Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          cYSfW9pMzah9YwQC1FUqiyJ0UzHDs/q9BdLUiRRnCqs=
Subject key identifier:   07:52:67:FE:E7:BB:91:CF:A7:8B:90:7A:A5:FF:86:D6:27:3A:66:D0
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          C1
Signing time:             Wed 05 Nov 2025 05:25:20 +0000
Manifest this update:     Wed 05 Nov 2025 05:25:19 +0000
Manifest next update:     Fri 07 Nov 2025 05:25:19 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: 8kMz8C8Heo184w87zgSox2h0G1L19O0veKnoDMKBosI=)
                          2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: Nov  5 05:25:19 2025 GMT
            Not After : Nov  7 05:25:19 2025 GMT
        Subject: CN=690adfc0-2eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:67:d8:6f:8f:7e:81:7d:1a:8d:cf:aa:52:
                    d1:d5:f2:b7:f9:da:e3:67:31:dc:bf:a3:79:be:3b:
                    d0:71:c9:7c:3d:79:3b:6e:69:11:a4:35:8d:17:fc:
                    a2:9f:cf:7b:15:0b:27:71:5f:55:90:61:06:ea:ea:
                    16:0b:0f:2e:86:9b:74:fe:28:bc:fd:26:a1:ab:5a:
                    2d:99:f8:c8:fe:bc:ac:cc:50:41:ff:70:b8:61:2e:
                    36:dc:4c:77:d8:41:83:11:b8:6e:1f:c3:40:6c:0c:
                    97:81:06:a8:1f:0d:08:44:26:34:2a:05:49:67:b8:
                    36:81:a3:18:cd:d6:8a:b5:e8:dc:46:ab:42:e1:b3:
                    a1:cc:6e:e7:4a:f2:cc:51:9f:2b:c2:6a:76:a2:f8:
                    51:b1:55:77:ec:30:5c:74:de:d1:3e:cd:02:80:44:
                    b1:de:1a:70:6c:35:22:d8:00:c5:83:08:64:bf:0d:
                    3f:bf:82:02:b6:bb:ca:0a:1b:73:ee:df:ee:31:2e:
                    35:08:aa:58:ed:98:88:e7:8f:ec:f1:a2:c7:66:83:
                    6c:17:77:6c:6f:72:e2:59:4a:a7:e5:34:c0:34:ee:
                    03:90:86:92:57:6e:cb:67:51:6f:80:41:7b:d4:9d:
                    e0:dd:75:6f:41:63:91:0a:65:f8:95:55:e1:1b:55:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:52:67:FE:E7:BB:91:CF:A7:8B:90:7A:A5:FF:86:D6:27:3A:66:D0
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:95:e1:f8:df:12:9e:66:dd:3c:88:08:48:56:e1:1e:68:c0:
         e0:51:16:8f:fa:65:41:c1:10:ae:25:e8:4b:49:67:10:2d:78:
         89:56:a4:f9:ab:db:44:47:fb:30:9c:89:e5:d2:79:c1:f7:4b:
         f9:78:a9:30:0c:06:74:14:7f:5d:86:86:f5:e3:3b:0b:8c:b2:
         0d:8e:e2:20:6c:c3:7e:56:a3:d5:16:2f:4e:f2:bc:12:f1:c7:
         6d:13:d8:9a:b8:3c:38:ea:a1:31:23:60:3e:61:b7:da:ca:10:
         4e:3a:a1:f8:a0:c5:17:63:db:a5:02:62:27:f7:2c:97:5b:b4:
         84:91:ad:2a:4e:aa:bc:63:83:b4:5f:de:37:2b:dc:ec:ec:bf:
         ef:ac:de:d4:80:80:08:43:88:a2:50:5f:1d:6d:66:9e:68:b9:
         25:11:7c:32:08:48:c2:2b:04:ae:88:6b:99:ac:4e:b4:b9:07:
         b0:99:86:10:38:d7:e7:e4:19:e7:20:3b:c1:2c:4a:06:c4:e9:
         b6:cd:8d:3a:af:82:20:7b:e3:a1:ea:59:85:c5:98:f7:ea:90:
         75:aa:5a:67:52:aa:54:68:b6:70:98:8f:fc:3d:ea:b3:c5:03:
         fd:c8:d3:00:55:b4:c4:9e:05:fc:9d:6b:e9:e1:65:19:ed:2d:
         b8:f3:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:46 2025 by rpki-client