Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          vDQoXM56gzF+OEzIFYsjwJlie5uWh2nSnUOfnyYUFvE=
Subject key identifier:   9F:A3:28:25:77:03:33:92:A9:58:4C:F1:92:EA:1B:4F:C1:C7:21:DC
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       018E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          018D
Signing time:             Wed 17 Sep 2025 04:31:01 +0000
Manifest this update:     Wed 17 Sep 2025 04:31:01 +0000
Manifest next update:     Fri 19 Sep 2025 04:31:01 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: d47kG5+yx4RP5c7EYf9wUmuGTPEKKAyYVvObdWbhr/s=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Sep 17 04:31:01 2025 GMT
            Not After : Sep 19 04:31:01 2025 GMT
        Subject: CN=68ca3985-5184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:85:42:11:93:25:03:d0:f8:51:73:53:d5:
                    fc:a8:5a:da:80:78:db:94:e2:35:17:8e:83:0f:f7:
                    81:36:93:e8:71:0d:dd:7c:85:a7:88:37:07:50:5f:
                    34:d4:56:6a:46:e2:5d:38:72:4e:f1:2d:d0:26:aa:
                    c7:2b:3b:b6:75:61:57:44:a8:8c:ad:86:ff:f5:d9:
                    33:9f:51:77:45:c4:a1:ac:a1:2e:e8:e2:0d:a7:43:
                    5a:e6:40:f3:c6:de:b9:4e:8f:51:f1:11:38:88:28:
                    1f:fe:2e:98:0d:03:46:d8:6f:01:65:4d:35:a5:66:
                    f9:7f:ed:3f:26:95:05:ae:01:c7:c2:26:7f:51:8f:
                    ee:e9:79:99:27:4e:11:b8:2d:d8:fe:8f:de:a6:2b:
                    66:5c:3b:d1:e9:40:fa:af:e3:cf:3d:4a:3a:67:22:
                    77:55:1f:bb:8e:fe:52:99:34:9d:b4:d3:5f:38:82:
                    f2:94:01:db:0a:05:0a:e1:37:48:9c:e0:f0:05:ed:
                    b7:4d:cf:15:ef:8d:3d:c8:78:cf:72:eb:0c:f3:6e:
                    60:46:23:bd:26:a5:35:47:c3:0b:3f:a0:23:a0:51:
                    50:18:a1:b4:98:49:51:16:91:36:c0:f4:2f:15:19:
                    0b:a2:bf:c0:d8:d7:5c:5d:a3:43:8a:c3:36:5b:d5:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:28:25:77:03:33:92:A9:58:4C:F1:92:EA:1B:4F:C1:C7:21:DC
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:7e:e3:64:00:e2:7f:f0:30:dd:8c:db:6a:b2:4f:52:70:
         c2:b7:61:62:2c:73:f5:47:93:c4:13:63:c1:d2:6f:06:bf:13:
         0c:89:9f:6e:40:34:da:cb:52:1f:d5:fd:49:81:8c:10:84:11:
         76:61:e2:bd:a5:16:66:7b:e0:07:da:a0:0f:ef:77:f3:da:bb:
         20:9b:a2:b9:cb:95:eb:a6:0c:64:d4:03:25:ee:d4:12:a5:12:
         f0:40:72:6b:67:c9:b2:31:71:80:c8:c4:08:50:cf:49:f1:b7:
         22:9a:c9:22:f5:70:e9:1e:f1:7b:88:32:96:2a:58:90:54:11:
         23:88:39:34:5e:e7:6b:77:1a:88:36:e7:fb:7d:7d:c9:12:55:
         4e:1e:7f:92:11:9a:68:05:b7:33:f6:b2:83:23:9d:f2:35:ba:
         d1:16:fe:dd:1a:ae:61:6c:62:a8:77:46:b6:56:cb:c7:13:f5:
         61:bb:ad:66:2a:c1:67:1a:7b:2d:1a:5f:38:89:19:1a:59:01:
         1e:52:72:93:60:49:80:c5:bb:ca:18:c7:50:fa:14:e6:5e:b4:
         65:3f:9c:9f:be:d8:69:8d:bb:00:1d:b4:56:89:ca:7e:b9:14:
         34:31:67:b4:a5:42:32:d4:39:ee:1a:34:43:b7:39:c2:b4:e0:
         a5:83:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:38:42 2025 by rpki-client