Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          zLnJmPQmGWUvD+728Zc2aJutHFTn3/kus3Vh3Wpdl60=
Subject key identifier:   B1:E2:A2:EC:5E:E3:77:FC:19:EC:BD:31:6B:B2:E5:63:7C:06:7A:03
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       0116
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          0113
Signing time:             Wed 05 Nov 2025 05:21:24 +0000
Manifest this update:     Wed 05 Nov 2025 05:21:24 +0000
Manifest next update:     Fri 07 Nov 2025 05:21:24 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: 3n+eqrV4obMT7aEV6qs9dMdt9cYNDr8lx267ND9iCZU=)
                          2: 12C71FFA414211F08D0BA2A9DAE4EC9C.roa (hash: L0xlt1TQw2jjAYhdxTaR7ffVXvpBJOWHJHDBNeBUdlQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Nov  5 05:21:24 2025 GMT
            Not After : Nov  7 05:21:24 2025 GMT
        Subject: CN=690aded4-835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:68:cc:ca:06:82:bc:0c:9a:87:29:36:cd:b3:
                    85:8a:5b:ed:0e:9e:88:6c:fa:ad:99:f7:10:64:cb:
                    af:b5:41:ca:ea:e3:9c:3c:fa:22:f3:a3:a0:95:5a:
                    19:eb:cd:33:4e:a3:e1:8d:a9:52:af:85:27:e8:e4:
                    13:28:da:d8:da:0a:24:34:2d:4c:d7:6d:77:40:a9:
                    b3:9a:78:6e:ff:0d:c0:da:22:96:d5:75:5d:e1:f9:
                    d2:e8:d5:27:87:46:05:e0:8d:1d:02:23:18:05:ce:
                    cf:5a:f2:16:84:3c:5a:5e:42:23:43:71:69:68:fc:
                    85:43:3f:c4:e6:12:ef:92:43:00:de:16:a1:1c:71:
                    53:52:81:ed:9b:2f:11:c4:c7:cf:55:32:e3:a3:d9:
                    ce:dd:44:df:46:1d:73:c7:cb:fe:f4:ab:02:bd:13:
                    44:3a:b6:ed:6f:5d:a2:5e:9b:f9:f9:66:45:bb:fb:
                    fd:2d:e0:03:d3:36:67:85:20:db:1c:c8:f6:50:ac:
                    56:95:54:ad:e7:7e:dc:b0:15:28:24:aa:6b:e8:85:
                    3f:a0:e4:99:c7:70:b7:a1:df:de:90:c0:01:f1:a8:
                    9b:ef:80:ef:be:59:46:e1:15:c5:5f:a3:05:df:4d:
                    18:e3:61:ef:f5:a3:67:46:11:5e:4d:2e:57:22:1f:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:A2:EC:5E:E3:77:FC:19:EC:BD:31:6B:B2:E5:63:7C:06:7A:03
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:38:e1:d6:e5:35:86:ce:cb:5f:6a:d4:2d:a9:16:68:e7:
         a9:a6:6b:78:da:1d:78:4b:3c:00:22:19:12:a9:07:3f:48:54:
         c1:4b:8c:a7:03:0e:ad:b2:25:c7:3b:50:09:78:51:05:eb:85:
         52:30:d9:47:d5:2e:83:3d:1e:05:2a:5c:ba:e0:80:7f:1a:83:
         87:21:35:fb:cc:38:ba:d8:47:f7:d5:11:ee:47:1a:30:e4:94:
         b8:35:90:40:9f:60:af:ed:c6:c6:76:a7:f7:2e:aa:a3:9f:f6:
         f9:23:20:6e:6f:f1:cf:91:70:1c:45:fc:25:e6:b4:e9:26:1f:
         d7:26:6e:8d:39:8e:6d:4d:8d:e7:3d:4f:73:0b:6f:a8:20:ba:
         46:13:59:8f:e0:2c:ef:4d:d6:49:56:60:b4:48:df:bb:25:e3:
         69:bb:49:d6:90:91:95:10:77:97:c6:58:7b:b0:b3:cf:09:82:
         49:66:85:94:74:ba:6c:98:ee:4a:67:29:bf:05:e0:3f:f3:e7:
         38:95:3b:84:97:f8:a7:7f:9a:6f:9b:2d:c7:b9:a5:7d:e9:76:
         88:f2:7a:27:bb:35:63:0f:5e:c0:8a:7a:4c:66:de:5b:75:1c:
         b7:df:6d:95:a2:95:e6:21:38:55:4b:d6:cb:d9:00:99:30:4c:
         e2:e1:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:48:55 2025 by rpki-client