Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
File:                     3tjUZmQoMBoc4GZckKo0Jgr_74k.mft (raw, json)
Hash identifier:          ecmUnykr9F3ol8XdRwMQ96PfMNyJKQLp78w/8VWku90=
Subject key identifier:   81:5E:09:19:E4:A3:C0:37:C3:76:73:D9:C5:0C:E1:3F:EA:7E:CA:5F
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Certificate issuer:       /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial:       019B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
Manifest number:          019A
Signing time:             Wed 05 Nov 2025 05:02:22 +0000
Manifest this update:     Wed 05 Nov 2025 05:02:19 +0000
Manifest next update:     Fri 07 Nov 2025 05:02:19 +0000
Files and hashes:         1: 3tjUZmQoMBoc4GZckKo0Jgr_74k.crl (hash: 6Z6L+D2bS9TkXIPAmm5QP89jWe49MVLZpdQZlfLyWl0=)
                          2: 9058BEEA816411EF8E2AA088762E951A.roa (hash: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
        Validity
            Not Before: Nov  5 05:02:19 2025 GMT
            Not After : Nov  7 05:02:19 2025 GMT
        Subject: CN=690ada5e-249a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:e9:e1:06:05:bf:01:79:d3:7e:d9:89:7d:
                    0a:53:0c:3f:c7:96:3e:2b:46:a0:b0:00:80:be:6c:
                    14:cb:b6:6f:ee:0f:b2:c3:2e:fc:b4:6a:48:c6:a0:
                    d6:3a:7d:a9:46:7b:54:e5:3d:8b:74:37:a8:bf:db:
                    8b:f0:cd:f9:86:69:b0:78:98:92:32:bd:47:4a:21:
                    0d:ad:20:c0:e3:88:b7:d2:f6:f5:94:89:d1:b7:c7:
                    1f:55:77:c2:da:64:ac:fd:ad:2c:5f:ac:1b:d5:55:
                    52:8f:d1:1a:fd:ff:89:b8:1c:70:0d:d9:72:8d:b2:
                    a7:de:9b:60:5a:5c:64:b5:6a:13:bd:9b:93:f1:35:
                    3e:13:af:7d:2e:3d:21:44:20:98:58:ea:f9:cd:7c:
                    87:c2:01:60:07:62:b1:5f:18:16:fa:29:d9:a2:78:
                    38:fc:33:8b:d0:f3:21:0c:21:68:08:63:d7:8f:a1:
                    02:72:a8:09:5e:9e:aa:3e:0a:86:5e:e0:53:8e:a8:
                    d7:ad:05:09:cd:3a:b8:cb:18:f1:76:0d:d7:6e:e7:
                    f2:ab:28:f0:bc:f0:01:1d:a0:e1:1d:13:4e:2f:df:
                    2e:c5:60:2a:d5:1b:58:ed:26:94:b3:3b:60:4b:5e:
                    08:d4:00:3f:ef:60:4a:e9:65:38:ec:72:64:5a:0c:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:09:19:E4:A3:C0:37:C3:76:73:D9:C5:0C:E1:3F:EA:7E:CA:5F
            X509v3 Authority Key Identifier:
                keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:9e:09:f4:7d:41:2b:31:a9:1b:83:aa:5b:18:0b:f2:7d:
         fb:e0:4e:4c:d8:60:2b:e1:3e:78:83:42:9a:61:1f:2b:87:21:
         3c:a1:56:ae:71:ab:69:0c:a6:74:6c:8c:28:54:db:84:89:2d:
         ab:be:c6:77:25:2e:db:1a:51:7d:2e:01:f4:f7:15:05:08:14:
         4c:c4:be:9f:72:70:bf:f5:75:e4:5f:d7:c5:8e:0c:07:c0:ba:
         0f:c0:8b:44:a4:78:d9:2f:04:5f:56:08:c2:cb:66:52:12:15:
         2f:16:de:0b:00:eb:88:8d:0e:53:58:02:6f:e3:cd:b8:60:09:
         fa:0d:6f:de:a1:05:12:3b:5b:ee:6f:9e:2b:0d:0e:58:a3:02:
         f8:81:44:b9:98:b8:de:fd:80:f1:6d:0d:f6:7b:90:98:bb:f1:
         2b:f0:58:ed:5f:07:c2:c6:b5:09:cf:38:05:84:d6:c5:4b:f7:
         49:d3:0b:d9:02:bb:aa:da:a6:df:cb:be:23:6a:41:eb:97:c9:
         a5:7d:c5:65:d7:b6:0c:79:b4:52:72:14:21:77:2e:fc:6a:38:
         16:a4:40:b6:c6:da:12:c5:79:93:18:6b:28:e7:7c:41:bb:40:
         49:9d:7d:21:16:c2:1c:c5:95:0d:1d:a8:1c:05:eb:b9:d0:5d:
         c8:4e:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:58:56 2025 by rpki-client