Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
File:                     R_ufMc9PLRlxHITTLiO9AG4ALpY.mft (raw, json)
Hash identifier:          aSPKLiy+5QydWFy9n16Ju8zX3BQ0akg3ytJ5GZXU47A=
Subject key identifier:   D8:D9:D4:0B:F7:A8:9C:5A:CD:26:0C:64:5F:C8:E3:5A:D8:87:E5:87
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Certificate issuer:       /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial:       060F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
Manifest number:          060B
Signing time:             Wed 05 Nov 2025 02:33:59 +0000
Manifest this update:     Wed 05 Nov 2025 02:33:58 +0000
Manifest next update:     Fri 07 Nov 2025 02:33:58 +0000
Files and hashes:         1: R_ufMc9PLRlxHITTLiO9AG4ALpY.crl (hash: mOkpNz6O0sCO5RZktqR5AdhQZRrRQ2Ny1jeoKPiLnZY=)
                          2: 3CBE5F76212011ECA2098832D8A014CE.roa (hash: 8d9G2F7SeXBUC0RrFhpkoC1cMwO502CPGYGL0obQDBM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A36C8AF, serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
        Validity
            Not Before: Nov  5 02:33:58 2025 GMT
            Not After : Nov  7 02:33:58 2025 GMT
        Subject: CN=690ab797-408c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:17:1d:55:6b:83:fe:0e:7c:a4:be:07:2b:
                    e4:3d:be:4f:7d:ba:1b:62:a6:87:12:fc:86:ad:c8:
                    1d:f8:0c:7f:33:6c:32:4e:34:a2:75:f8:f4:78:2d:
                    d0:5c:59:d2:52:01:b2:5b:22:d2:cf:9f:bd:05:cb:
                    b8:7b:2d:62:96:18:f5:05:6d:b9:94:f3:51:ef:10:
                    97:3a:d5:3b:79:25:f6:50:31:50:eb:f2:cb:5c:e2:
                    7a:6a:ea:f6:e2:c9:57:4c:e9:f9:64:e0:b7:58:7d:
                    b2:7b:d2:84:c2:3e:42:4f:3a:e8:da:36:9a:3f:bb:
                    ba:2b:3a:36:8c:7e:0f:4e:97:a0:4f:e3:59:d6:6e:
                    1f:08:5d:7a:5a:f0:c3:f5:a8:cd:5d:54:a0:98:77:
                    ee:13:e8:2c:27:e0:4b:57:6a:fe:91:e6:fc:7f:39:
                    ce:be:c0:6f:05:79:f9:af:9b:86:db:f7:d7:99:98:
                    b9:b7:bc:8d:ce:da:59:26:d0:84:c7:2a:2a:e2:54:
                    70:1e:ff:13:c1:18:3a:a9:d1:ad:dd:ce:03:ec:ea:
                    84:c8:f8:ea:de:0a:50:76:b8:9d:14:89:30:a5:21:
                    95:d6:a7:ea:a2:32:98:05:b7:d1:08:1c:12:fd:1f:
                    66:74:48:76:6c:dd:d7:72:b0:e0:1a:a8:02:54:36:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D9:D4:0B:F7:A8:9C:5A:CD:26:0C:64:5F:C8:E3:5A:D8:87:E5:87
            X509v3 Authority Key Identifier:
                keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:de:32:68:e5:71:65:3a:71:e3:d3:8a:9e:62:59:b0:d2:fa:
         17:cc:e9:ab:98:a7:a4:67:95:66:7f:8c:1c:bc:13:5f:4c:71:
         2d:2c:18:7f:68:c9:ae:86:e4:5f:b9:2a:de:4a:29:43:49:c8:
         21:ec:92:3d:4a:ac:28:4f:cb:3f:d5:4f:01:c6:d0:18:0e:4d:
         42:3f:a5:0d:ab:e5:e4:fe:6a:05:60:c1:df:56:1b:1f:b6:9c:
         c5:d5:44:8f:53:78:de:69:ce:6e:12:5e:f2:30:5e:49:60:fe:
         7b:d6:dc:0a:c5:cb:1d:4f:9c:9f:66:d9:f5:71:8f:dd:94:3e:
         be:56:3a:38:16:94:4e:95:45:aa:12:1e:9c:f8:1d:69:a7:ca:
         e0:62:02:9c:db:37:ad:a6:de:5d:d5:8f:3d:ec:bb:53:fe:a9:
         b3:8e:0f:e6:07:a0:30:4c:4b:63:2f:ef:4f:5c:61:07:1c:99:
         e1:94:1d:5c:69:8f:5e:cb:79:ac:6d:7e:e6:0f:c6:9c:6e:45:
         e3:54:27:26:87:55:0a:23:6f:a3:60:e2:9f:b5:67:28:2d:5c:
         92:d1:ac:0a:ae:00:6d:50:00:3d:06:a2:1d:75:03:a3:bd:cc:
         fc:01:3c:b7:8a:fc:07:0d:2e:84:26:ff:4f:99:49:da:52:e3:
         f2:6f:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:09:38 2025 by rpki-client