Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          pEB6rl9Zz3h1IYStKkmh40r5KeSu0Lmo8AK638d6PIU=
Subject key identifier:   1F:DD:58:64:ED:5B:22:49:81:DA:25:D4:FB:A7:CE:95:65:65:F9:B3
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       01BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          01B8
Signing time:             Wed 05 Nov 2025 04:53:21 +0000
Manifest this update:     Wed 05 Nov 2025 04:53:20 +0000
Manifest next update:     Fri 07 Nov 2025 04:53:20 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: kn1Gc6S3JhajUfB8ScTHpbOLqGADNNsxcH9f1fw+Pfc=)
                          2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
        Validity
            Not Before: Nov  5 04:53:20 2025 GMT
            Not After : Nov  7 04:53:20 2025 GMT
        Subject: CN=690ad841-362f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:32:13:be:78:62:3a:8c:63:b6:47:69:68:
                    38:03:45:99:6f:a3:74:3a:49:4a:54:80:d7:83:2d:
                    ac:04:4c:bd:8b:a4:05:65:07:f7:81:61:42:cc:e6:
                    64:5e:e5:69:87:83:d5:db:6c:98:c3:9a:14:b6:4f:
                    4a:5c:25:e9:44:8b:ab:4a:33:40:f0:60:10:53:59:
                    3c:bc:31:74:3d:8d:7b:91:fa:33:f9:19:9a:44:1d:
                    43:3c:38:41:4c:88:ff:d7:85:45:b2:5d:d8:eb:0e:
                    7d:ec:34:ee:3a:b3:3c:a1:78:f3:32:e1:46:f9:6c:
                    6d:7d:c1:a8:55:03:75:68:ba:00:8a:00:64:0f:ea:
                    26:c3:cc:59:ee:1e:3f:97:b3:d0:4b:5f:a4:b9:91:
                    66:f4:39:ec:74:8a:2d:03:0b:2b:f6:23:dc:aa:3f:
                    4c:be:dc:b1:d1:73:f8:05:13:2f:60:34:51:56:ac:
                    2c:c0:f8:5e:5c:4d:46:4a:65:38:cf:54:81:55:09:
                    a2:f7:76:3e:6f:c3:15:2c:8f:26:c4:fe:e7:95:0d:
                    46:69:b6:eb:fa:65:f4:6b:31:f7:db:2a:19:33:04:
                    0d:41:6c:3e:de:bb:48:b0:86:28:67:0b:dc:35:d0:
                    bc:52:b6:e4:c8:e9:38:e9:22:22:3b:ab:c8:f0:2d:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DD:58:64:ED:5B:22:49:81:DA:25:D4:FB:A7:CE:95:65:65:F9:B3
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5f:3d:70:84:c0:4d:a3:1a:5b:fb:4d:06:8b:78:53:bb:e8:
         90:3a:8f:f4:55:51:3f:68:df:17:a3:8a:93:48:bf:14:96:77:
         b7:05:83:65:da:6a:7b:3f:77:b8:23:71:b6:8e:35:e5:fd:e0:
         41:44:02:6d:86:8f:0a:cc:07:2d:d5:d1:35:cf:31:a4:c9:81:
         77:24:09:42:8b:c1:2a:e0:c2:dd:6b:fa:d0:32:9a:a6:ae:2c:
         3b:98:ac:fd:e9:f4:48:97:97:81:e2:16:06:32:f5:c1:ce:2b:
         b3:a0:9a:56:9e:bf:c5:33:cb:83:0f:13:89:27:f2:b3:6f:1a:
         ca:36:3e:24:f5:3a:02:dc:da:be:80:35:21:cd:34:c4:11:44:
         1a:ee:35:c4:21:df:3d:75:f5:a8:da:8a:fa:0e:79:3e:80:56:
         f0:14:42:3e:c6:96:39:f3:12:08:51:89:7b:26:ed:94:ae:26:
         f3:df:3e:d0:77:4f:f9:8c:27:1b:46:fa:35:68:5f:ed:24:f7:
         10:93:19:55:ad:a7:61:bd:90:a4:79:46:60:f5:5d:da:3b:5f:
         34:fe:bf:4c:bf:e9:d9:4d:7a:bb:40:4f:e2:28:29:1d:6b:e8:
         81:d6:3d:7f:19:13:ad:f4:b8:e3:14:3c:63:f4:63:30:80:76:
         fe:f9:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:59 2025 by rpki-client