Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          0n5PFo6qVKK+Dm5tBYm39iUJqIETpsB7ci9H9QSJf34=
Subject key identifier:   94:97:56:E7:EF:DB:CE:81:77:8C:65:B7:67:9E:95:08:B4:98:66:27
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       59
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          58
Signing time:             Sat 25 Oct 2025 07:23:27 +0000
Manifest this update:     Sat 25 Oct 2025 07:23:18 +0000
Manifest next update:     Mon 27 Oct 2025 07:23:18 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: qs5Sfn0fCxPBeRDx9YWw5Y17k2HpjWopE61Rqr4DuVU=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 Oct 2025 00:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: Oct 25 07:23:18 2025 GMT
            Not After : Oct 27 07:23:18 2025 GMT
        Subject: CN=68fc7aee-6c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:b0:32:15:8b:5b:f7:70:b0:44:3e:ef:55:
                    9a:fc:7a:1b:d7:76:a6:00:9e:26:ae:e5:01:b4:97:
                    6f:4c:9f:05:09:af:4c:5c:1f:df:a1:d8:ae:f9:4c:
                    7c:6d:a2:27:1a:05:45:88:36:eb:aa:cf:3c:75:f7:
                    2a:a7:3b:98:1d:ca:d3:d2:b6:67:fb:df:42:dd:f9:
                    c9:ea:ec:92:3b:e0:2b:24:0d:e9:b5:68:f3:6c:52:
                    57:c1:52:fc:07:3d:08:99:1d:76:13:8c:2f:b2:26:
                    e8:c4:35:b2:17:32:51:11:28:ed:8d:c0:5f:88:bf:
                    80:fc:78:b4:72:b7:92:90:df:91:ba:6f:bf:4c:fd:
                    1f:8c:09:95:ed:09:dc:3f:57:a1:68:de:ec:2a:d7:
                    d4:02:a3:c5:ff:8a:66:37:c3:0a:ab:fe:48:c6:fe:
                    88:3d:aa:61:e7:4a:98:09:af:61:27:a5:62:c4:7b:
                    dd:43:79:fc:c8:36:69:d2:8b:e7:a9:b7:74:23:5a:
                    8c:0a:20:d3:64:64:75:26:57:f9:2d:b0:59:84:c6:
                    31:b3:52:0a:0a:cf:02:7d:d5:cb:7c:e2:51:ae:09:
                    2b:1a:b9:24:a1:77:36:96:69:e7:ee:90:b2:f4:95:
                    72:eb:62:41:59:df:49:19:19:81:96:98:5b:d1:43:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:97:56:E7:EF:DB:CE:81:77:8C:65:B7:67:9E:95:08:B4:98:66:27
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:37:3c:f3:01:0e:74:71:8d:cb:42:1e:59:87:be:ca:71:
         5b:27:15:91:ab:bd:ab:b2:59:3d:90:55:b8:08:ec:7d:ce:61:
         ca:1b:24:a8:79:74:77:13:a3:f9:52:b1:ff:66:5d:90:8e:15:
         79:0f:44:02:cb:4e:aa:25:bf:80:94:71:f2:5d:9f:70:1f:89:
         6f:2c:8f:c3:6f:2c:0a:93:c0:01:16:44:5e:a0:46:78:41:19:
         fa:fa:06:8a:aa:a0:06:6c:bf:fd:a8:7b:96:49:48:3e:b4:b9:
         22:da:f5:26:79:77:1d:2c:91:03:ea:e9:4a:61:f7:8f:6b:c9:
         5c:fa:1b:b3:f9:a5:fe:4d:4f:2e:5a:87:a3:46:2c:70:64:57:
         06:d3:b6:15:bf:33:16:48:ee:d4:b7:1c:94:b1:e4:15:28:4c:
         00:51:99:7d:4e:e1:cd:d6:97:3b:43:b6:5a:2e:7d:d7:25:be:
         c8:7c:f7:b9:0e:ee:23:c3:09:13:46:c9:6b:56:73:80:25:db:
         d6:62:02:61:a0:50:be:4c:11:35:db:6a:70:99:11:76:0f:29:
         ab:5b:26:d5:42:9f:f7:71:f3:5f:bd:7d:94:9a:fd:bd:f6:38:
         1b:15:32:12:c5:c8:88:90:63:b1:a4:c9:85:9b:67:3e:23:58:
         6f:42:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:35:34 2025 by rpki-client