Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          8o7wQrI+tf+p94xmj6iG8jpIY53CuOK/oJko+oissbc=
Subject key identifier:   D2:48:E9:DB:51:78:17:68:3F:E8:F5:CB:38:CF:90:F3:3B:00:BA:A6
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       0210
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          020E
Signing time:             Tue 04 Nov 2025 05:36:02 +0000
Manifest this update:     Tue 04 Nov 2025 05:36:01 +0000
Manifest next update:     Thu 06 Nov 2025 05:36:01 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: /rc0OUvWgBClxCRlwYJ4YmZFj2kWZCgMFd3rzE+L3OU=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Nov  4 05:36:01 2025 GMT
            Not After : Nov  6 05:36:01 2025 GMT
        Subject: CN=690990c1-9ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:89:3f:40:dc:37:a7:9e:c8:84:cf:a5:fd:
                    b6:fa:dd:1c:dc:b5:d7:8e:c2:04:ed:10:03:a6:00:
                    b4:79:a4:95:ad:d9:c6:9d:2e:96:cb:27:91:ca:8f:
                    37:65:52:d3:a9:a7:5a:d1:13:c4:fa:42:28:bc:25:
                    94:3a:61:4d:58:81:4c:c8:23:80:08:42:69:44:60:
                    85:d5:38:2b:76:04:5b:19:b5:76:cf:3d:f2:0f:a8:
                    6a:71:a0:2c:8c:49:c6:fa:0c:db:e5:c1:fb:ba:20:
                    df:00:68:92:96:fa:b4:d7:9f:c3:16:d4:68:2d:e2:
                    e2:33:6c:2f:8e:61:56:0c:bc:ff:89:f5:ea:0f:eb:
                    a3:27:c8:ef:1e:39:f7:83:61:73:2f:9b:45:7d:35:
                    30:7b:87:81:34:45:4f:56:e4:91:37:87:74:a2:65:
                    91:54:1e:16:a6:91:48:a1:a0:ca:dd:66:ab:07:a0:
                    83:10:bc:12:2b:63:f3:99:b1:f7:71:0a:8c:32:c7:
                    af:16:c9:fc:03:94:6a:ab:36:d2:9f:52:c7:80:67:
                    a7:da:83:35:e7:f4:ea:10:c1:2f:89:20:71:81:9d:
                    da:14:fc:f3:c0:fd:12:0e:47:c5:e6:50:38:9a:84:
                    89:f3:00:0f:73:5d:aa:33:7d:31:1a:94:d2:e3:89:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:E9:DB:51:78:17:68:3F:E8:F5:CB:38:CF:90:F3:3B:00:BA:A6
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:62:a1:27:80:73:49:7c:14:64:76:73:c4:5d:16:a9:d1:69:
         af:63:23:2f:86:fd:75:c5:13:4d:04:cc:f9:7b:7d:3b:7b:09:
         6f:0b:2f:d4:0a:70:de:d5:dd:16:25:32:be:30:83:81:ef:90:
         ec:78:e7:16:b4:fb:54:a2:ca:bc:af:04:b0:e9:ca:d3:6d:39:
         f9:d9:2d:9c:fd:ed:84:4d:14:05:53:4d:6b:ec:64:56:29:13:
         59:36:7e:af:de:ef:0a:ba:8a:fc:72:eb:33:c1:38:39:0f:ab:
         cf:fc:2b:1a:1e:b1:16:52:34:61:89:3b:16:3a:49:1b:9a:16:
         b7:85:e6:b7:e4:7d:ca:97:22:57:4b:a8:a2:1f:1c:91:ee:01:
         69:73:9f:c6:e1:99:16:e6:d8:90:0d:9f:2b:b7:6f:60:ed:3e:
         4f:8a:f1:87:d6:9f:eb:5b:80:80:04:c2:5f:e7:c6:c5:1a:cb:
         16:10:db:f4:e9:e5:ab:f9:9e:62:59:77:47:4d:81:65:ad:83:
         6d:63:ef:a1:d0:cd:db:44:13:b3:d8:07:0f:d8:45:1b:a4:4a:
         ad:63:ce:ca:1c:dd:2a:d8:62:28:db:37:4a:7c:e5:e2:ab:17:
         6e:49:6f:1a:43:09:9a:f5:75:2c:3c:74:b4:5c:cf:4a:75:12:
         a2:13:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:56:06 2025 by rpki-client