Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
File:                     GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft (raw, json)
Hash identifier:          uh5njRW/jQ2X36GeCprc7zSh0A/im4Fxb4xD/BG8Yks=
Subject key identifier:   63:A6:FC:29:66:CB:0F:03:76:3A:17:FA:42:39:B7:C0:49:BF:69:3A
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Certificate issuer:       /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial:       72
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
Manifest number:          6F
Signing time:             Tue 04 Nov 2025 06:38:31 +0000
Manifest this update:     Tue 04 Nov 2025 06:38:30 +0000
Manifest next update:     Thu 06 Nov 2025 06:38:30 +0000
Files and hashes:         1: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl (hash: Cbc3PPaEzUHL5Ed9VNNkqNxJxtXG1l0zYn1YEN8YlGk=)
                          2: 61967A0C923911F0857614F5DAE4EC9C.roa (hash: h6/xO+quTrTm7TNgBK9CG+HuCWB11SsyjPcjW6WV3ek=)
                          3: 0CC81814923911F083357CF4DAE4EC9C.roa (hash: LITlLq2aIhVUihUn1BaRczfpAUpOW0iot4DV3wIc2Aw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
        Validity
            Not Before: Nov  4 06:38:30 2025 GMT
            Not After : Nov  6 06:38:30 2025 GMT
        Subject: CN=69099f67-73bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:07:c1:97:8e:88:18:b4:9d:a1:66:ba:2b:
                    74:6f:43:93:aa:98:a6:1b:6e:af:c1:81:96:88:53:
                    aa:75:1d:a4:12:5d:b1:e1:4e:ca:a1:28:f8:dc:2e:
                    95:4f:43:41:0e:67:d9:42:7d:4e:b0:f7:8b:a1:e7:
                    1e:8e:b9:3f:d6:15:6e:fe:d1:b8:f7:f6:85:67:52:
                    44:17:9e:c0:11:c5:5c:d9:f4:2b:f4:24:bb:32:8c:
                    46:d3:74:b5:f5:ea:50:6d:17:26:fd:f7:14:b4:75:
                    75:e8:1c:55:ca:89:c9:c1:cf:c2:06:b4:93:e6:cd:
                    f9:c4:cd:97:1c:29:06:47:a5:3a:02:71:5b:b0:cd:
                    7d:65:11:e8:c4:88:17:77:a1:6b:a2:39:26:0a:e7:
                    a8:7d:b1:64:53:63:28:ca:3a:ff:e8:5f:3f:1a:d6:
                    2a:14:e7:11:dc:52:0b:2f:9d:0f:e1:4d:1b:ec:07:
                    1b:d8:a0:c9:92:c4:58:c2:f6:fd:f1:05:e9:e7:58:
                    25:46:6c:e3:bf:94:b0:13:37:fa:3c:b6:c7:e9:e0:
                    fc:21:cd:55:77:ea:af:7b:bb:52:eb:87:fc:e8:a2:
                    86:f7:d6:ab:d6:57:c9:91:3e:6a:c6:05:cb:28:ae:
                    1a:e7:12:88:ad:4a:30:f7:c4:79:05:6b:f7:01:94:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:FC:29:66:CB:0F:03:76:3A:17:FA:42:39:B7:C0:49:BF:69:3A
            X509v3 Authority Key Identifier:
                keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ce:98:a1:12:36:8a:38:a7:a5:53:0b:be:7c:17:ff:6e:8e:
         d9:45:81:3d:32:b9:1f:f5:9a:92:42:22:b6:f2:76:e9:72:21:
         c6:5d:2d:c2:94:c8:a7:75:2a:36:88:f3:7f:1c:e4:38:18:48:
         3b:eb:90:d4:f6:cb:1e:c2:a5:01:29:61:cc:6e:a3:3d:b2:91:
         b8:0a:1a:15:e8:d9:dd:88:65:4a:2a:00:64:99:77:8d:e7:e9:
         87:68:94:af:f6:2c:46:98:d1:ea:cc:05:d0:81:75:65:3b:d8:
         2d:90:6a:83:6f:9f:16:d9:ca:57:98:16:6d:ba:f7:42:69:9a:
         78:d6:7f:b7:da:4f:a5:9b:2d:28:0c:fc:61:54:8a:c8:b8:ce:
         e6:eb:e2:dc:e2:b2:8c:73:65:db:b8:fc:32:e4:01:54:37:45:
         a4:61:24:22:83:94:a2:94:d9:37:4e:46:6e:bf:e9:c3:c1:b1:
         ea:3d:fa:8d:f9:90:aa:b7:23:c7:27:a7:a6:16:b5:ed:59:ef:
         8a:ba:13:84:bf:5a:a4:bb:44:0d:da:89:93:72:c9:c6:10:b2:
         d8:0d:fa:fc:c1:90:a0:cf:b2:22:51:ca:3d:4c:60:e8:73:5b:
         01:20:93:a3:b5:ea:ff:15:70:59:f0:29:77:d9:17:e0:92:58:
         3c:fe:7a:24
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBcjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
MzU2RkFGMTEwLwYDVQQFEygxOUU1QkIwMkJBODgwM0IyQjEzQzg4OEVDNjFBMTlF
ODZEQ0Q1QTY3MB4XDTI1MTEwNDA2MzgzMFoXDTI1MTEwNjA2MzgzMFowGDEWMBQG
A1UEAxMNNjkwOTlmNjctNzNiZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKsYB8GXjogYtJ2hZrordG9Dk6qYphtur8GBlohTqnUdpBJdseFOyqEo+Nwu
lU9DQQ5n2UJ9TrD3i6HnHo65P9YVbv7RuPf2hWdSRBeewBHFXNn0K/QkuzKMRtN0
tfXqUG0XJv33FLR1degcVcqJycHPwga0k+bN+cTNlxwpBkelOgJxW7DNfWUR6MSI
F3eha6I5JgrnqH2xZFNjKMo6/+hfPxrWKhTnEdxSCy+dD+FNG+wHG9igyZLEWML2
/fEF6edYJUZs47+UsBM3+jy2x+ng/CHNVXfqr3u7UuuH/OiihvfWq9ZXyZE+asYF
yyiuGucSiK1KMPfEeQVr9wGUf2UCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRjpvwp
ZssPA3Y6F/pCObfASb9pOjAfBgNVHSMEGDAWgBQZ5bsCuogDsrE8iI7GGhnobc1a
ZzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODM1NkYvRDFERkE5MUM2NkU0MTFGMEIyMTI2MTkyREFFNEVDOUMvR2VXN0Fy
cUlBN0t4UElpT3hob1o2RzNOV21jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvR2VXN0FycUlBN0t4UElpT3hob1o2RzNOV21jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4MzU2Ri9EMURGQTkxQzY2RTQxMUYwQjIxMjYxOTJEQUU0
RUM5Qy9HZVc3QXJxSUE3S3hQSWlPeGhvWjZHM05XbWMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJzOmKESNoo4p6VTC758F/9ujtlFgT0y
uR/1mpJCIrbydulyIcZdLcKUyKd1KjaI838c5DgYSDvrkNT2yx7CpQEpYcxuoz2y
kbgKGhXo2d2IZUoqAGSZd43n6YdolK/2LEaY0erMBdCBdWU72C2QaoNvnxbZyleY
Fm2690JpmnjWf7faT6WbLSgM/GFUisi4zubr4tzisoxzZdu4/DLkAVQ3RaRhJCKD
lKKU2TdORm6/6cPBseo9+o35kKq3I8cnp6YWte1Z74q6E4S/WqS7RA3aiZNyycYQ
stgN+vzBkKDPsiJRyj1MYOhzWwEgk6O16v8VcFnwKXfZF+CSWDz+eiQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:32:59 2025 by rpki-client