Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
File:                     On6mEjuyi5myrc0qWftjiY7momU.mft (raw, json)
Hash identifier:          6i1Z1i6S+8B7dt5i1LZyIgB5sKhC6ECxrYgDl+1v4vQ=
Subject key identifier:   F1:04:71:6D:2A:CF:8B:7C:2F:86:19:7F:C1:CC:58:63:AA:17:36:27
Authority key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Certificate issuer:       /CN=F36A0B3BAF/serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
Certificate serial:       011C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
Manifest number:          011B
Signing time:             Wed 05 Nov 2025 05:20:11 +0000
Manifest this update:     Wed 05 Nov 2025 05:20:11 +0000
Manifest next update:     Fri 07 Nov 2025 05:20:11 +0000
Files and hashes:         1: On6mEjuyi5myrc0qWftjiY7momU.crl (hash: YbIzAmBHhTqJaO/Y3x9U97mlZRBxgxhyGpcDDllnKx8=)
                          2: 8500AAA4DFA511EFA4A0995A762E951A.roa (hash: vzRjRuX2GZhGU/X4T8gnBdvjxS1YirPqGZKLuKJg1+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0B3BAF, serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
        Validity
            Not Before: Nov  5 05:20:11 2025 GMT
            Not After : Nov  7 05:20:11 2025 GMT
        Subject: CN=690ade8b-22e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:3d:58:e1:ae:12:f4:ed:5a:2a:07:12:a2:
                    40:57:37:22:56:61:9b:55:60:2c:f1:b0:bf:6f:8a:
                    61:c4:1c:f3:a3:67:e5:54:ba:39:da:b8:b3:c9:74:
                    d2:5d:c1:73:f0:d2:fe:27:4f:9e:e7:99:b1:04:99:
                    65:dc:c4:61:c4:e3:f8:f8:40:40:5c:7c:bc:6b:4c:
                    47:3a:e2:f6:f1:6b:3f:fa:3c:ca:cf:5e:da:f6:21:
                    e1:51:47:7b:f2:2a:23:be:e6:58:fa:62:4b:05:09:
                    63:23:ea:ee:57:74:f2:21:a3:f3:6d:6b:f0:bf:22:
                    5e:ac:d5:c2:fc:85:41:51:af:c3:b9:1a:79:89:b2:
                    99:8f:7f:4d:30:90:1b:8e:4c:e5:a0:1a:7c:15:46:
                    11:13:91:fb:8f:df:04:07:a3:09:1f:54:47:ce:b5:
                    4c:ce:6f:af:52:70:f4:a1:b2:f3:72:69:2e:42:3c:
                    ba:e1:bd:b7:df:5d:78:3c:a5:54:8e:16:ef:cf:58:
                    74:9a:38:f4:da:67:d2:23:08:45:27:47:4b:14:31:
                    aa:19:e7:25:96:05:80:26:b6:6d:c2:06:4a:27:c8:
                    1d:0b:81:1e:34:85:d1:0c:5e:5b:81:b2:fa:fd:70:
                    f5:02:94:ba:fd:de:ec:e8:08:c9:45:c6:09:a4:f9:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:71:6D:2A:CF:8B:7C:2F:86:19:7F:C1:CC:58:63:AA:17:36:27
            X509v3 Authority Key Identifier:
                keyid:3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:35:93:13:d3:f7:1f:d1:46:f1:7e:7e:82:cc:2b:15:56:
         2c:35:3a:ed:7a:c1:2b:87:d4:24:e1:33:91:62:83:56:72:15:
         b0:48:a1:96:e9:77:26:3d:65:6e:27:ca:52:ce:44:9d:76:7d:
         5e:28:5e:d0:be:8f:31:f0:3b:9d:04:e0:0e:a6:93:28:0e:4b:
         4a:64:aa:44:9b:46:b8:ec:77:91:c8:d4:3b:44:7e:c6:67:e4:
         91:68:24:ee:9f:a3:a4:88:34:33:fe:e6:33:73:77:36:5c:ed:
         45:b2:36:57:3e:d7:35:bc:21:8a:5b:0a:4e:49:0a:f4:e2:13:
         93:87:09:34:a9:37:81:7e:78:3a:92:12:b8:16:f5:b5:96:d9:
         36:1d:fa:e4:b1:74:d7:88:de:3f:d7:7a:87:6d:ab:af:58:dc:
         b9:24:a6:e8:ca:5d:34:77:7a:44:f4:66:92:e6:c3:a8:74:7a:
         68:e1:5c:9e:55:db:8f:42:70:a5:3d:17:00:e5:fb:c0:02:38:
         6f:e3:32:f0:4e:35:c4:5b:88:a1:ec:f2:01:4f:fd:49:af:21:
         ad:92:0d:83:34:f6:2b:9c:77:35:70:d6:2f:fd:a7:84:62:c7:
         26:0e:cb:34:75:43:77:91:75:00:ab:4b:ec:7a:a3:d4:ee:12:
         d2:27:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:26 2025 by rpki-client