Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
File:                     UpunS83yaGnfBI9JzaZV3lnZgeE.mft (raw, json)
Hash identifier:          Q2ZkLOcJDIz0qbeucBXIQP8benhqqet7ogtTBhPU98k=
Subject key identifier:   C3:6C:59:05:98:D2:20:54:24:EE:28:9C:37:A2:A7:A0:80:30:D7:93
Authority key identifier: 52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1
Certificate issuer:       /CN=F36596DEAF/serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
Certificate serial:       0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
Manifest number:          0A
Signing time:             Tue 04 Nov 2025 06:49:20 +0000
Manifest this update:     Tue 04 Nov 2025 06:49:19 +0000
Manifest next update:     Thu 06 Nov 2025 06:49:19 +0000
Files and hashes:         1: UpunS83yaGnfBI9JzaZV3lnZgeE.crl (hash: oS0/KwtTZvr33E7m/cGc1+H6N+76iR2wx4ljl71+vCQ=)
                          2: 6FAF0A32B3C711F0B62E26D6DAE4EC9C.roa (hash: WZmCRWW8TtxV2D+03+Gg2hGc4lK2ghh6H+qHzsYjVjY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36596DEAF, serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
        Validity
            Not Before: Nov  4 06:49:19 2025 GMT
            Not After : Nov  6 06:49:19 2025 GMT
        Subject: CN=6909a1f0-2296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1b:62:e2:00:b0:f4:69:72:a5:31:81:4c:5b:
                    c2:ef:ae:2b:fc:b7:b1:19:e8:6b:18:96:5e:2d:b3:
                    fb:aa:c4:a1:22:6a:3e:13:ce:64:14:6a:52:ba:0d:
                    0e:78:44:f4:da:3a:3c:2b:2f:97:ec:6d:95:52:66:
                    07:10:cb:a6:9e:02:f0:a4:50:e6:4d:10:73:42:32:
                    42:69:b8:14:02:ae:98:3b:d9:8e:38:66:5b:f6:ce:
                    3a:84:3b:14:68:25:5b:e4:12:21:54:74:05:3b:82:
                    ed:b3:46:13:db:f8:49:94:d0:b5:30:3d:ab:23:ca:
                    a1:4b:81:5a:1e:fc:d6:46:b6:ba:ab:b3:d9:69:51:
                    36:3a:9d:2c:35:27:a1:71:a2:36:26:75:47:2a:15:
                    77:50:02:c5:33:6a:f9:bf:79:1c:b3:fd:07:12:a3:
                    d2:45:28:72:0b:f1:f0:8f:0c:1e:51:c1:cf:82:0c:
                    32:32:12:2f:b5:5f:f1:a7:b2:e4:78:03:6b:b3:96:
                    e4:4d:55:d2:4b:19:f0:27:ba:d1:89:77:c4:9c:90:
                    4f:86:69:40:27:19:7a:cb:16:fe:60:96:89:7f:21:
                    74:6c:43:d9:99:aa:34:4f:fe:c6:57:db:0b:b6:10:
                    52:9a:95:95:f3:71:f8:b5:0f:8d:ba:95:f7:57:ab:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:59:05:98:D2:20:54:24:EE:28:9C:37:A2:A7:A0:80:30:D7:93
            X509v3 Authority Key Identifier:
