Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          YFFhUZvIUio8r0soBHmPPFs7BGsLbdqh+bEDLEIw1XQ=
Subject key identifier:   46:5B:76:4A:B9:D7:2D:9E:64:4A:53:42:2A:1C:E5:C6:85:87:E7:27
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0DCE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0DCD
Signing time:             Wed 05 Nov 2025 01:01:19 +0000
Manifest this update:     Wed 05 Nov 2025 01:01:19 +0000
Manifest next update:     Fri 07 Nov 2025 01:01:19 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: NdlHxxDVrBwhzfJVFNKAnfMClWdX/MXyTTV6pKt8TYQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3534 (0xdce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Nov  5 01:01:19 2025 GMT
            Not After : Nov  7 01:01:19 2025 GMT
        Subject: CN=690aa1df-47bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:e3:74:86:8c:18:05:87:87:f0:42:6d:eb:
                    7a:cc:73:c3:93:f2:83:cb:de:78:d7:b9:3a:38:4d:
                    37:a0:0d:cd:da:b8:f1:47:fb:1a:13:e5:f6:9c:43:
                    15:4f:1e:aa:80:a9:b6:cb:e8:55:59:26:92:2e:24:
                    21:e3:c4:57:5e:62:9e:4e:a9:a4:4b:5c:28:eb:35:
                    81:3e:e4:bb:de:0d:c2:8d:94:48:06:8f:27:72:92:
                    18:86:54:25:ea:10:7f:20:2a:76:0e:0a:b5:c3:15:
                    3b:03:2f:0f:6c:58:3c:a9:29:77:37:53:0b:b0:bc:
                    9c:94:5c:bb:e6:80:dd:ed:d2:c0:07:7e:d7:95:40:
                    d0:30:fc:c7:1b:5e:59:cb:86:e1:e6:a4:f7:7c:c7:
                    eb:d0:17:ea:87:50:37:2d:a7:5d:af:d8:98:e4:2d:
                    5a:7e:0f:8d:4b:7a:4c:ee:52:1a:bc:c7:54:b7:9b:
                    9d:d6:ab:fb:25:5f:a8:ed:13:c5:13:f7:ad:51:a5:
                    3c:0e:e2:86:81:76:be:2c:83:b4:9a:38:55:f2:8c:
                    36:4f:49:a0:7d:44:b8:b1:b0:56:db:03:7c:8f:be:
                    1b:43:83:df:d5:cc:43:39:e8:89:93:ce:f8:5b:36:
                    78:1e:40:62:e8:b4:0f:9c:7b:bd:51:b7:97:17:11:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:76:4A:B9:D7:2D:9E:64:4A:53:42:2A:1C:E5:C6:85:87:E7:27
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:59:c3:03:55:98:90:a8:0f:92:22:ee:be:1b:b2:77:07:49:
         44:23:41:a4:9d:68:67:de:43:03:7f:ac:08:76:05:7d:2a:f6:
         69:bc:54:c1:a4:93:3e:a4:3d:0e:ca:0e:7a:13:30:f9:34:e8:
         9f:5c:36:67:64:49:94:db:2a:41:6c:9a:c6:10:fd:70:13:8b:
         1a:28:f7:5c:59:b3:50:dd:79:01:28:12:b9:7d:c2:9c:aa:bd:
         c1:9b:df:3b:15:e9:67:f6:a3:9a:fc:ac:fe:27:c9:8f:a1:3a:
         ee:1e:01:c9:cd:60:52:e1:3c:32:b1:c5:a7:2c:55:7a:aa:72:
         a5:03:6b:21:24:15:29:83:4a:35:8f:fc:aa:dc:38:24:c3:be:
         c8:6b:3c:5f:9b:29:a0:fc:b9:12:0d:41:76:7a:a9:aa:7b:ec:
         e1:dc:c7:47:25:f9:ac:a3:6e:89:39:a8:c6:32:87:93:cd:f7:
         34:7d:f2:47:72:54:57:34:88:f5:4e:6e:fe:09:42:d6:b2:8c:
         3a:a3:15:32:7e:04:88:be:18:10:4c:45:4e:8b:0d:ea:46:6a:
         b8:09:be:b1:b6:14:35:05:02:e0:9b:65:44:83:ff:43:da:2f:
         37:df:89:95:74:df:9d:9c:27:9d:ed:a9:e3:7a:8c:62:05:50:
         61:19:a0:2b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFBRjExMC8GA1UEBRMoRkQ1OUFDMjA3NzM1OUIwRDcyM0QyMEFBOTk5QThF
MTZBODRCNDE5MzAeFw0yNTExMDUwMTAxMTlaFw0yNTExMDcwMTAxMTlaMBgxFjAU
BgNVBAMTDTY5MGFhMWRmLTQ3YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiTuN0howYBYeH8EJt63rMc8OT8oPL3njXuTo4TTegDc3auPFH+xoT5fac
QxVPHqqAqbbL6FVZJpIuJCHjxFdeYp5OqaRLXCjrNYE+5LveDcKNlEgGjydykhiG
VCXqEH8gKnYOCrXDFTsDLw9sWDypKXc3UwuwvJyUXLvmgN3t0sAHfteVQNAw/Mcb
XlnLhuHmpPd8x+vQF+qHUDctp12v2JjkLVp+D41LekzuUhq8x1S3m53Wq/slX6jt
E8UT961RpTwO4oaBdr4sg7SaOFXyjDZPSaB9RLixsFbbA3yPvhtDg9/VzEM56ImT
zvhbNngeQGLotA+ce71Rt5cXEQVNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURlt2
SrnXLZ5kSlNCKhzlxoWH5ycwHwYDVR0jBBgwFoAU/VmsIHc1mw1yPSCqmZqOFqhL
QZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBL0EyNTU5MTlDMUMxQzExRTZCQTFFNUMwQ0Y4QUVBMjI4L19WbXNJ
SGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19WbXNJSGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjQ5RkEvQTI1NTkxOUMxQzFDMTFFNkJBMUU1QzBDRjhB
RUEyMjgvX1Ztc0lIYzFtdzF5UFNDcW1acU9GcWhMUVpNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiWcMDVZiQqA+SIu6+G7J3B0lEI0Gk
nWhn3kMDf6wIdgV9KvZpvFTBpJM+pD0Oyg56EzD5NOifXDZnZEmU2ypBbJrGEP1w
E4saKPdcWbNQ3XkBKBK5fcKcqr3Bm987Feln9qOa/Kz+J8mPoTruHgHJzWBS4Twy
scWnLFV6qnKlA2shJBUpg0o1j/yq3Dgkw77Iazxfmymg/LkSDUF2eqmqe+zh3MdH
Jfmso26JOajGMoeTzfc0ffJHclRXNIj1Tm7+CULWsow6oxUyfgSIvhgQTEVOiw3q
Rmq4Cb6xthQ1BQLgm2VEg/9D2i8334mVdN+dnCed7anjeoxiBVBhGaAr
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:26:34 2025 by rpki-client