thu 23 Oct 2025 04:29:44 +0000
Manifest next update:     Sat 25 Oct 2025 04:29:44 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: Hsf2tRSFiW0xHxoSNg1WAr+kuBVzuvSg99TyO3rF/Z8=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Oct 2025 00:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Oct 23 04:29:44 2025 GMT
            Not After : Oct 25 04:29:44 2025 GMT
        Subject: CN=68f9af38-3997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:df:40:6a:b9:13:ee:3a:36:6e:53:ff:22:
                    a3:eb:f2:58:ac:33:5d:69:bb:c8:65:2f:e6:06:e1:
                    c7:9a:ba:f4:b8:e4:2e:9e:79:e3:1f:76:e9:23:1d:
                    84:4c:d4:a8:25:83:0f:cd:f1:e6:47:5e:93:8a:99:
                    de:9d:6f:f8:9e:0f:83:7f:28:84:10:d0:4e:e9:40:
                    69:6b:b9:33:12:c1:95:b5:77:49:14:0c:5b:ed:39:
                    11:93:b1:04:9a:ed:9f:ab:80:b9:e0:f9:83:3e:c3:
                    94:94:71:31:a5:a2:31:00:b6:7b:75:5c:87:b7:40:
                    bf:76:5a:42:b0:c5:5c:a8:8e:f2:ea:4d:41:48:bd:
                    bb:2a:30:7f:9b:04:9f:e9:9e:cd:1c:ab:76:0d:4f:
                    cd:f0:19:10:0f:e0:e7:53:48:58:8f:60:30:4f:1d:
                    8c:cb:97:0f:3e:99:20:40:28:c0:ac:80:98:7a:6e:
                    d8:a1:c2:5d:52:d2:86:d6:9a:09:49:11:ff:38:11:
                    4b:06:c6:41:1c:6a:ba:a7:f7:1e:5d:0a:8d:43:f1:
                    1a:9b:14:cd:8f:b7:7b:c7:c8:e8:34:95:d0:48:fd:
                    44:3e:11:68:ec:5c:38:35:71:94:da:e2:f7:c4:c5:
                    65:dd:da:d1:3d:8e:cd:97:31:76:26:96:b4:e7:05:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:24:A9:D3:2A:1A:EE:D5:86:98:6C:9D:FB:CC:DF:B3:0F:0A:9D
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:b8:53:a7:32:2f:44:8e:0f:1a:d3:76:90:b9:8c:54:d8:
         5b:08:70:fc:6d:5e:2b:88:50:89:89:93:80:26:f8:48:cd:d5:
         21:8c:c1:19:4b:57:dd:f4:73:ca:1e:42:ae:0a:3a:cb:3b:7c:
         2c:37:7f:21:6a:f6:ce:25:98:ca:85:eb:be:63:f3:9d:04:0e:
         a6:26:0e:ed:f5:b5:96:4f:98:90:45:b6:27:b7:92:46:6b:a0:
         8f:3b:88:bf:11:2f:1d:5c:af:88:63:16:db:5d:27:48:09:e9:
         42:d4:5f:da:81:87:cd:59:f9:29:7b:03:c5:96:89:20:ed:22:
         26:c0:e3:3a:ba:42:7c:15:90:d7:21:bb:e8:4e:00:f4:32:f9:
         14:93:4d:ff:cc:be:7c:9a:00:ab:39:5c:e5:36:ff:c0:c9:43:
         65:ae:a0:f1:ee:b3:3b:fb:fb:f6:cb:59:d4:25:81:a0:91:51:
         f9:f9:f7:dd:ff:91:00:f5:b2:d1:22:67:36:a5:98:1c:6e:06:
         ef:75:57:e0:e6:ce:0a:51:cd:1c:f9:55:56:b4:4d:5d:c6:96:
         10:27:a9:b5:45:71:c1:c7:b5:b9:3a:dc:5a:0b:7c:05:46:8b:
         02:15:86:d8:a9:1d:96:66:3c:b8:74:20:88:fa:15:99:a3:58:
         53:f3:1b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:59:49 2025 by rpki-client