Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          PAElBTpjq/HU+vdXaIkhvfauUfEOsWo6rIIPzzj+HJk=
Subject key identifier:   AA:6B:0F:99:93:E0:09:BE:AB:C1:EE:D4:8F:97:C5:C7:0E:4F:BB:D1
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       81
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          80
Signing time:             Tue 04 Nov 2025 06:35:15 +0000
Manifest this update:     Tue 04 Nov 2025 06:35:14 +0000
Manifest next update:     Thu 06 Nov 2025 06:35:14 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: AYUdgaHH9CYgxmR8uqySigS17uFjzezQVqZyQBmQm8M=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Nov  4 06:35:14 2025 GMT
            Not After : Nov  6 06:35:14 2025 GMT
        Subject: CN=69099ea3-312f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:03:88:a1:df:4e:11:34:bc:16:d9:37:82:
                    e4:5b:46:3e:36:05:75:ce:da:11:09:78:74:15:e7:
                    c3:ba:42:7d:76:48:f1:d5:7c:4b:e8:07:4a:14:7a:
                    19:9d:48:39:dd:5c:be:da:59:97:d4:67:fe:f6:63:
                    2d:86:5f:d7:8a:00:33:9c:5c:0e:c0:66:ab:89:da:
                    91:c7:9e:3e:31:ef:8e:37:ce:d3:c5:02:44:9f:6f:
                    a2:4e:2b:de:a7:9a:4f:f4:68:66:9a:e8:97:f8:75:
                    a3:21:f1:92:f5:3d:15:97:a7:fd:7d:c3:ab:17:3a:
                    ea:49:98:75:45:b3:b2:c3:85:fb:50:ec:4f:36:9e:
                    10:de:70:f0:8b:0d:c6:b8:61:dc:59:74:8c:d7:aa:
                    0d:55:7c:a7:4b:ca:81:36:44:4a:16:3e:6c:b1:b8:
                    4e:d6:9d:a6:b8:c4:8f:45:38:e7:b1:50:f1:00:a6:
                    46:f0:07:0b:e4:09:38:b9:08:98:8a:55:0d:f3:95:
                    15:23:8a:0e:b0:07:aa:a3:f5:75:a6:48:14:37:91:
                    f6:fb:65:f4:db:07:40:1f:80:a4:48:93:c6:94:a5:
                    9f:27:e7:91:6b:eb:f3:63:20:5f:b7:cc:bd:3f:9f:
                    06:ea:5f:c5:75:f7:78:65:54:04:c3:00:7f:0b:a2:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:0F:99:93:E0:09:BE:AB:C1:EE:D4:8F:97:C5:C7:0E:4F:BB:D1
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:e1:a2:5f:4c:d3:75:4d:b1:d6:8a:35:f9:be:6d:c9:1a:
         32:90:0b:c6:88:36:6b:3b:23:b9:98:bf:89:5b:d9:99:a9:b4:
         5a:72:e6:d3:33:5d:cc:01:de:30:74:fc:de:14:8c:a7:40:fe:
         3b:fa:0f:55:82:09:75:3d:47:cf:29:b1:b8:ff:47:d8:e5:ed:
         3f:4f:5e:8f:b1:9b:75:fd:45:2a:d1:1d:3c:bf:8b:41:ef:a8:
         85:23:8a:4a:97:4d:6b:6f:80:cc:20:b6:22:3a:b7:62:f3:81:
         68:99:b9:81:ba:fb:51:0c:73:94:52:97:f5:4c:1b:72:fb:3b:
         e8:a4:d2:9e:41:06:79:7d:6a:5d:42:e4:11:cd:fc:51:e9:c2:
         17:84:04:da:94:66:f1:3a:80:d8:f8:f9:c2:ca:4b:48:e4:6b:
         cc:e6:a3:64:c3:90:dd:0b:0b:86:c1:67:cc:40:16:24:53:1a:
         3f:09:23:a0:5f:dd:9b:0c:09:5c:50:08:13:33:c0:5e:c9:8d:
         10:a6:82:ae:00:0a:19:fa:28:20:61:83:40:33:6f:76:f4:71:
         ef:e8:a8:67:97:a4:49:1a:40:f9:f4:b4:39:7b:ff:e8:dd:1a:
         3c:c4:17:78:73:77:1a:21:ee:ae:ec:e5:4f:a4:c9:28:3d:00:
         13:44:ec:b6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0E0OEJBRjExMC8GA1UEBRMoRTNFRDBBMkIxNDFFNjU5QzQ1MjEzOTlDQTNDQzhG
ODE4Qzc1RjcxRDAeFw0yNTExMDQwNjM1MTRaFw0yNTExMDYwNjM1MTRaMBgxFjAU
BgNVBAMTDTY5MDk5ZWEzLTMxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtvAOIod9OETS8Ftk3guRbRj42BXXO2hEJeHQV58O6Qn12SPHVfEvoB0oU
ehmdSDndXL7aWZfUZ/72Yy2GX9eKADOcXA7AZquJ2pHHnj4x7443ztPFAkSfb6JO
K96nmk/0aGaa6Jf4daMh8ZL1PRWXp/19w6sXOupJmHVFs7LDhftQ7E82nhDecPCL
Dca4YdxZdIzXqg1VfKdLyoE2REoWPmyxuE7Wnaa4xI9FOOexUPEApkbwBwvkCTi5
CJiKVQ3zlRUjig6wB6qj9XWmSBQ3kfb7ZfTbB0AfgKRIk8aUpZ8n55Fr6/NjIF+3
zL0/nwbqX8V193hlVATDAH8LojTzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqmsP
mZPgCb6rwe7Uj5fFxw5Pu9EwHwYDVR0jBBgwFoAU4+0KKxQeZZxFITmco8yPgYx1
9x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNBNDhCLzEwM0ZFRDQ2NTc0NzExRjBCQTU4NTk3OURBRTRFQzlDLzQtMEtL
eFFlWlp4RklUbWNvOHlQZ1l4MTl4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzQtMEtLeFFlWlp4RklUbWNvOHlQZ1l4MTl4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0E0OEIvMTAzRkVENDY1NzQ3MTFGMEJBNTg1OTc5REFF
NEVDOUMvNC0wS0t4UWVaWnhGSVRtY284eVBnWXgxOXgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCf0OGiX0zTdU2x1oo1+b5tyRoykAvG
iDZrOyO5mL+JW9mZqbRacubTM13MAd4wdPzeFIynQP47+g9Vggl1PUfPKbG4/0fY
5e0/T16PsZt1/UUq0R08v4tB76iFI4pKl01rb4DMILYiOrdi84FombmBuvtRDHOU
Upf1TBty+zvopNKeQQZ5fWpdQuQRzfxR6cIXhATalGbxOoDY+PnCyktI5GvM5qNk
w5DdCwuGwWfMQBYkUxo/CSOgX92bDAlcUAgTM8BeyY0QpoKuAAoZ+iggYYNAM292
9HHv6Khnl6RJGkD59LQ5e//o3Ro8xBd4c3caIe6u7OVPpMkoPQATROy2
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:43:18 2025 by rpki-client