                keyid:52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:cb:34:e9:01:59:f6:83:19:49:b4:e7:97:d1:df:64:7e:
         ba:be:0c:26:31:1f:ea:db:ef:44:4a:43:cf:a4:9c:6c:1a:d0:
         7c:83:ea:85:f0:8f:be:45:eb:75:27:69:88:1d:d1:93:48:68:
         09:be:6b:9d:d4:4c:fe:85:ff:55:f7:00:6f:30:ca:8f:fc:56:
         24:06:d4:ef:ab:97:67:c0:35:2d:f3:13:b9:75:f0:7c:5a:f5:
         36:d5:a1:df:e0:72:ee:76:30:89:bb:58:92:d4:bd:bc:40:6e:
         ad:50:2c:22:ec:60:6b:ab:7e:7d:23:cb:67:63:a6:23:76:b1:
         9d:87:38:93:0f:df:20:33:07:ed:41:74:33:e9:0c:96:db:51:
         c9:d2:9e:22:8c:9c:7c:ed:a1:66:1c:76:15:64:2a:08:bd:e7:
         6d:e1:89:8c:0c:52:25:a3:64:94:c4:94:e0:66:4a:1b:6f:fc:
         3c:98:bb:4b:a8:05:8f:ee:85:42:7c:f7:d4:b8:11:af:60:b9:
         6b:c8:ed:39:e1:71:64:77:ff:33:d6:36:fa:d0:40:6b:e3:ad:
         e0:ee:05:a3:b4:a4:c0:8f:fb:6a:6b:9e:0f:6b:0a:dd:30:34:
         88:d4:91:39:1a:35:17:67:a4:48:9a:3d:35:3b:0d:7c:f7:d1:
         5b:dc:4f:84
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
OTZERUFGMTEwLwYDVQQFEyg1MjlCQTc0QkNERjI2ODY5REYwNDhGNDlDREE2NTVE
RTU5RDk4MUUxMB4XDTI1MTEwNDA2NDkxOVoXDTI1MTEwNjA2NDkxOVowGDEWMBQG
A1UEAxMNNjkwOWExZjAtMjI5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO4bYuIAsPRpcqUxgUxbwu+uK/y3sRnoaxiWXi2z+6rEoSJqPhPOZBRqUroN
DnhE9No6PCsvl+xtlVJmBxDLpp4C8KRQ5k0Qc0IyQmm4FAKumDvZjjhmW/bOOoQ7
FGglW+QSIVR0BTuC7bNGE9v4SZTQtTA9qyPKoUuBWh781ka2uquz2WlRNjqdLDUn
oXGiNiZ1RyoVd1ACxTNq+b95HLP9BxKj0kUocgvx8I8MHlHBz4IMMjISL7Vf8aey
5HgDa7OW5E1V0ksZ8Ce60Yl3xJyQT4ZpQCcZessW/mCWiX8hdGxD2ZmqNE/+xlfb
C7YQUpqVlfNx+LUPjbqV91erSO8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTDbFkF
mNIgVCTuKJw3oqeggDDXkzAfBgNVHSMEGDAWgBRSm6dLzfJoad8Ej0nNplXeWdmB
4TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTk2REUvOTY1REE0RkFCMzNBMTFGMDk3QjY0QUNEREFFNEVDOUMvVXB1blM4
M3lhR25mQkk5SnphWlYzbG5aZ2VFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVXB1blM4M3lhR25mQkk5SnphWlYzbG5aZ2VFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1OTZERS85NjVEQTRGQUIzM0ExMUYwOTdCNjRBQ0REQUU0
RUM5Qy9VcHVuUzgzeWFHbmZCSTlKemFaVjNsblpnZUUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAFZoyzTpAVn2gxlJtOeX0d9kfrq+DCYx
H+rb70RKQ8+knGwa0HyD6oXwj75F63UnaYgd0ZNIaAm+a53UTP6F/1X3AG8wyo/8
ViQG1O+rl2fANS3zE7l18Hxa9TbVod/gcu52MIm7WJLUvbxAbq1QLCLsYGurfn0j
y2djpiN2sZ2HOJMP3yAzB+1BdDPpDJbbUcnSniKMnHztoWYcdhVkKgi9523hiYwM
UiWjZJTElOBmShtv/DyYu0uoBY/uhUJ899S4Ea9guWvI7TnhcWR3/zPWNvrQQGvj
reDuBaO0pMCP+2prng9rCt0wNIjUkTkaNRdnpEiaPTU7DXz30VvcT4Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:40:47 2025 by rpki-client