Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          LNGchcip0LCvfQ6SVzx0KnLV5i5J+BjoMQUs/qmFiyw=
Subject key identifier:   CB:FF:27:9B:AE:BB:D0:EF:C5:FF:65:28:EB:E4:DB:02:6E:E9:54:FB
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       0802
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          0802
Signing time:             Wed 05 Nov 2025 01:49:17 +0000
Manifest this update:     Wed 05 Nov 2025 01:49:17 +0000
Manifest next update:     Fri 07 Nov 2025 01:49:17 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: XfNbGYL8/aDsdUj4URCQpmzYJeQuYGL9HrlV1blN/z0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Nov  5 01:49:17 2025 GMT
            Not After : Nov  7 01:49:17 2025 GMT
        Subject: CN=690aad1d-92f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:70:da:bc:44:58:5f:ba:ae:ee:66:61:5b:
                    41:75:35:35:09:c2:75:c8:0c:71:20:99:47:f3:2c:
                    14:08:4f:f4:f1:36:06:b2:d5:17:89:55:c7:79:c6:
                    37:23:5a:96:48:9e:47:0e:66:06:5b:93:41:b6:e0:
                    ad:39:6a:df:69:96:9d:e1:35:85:dd:74:0b:30:c5:
                    7e:d3:1d:f3:4f:e3:c8:5d:e6:38:03:dc:58:f8:c5:
                    fe:2a:c7:f1:06:9a:f7:a0:ce:ac:ff:f0:fc:df:a0:
                    52:e1:95:99:b5:5a:ca:bb:73:04:e9:14:83:ee:7f:
                    91:67:c5:ff:90:52:d2:62:b7:d4:47:a3:21:0c:b0:
                    8d:c1:8f:6e:ea:40:b5:6c:41:4d:15:7b:66:a3:35:
                    aa:18:a0:01:66:cc:94:0f:4c:89:b3:95:bc:36:f1:
                    68:ba:a4:26:80:04:6a:c8:e3:ba:52:5e:c9:f8:36:
                    9a:f4:56:68:6a:05:7b:49:62:89:41:6f:4e:ca:20:
                    c4:f5:e6:7d:71:51:9a:20:0b:05:72:00:a7:05:06:
                    9b:4e:5a:23:fc:a5:41:3d:b9:f6:7b:a7:4d:b4:c5:
                    d2:69:34:43:2a:6d:99:4c:04:30:8d:e4:c9:46:1e:
                    62:f5:07:99:bd:72:8e:14:3c:16:65:3b:04:86:30:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:27:9B:AE:BB:D0:EF:C5:FF:65:28:EB:E4:DB:02:6E:E9:54:FB
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:2c:2a:65:7a:81:2c:e3:9f:62:cc:96:c2:ed:96:f1:3f:
         fb:75:3b:08:52:82:97:48:17:d1:94:fd:ed:6d:45:27:b1:f3:
         c9:98:65:f6:ab:ca:7e:f2:9b:5c:54:3a:40:73:5c:05:0d:0b:
         e6:4a:49:57:ca:d3:f5:50:6e:9b:35:e6:71:95:c0:4b:25:8d:
         c8:8e:9f:c8:d1:d5:7b:cd:7d:51:84:98:45:b4:6f:fd:d4:bb:
         22:3b:58:bc:39:d2:07:9d:d0:fa:76:48:57:96:6b:66:de:c8:
         95:90:34:15:85:39:5e:98:49:4b:c7:80:ef:b9:10:bb:22:d9:
         2a:4d:62:db:b8:3c:37:28:83:ac:47:44:1c:64:fd:e4:7b:14:
         2d:26:64:9f:c7:0b:18:18:9e:f8:ac:fe:b4:29:92:7d:a2:a5:
         f0:5b:48:91:62:17:68:59:fb:28:49:fa:f3:85:ad:62:86:5d:
         d4:37:98:c0:44:ac:d0:33:42:5a:ef:4f:65:33:40:b7:6c:e2:
         60:68:80:89:b8:93:c8:1e:2c:bb:5d:d7:ae:32:53:3d:09:01:
         90:1b:ec:7f:1c:29:51:a7:47:13:71:d2:e4:e6:e4:28:33:9f:
         bd:fe:ca:3d:3f:42:1f:a4:0b:7a:dc:79:4a:29:b5:21:03:3a:
         6d:81:d7:e9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTZENkZBRjExMC8GA1UEBRMoQjYzMkRDNEFFNTNBNUUyQTU5QjU1QkY1QUFDN0Mx
NDkxMEMxNEQxNjAeFw0yNTExMDUwMTQ5MTdaFw0yNTExMDcwMTQ5MTdaMBgxFjAU
BgNVBAMTDTY5MGFhZDFkLTkyZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqenDavERYX7qu7mZhW0F1NTUJwnXIDHEgmUfzLBQIT/TxNgay1ReJVcd5
xjcjWpZInkcOZgZbk0G24K05at9plp3hNYXddAswxX7THfNP48hd5jgD3Fj4xf4q
x/EGmvegzqz/8PzfoFLhlZm1Wsq7cwTpFIPuf5Fnxf+QUtJit9RHoyEMsI3Bj27q
QLVsQU0Ve2ajNaoYoAFmzJQPTImzlbw28Wi6pCaABGrI47pSXsn4Npr0VmhqBXtJ
YolBb07KIMT15n1xUZogCwVyAKcFBptOWiP8pUE9ufZ7p020xdJpNEMqbZlMBDCN
5MlGHmL1B5m9co4UPBZlOwSGMP25AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUy/8n
m6670O/F/2Uo6+TbAm7pVPswHwYDVR0jBBgwFoAUtjLcSuU6XipZtVv1qsfBSRDB
TRYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE2RDZGLzM3OTlFQzg0OTNBMjExRUFCOTJDMEI2QkY4QUVBMjI4L3RqTGNT
dVU2WGlwWnRWdjFxc2ZCU1JEQlRSWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3RqTGNTdVU2WGlwWnRWdjFxc2ZCU1JEQlRSWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTZENkYvMzc5OUVDODQ5M0EyMTFFQUI5MkMwQjZCRjhB
RUEyMjgvdGpMY1N1VTZYaXBadFZ2MXFzZkJTUkRCVFJZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9vSwqZXqBLOOfYsyWwu2W8T/7dTsI
UoKXSBfRlP3tbUUnsfPJmGX2q8p+8ptcVDpAc1wFDQvmSklXytP1UG6bNeZxlcBL
JY3Ijp/I0dV7zX1RhJhFtG/91LsiO1i8OdIHndD6dkhXlmtm3siVkDQVhTlemElL
x4DvuRC7ItkqTWLbuDw3KIOsR0QcZP3kexQtJmSfxwsYGJ74rP60KZJ9oqXwW0iR
YhdoWfsoSfrzha1ihl3UN5jARKzQM0Ja709lM0C3bOJgaICJuJPIHiy7XdeuMlM9
CQGQG+x/HClRp0cTcdLk5uQoM5+9/so9P0IfpAt63HlKKbUhAzptgdfp
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:20:19 2025 by rpki-client