Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
File:                     PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft (raw, json)
Hash identifier:          B/zSaUJ+Yf81zsr806mGKvhDm9vW28MsA8enseNsnLY=
Subject key identifier:   71:12:A6:F8:C8:F8:B8:53:39:59:D4:89:DE:B0:66:B5:E8:E8:DB:E1
Authority key identifier: 3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
Certificate issuer:       /CN=F36AAA81AF/serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Certificate serial:       01D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
Manifest number:          01D9
Signing time:             Wed 05 Nov 2025 04:45:03 +0000
Manifest this update:     Wed 05 Nov 2025 04:45:03 +0000
Manifest next update:     Fri 07 Nov 2025 04:45:03 +0000
Files and hashes:         1: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl (hash: zfKZTo1/O8954oOYPpDTJAn2unj3d4/W9ZUrqvcpnA4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AAA81AF, serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
        Validity
            Not Before: Nov  5 04:45:03 2025 GMT
            Not After : Nov  7 04:45:03 2025 GMT
        Subject: CN=690ad64f-fa27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:65:8e:14:da:15:f7:75:05:bb:b5:86:84:
                    45:27:b2:7e:96:49:47:e8:61:66:91:99:19:0b:1d:
                    48:10:6c:e2:7a:64:d1:9a:85:7e:b6:1d:bf:fe:07:
                    22:06:94:9e:1f:cb:41:37:ad:3b:74:d9:3f:b4:10:
                    bc:eb:aa:9e:9f:e9:c2:45:d3:24:9f:4d:7d:f8:4d:
                    4b:2a:a0:7e:4e:92:bc:15:eb:1e:74:6a:e5:f3:da:
                    02:cd:7f:5a:03:cb:f7:f7:69:e7:e8:8d:22:e1:a0:
                    09:2d:c1:56:f8:62:fc:32:7e:2f:dd:ce:d6:da:2e:
                    c9:08:31:54:7b:70:1c:3a:46:9b:9b:b0:82:79:99:
                    fc:b4:00:d7:28:27:6f:9b:6a:02:7a:c8:b1:1e:1b:
                    ff:22:d7:de:5f:ef:2c:9d:e9:dd:a8:6a:d3:0e:e5:
                    a3:f4:07:67:4f:92:3c:7c:07:cb:12:3b:6c:50:67:
                    78:34:24:4a:22:30:59:7d:65:6d:5c:38:56:19:26:
                    40:b5:ee:3a:18:f8:12:12:ae:58:f2:b6:6b:08:67:
                    1d:4d:3d:e6:46:13:6f:f9:af:9c:d3:a9:00:c7:de:
                    79:5b:bb:f6:d4:40:63:24:02:b6:09:7d:88:c3:3a:
                    b8:a8:af:a5:0d:83:d2:98:ad:95:c7:0a:7a:f7:4b:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:A6:F8:C8:F8:B8:53:39:59:D4:89:DE:B0:66:B5:E8:E8:DB:E1
            X509v3 Authority Key Identifier:
                keyid:3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:74:6d:b3:9a:d0:70:04:3e:b8:2a:64:1d:0c:33:ec:24:d7:
         40:8e:12:4c:bf:7b:b7:7f:be:f6:3b:98:0b:fd:e4:ae:9d:03:
         f7:10:bf:88:c6:53:ef:53:48:84:e8:73:eb:b6:a5:f5:f5:a5:
         3a:3e:06:14:d0:d9:eb:42:c6:b3:57:1d:5d:03:63:41:38:b5:
         a5:1f:40:d3:61:ee:07:d1:19:c6:c7:94:3a:44:2b:5e:c2:07:
         07:00:16:1a:b5:bd:f9:5b:8e:64:ca:5a:c8:07:8a:4c:32:eb:
         50:13:5b:62:f5:ac:5a:ae:63:a1:b6:29:6d:2f:7a:13:25:b4:
         3e:fc:42:cc:53:2c:d9:2b:e5:77:df:0d:14:ea:56:12:bc:b5:
         f7:a5:6a:c9:27:53:b1:c0:fc:ea:42:12:31:2f:7b:d6:1a:9b:
         06:b0:73:88:19:e8:0e:e3:23:6f:cc:a5:4e:5a:b0:24:b8:d7:
         e1:ee:d1:f3:5f:70:52:6d:24:b2:b4:7f:9b:54:be:6f:fc:0d:
         23:bc:47:a3:ab:61:8f:f9:a1:dd:05:5c:54:0e:1a:b2:5c:d6:
         3c:f9:8c:7d:52:36:55:62:55:f7:db:5b:22:ba:44:76:5c:10:
         43:37:c4:51:f9:5c:99:2c:b9:00:89:e4:76:1f:24:77:dd:76:
         fd:86:59:da
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUFBODFBRjExMC8GA1UEBRMoM0M4RTA1MTJFMjc2QkFERTVBREMwQzgxQzY1OTM0
RTAzNDNDNjAxRjAeFw0yNTExMDUwNDQ1MDNaFw0yNTExMDcwNDQ1MDNaMBgxFjAU
BgNVBAMTDTY5MGFkNjRmLWZhMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEzWWOFNoV93UFu7WGhEUnsn6WSUfoYWaRmRkLHUgQbOJ6ZNGahX62Hb/+
ByIGlJ4fy0E3rTt02T+0ELzrqp6f6cJF0ySfTX34TUsqoH5OkrwV6x50auXz2gLN
f1oDy/f3aefojSLhoAktwVb4Yvwyfi/dztbaLskIMVR7cBw6RpubsIJ5mfy0ANco
J2+bagJ6yLEeG/8i195f7yyd6d2oatMO5aP0B2dPkjx8B8sSO2xQZ3g0JEoiMFl9
ZW1cOFYZJkC17joY+BISrljytmsIZx1NPeZGE2/5r5zTqQDH3nlbu/bUQGMkArYJ
fYjDOrior6UNg9KYrZXHCnr3Swr5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcRKm
+Mj4uFM5WdSJ3rBmtejo2+EwHwYDVR0jBBgwFoAUPI4FEuJ2ut5a3AyBxlk04DQ8
YB8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBQTgxLzk0RDc0QjRFNEYyMzExRUY5Q0UyNzA2Nzc2MkU5NTFBL1BJNEZF
dUoydXQ1YTNBeUJ4bGswNERROFlCOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BJNEZFdUoydXQ1YTNBeUJ4bGswNERROFlCOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUFBODEvOTRENzRCNEU0RjIzMTFFRjlDRTI3MDY3NzYy
RTk1MUEvUEk0RkV1SjJ1dDVhM0F5QnhsazA0RFE4WUI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWdG2zmtBwBD64KmQdDDPsJNdAjhJM
v3u3f772O5gL/eSunQP3EL+IxlPvU0iE6HPrtqX19aU6PgYU0NnrQsazVx1dA2NB
OLWlH0DTYe4H0RnGx5Q6RCtewgcHABYatb35W45kylrIB4pMMutQE1ti9axarmOh
tiltL3oTJbQ+/ELMUyzZK+V33w0U6lYSvLX3pWrJJ1OxwPzqQhIxL3vWGpsGsHOI
GegO4yNvzKVOWrAkuNfh7tHzX3BSbSSytH+bVL5v/A0jvEejq2GP+aHdBVxUDhqy
XNY8+Yx9UjZVYlX321siukR2XBBDN8RR+VyZLLkAieR2HyR33Xb9hlna
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:33:59 2025 by rpki-client