Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
File:                     qv9F7YLc9bhYA4mULVnp0p9bwuE.mft (raw, json)
Hash identifier:          Y2xQIidLOF1eIzdVmYKVz6gcp3L2407GDvU1zVQwnPc=
Subject key identifier:   CA:FE:2C:94:73:B7:3F:BD:7E:8E:AC:51:39:30:0D:70:DF:31:5F:A1
Authority key identifier: AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1
Certificate issuer:       /CN=F36E0972AF/serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
Certificate serial:       02AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
Manifest number:          02AC
Signing time:             Thu 18 Sep 2025 03:53:02 +0000
Manifest this update:     Thu 18 Sep 2025 03:53:01 +0000
Manifest next update:     Sat 20 Sep 2025 03:53:01 +0000
Files and hashes:         1: qv9F7YLc9bhYA4mULVnp0p9bwuE.crl (hash: SbYxJiKwPYAe7IlWmlyoweeT2P8kI2e7uB2LTH74P4Y=)
                          2: 17B6FBFE87C911EEBD3EF6264AD9E6FC.roa (hash: 5ZD1WUDmaiv05T51fwwZBTVbvUWprAEi25d+4iZwaOA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0972AF, serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
        Validity
            Not Before: Sep 18 03:53:01 2025 GMT
            Not After : Sep 20 03:53:01 2025 GMT
        Subject: CN=68cb821e-85ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:c5:48:81:01:a3:10:a1:fd:2d:7a:30:ee:
                    88:46:8a:56:d8:b5:1c:c1:cd:61:89:e1:e2:0d:06:
                    3e:31:a5:3a:97:75:26:fd:78:87:6b:48:04:12:76:
                    85:30:2a:76:fd:4d:8d:fd:31:ac:7c:f1:fc:22:b5:
                    99:3d:4e:a0:0b:04:8e:0b:bf:75:b6:30:35:62:09:
                    36:6a:0e:fa:ad:d0:44:e5:37:e8:87:b6:66:e6:bc:
                    62:1c:f2:5f:bb:a3:bd:3f:35:54:36:40:b7:d4:c7:
                    56:2a:ff:f1:bf:44:8e:67:63:01:0e:1a:0a:90:21:
                    c4:34:f4:be:45:35:55:94:af:85:0a:21:14:cf:cf:
                    c5:f6:2a:10:de:b2:e1:f4:c1:1a:24:c1:04:b7:30:
                    27:7a:ae:65:e5:11:02:3b:9e:71:bd:34:19:bb:7d:
                    9a:c8:32:90:63:1c:6d:8b:aa:d7:52:fc:1b:94:f7:
                    55:9b:d2:10:e9:32:a0:38:d9:6d:e6:bd:2f:a8:a5:
                    4e:1e:56:e0:e8:ee:9a:fb:be:be:6b:53:b5:55:d6:
                    3e:7f:0d:d6:62:00:14:e7:5d:9b:2f:64:e5:e7:0f:
                    88:d6:d7:23:82:23:50:84:e4:65:c3:2f:cd:ce:c2:
                    5e:ac:fc:d6:32:94:d2:f6:9a:57:95:d4:47:0b:36:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FE:2C:94:73:B7:3F:BD:7E:8E:AC:51:39:30:0D:70:DF:31:5F:A1
            X509v3 Authority Key Identifier:
                keyid:AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:c5:5b:ac:bd:02:64:a7:0e:a3:65:46:6b:c8:83:54:00:
         79:db:3f:ec:85:ed:a8:cb:e5:ff:e7:f8:30:56:13:ea:73:88:
         72:50:e3:52:55:61:dd:5a:45:6b:6b:68:51:ed:d7:49:fc:84:
         31:f5:e4:e6:4c:ca:7d:df:7e:ee:d8:0d:c1:d3:42:f8:60:aa:
         e1:80:47:52:85:ad:95:32:68:a3:35:3c:bc:39:ac:0d:fb:53:
         17:94:da:ce:b0:ad:c3:b6:89:de:9a:68:a8:2b:68:ed:fd:59:
         67:ca:a6:97:87:85:2c:b9:11:41:31:43:e4:65:7e:01:74:de:
         7b:45:35:0f:11:ac:20:4a:02:c6:15:3a:74:f2:ea:55:3a:06:
         58:d4:f4:a8:cc:7f:51:12:05:b9:88:fc:2c:9a:db:d0:5f:32:
         95:12:be:d0:9c:b8:e6:57:6c:8e:de:2e:15:a2:16:23:00:6c:
         ec:22:7e:85:7c:3f:d5:43:27:7d:b3:dd:d1:3d:f7:ba:20:c6:
         5a:3d:e7:2a:57:d9:95:44:e7:d7:65:11:15:26:3e:98:6e:17:
         ac:15:2d:15:3b:99:5b:8e:b0:ba:0b:7f:24:cf:b4:0a:7b:51:
         ee:24:c2:4e:7a:16:f2:12:fe:33:22:5b:64:3a:3c:89:90:6b:
         c0:80:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:34:08 2025 by rpki-client