Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
File:                     bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft (raw, json)
Hash identifier:          bKny0cT5FuO31qcWpVLlcLoZnXc370hBz6Ifv5JEpuE=
Subject key identifier:   51:5C:94:F9:94:41:F5:B5:82:76:BD:C5:14:9B:97:5E:79:F0:DD:E4
Authority key identifier: 6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64
Certificate issuer:       /CN=F36B7E77AF/serialNumber=6E3D1AA94E2D62AF8112BDFFB049C40FF9BD6D64
Certificate serial:       C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
Manifest number:          C2
Signing time:             Wed 05 Nov 2025 05:25:07 +0000
Manifest this update:     Wed 05 Nov 2025 05:25:07 +0000
Manifest next update:     Fri 07 Nov 2025 05:25:07 +0000
Files and hashes:         1: bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl (hash: GdLt1gBN5ZlzssyvN/2rVad5l3yeZPh0fSko9MRcrpk=)
                          2: EC8CEE0424CD11F0A95A70B7DAE4EC9C.roa (hash: vHw6M4Jn3ZWzx4xczXCaEyluLBv1RtYMY0f4ZJEhTsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7E77AF, serialNumber=6E3D1AA94E2D62AF8112BDFFB049C40FF9BD6D64
        Validity
            Not Before: Nov  5 05:25:07 2025 GMT
            Not After : Nov  7 05:25:07 2025 GMT
        Subject: CN=690adfb3-1efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:7c:fd:ef:f7:0f:bf:6f:64:27:8f:27:38:
                    f0:dc:b9:24:13:d5:37:47:c2:b3:c1:5d:3d:20:0a:
                    7d:97:c9:73:e1:d8:f2:04:8f:f5:dd:7f:2c:9f:a6:
                    f7:d8:09:4c:1b:32:95:83:72:b2:0d:05:c8:f1:32:
                    86:c1:fc:b7:ef:ab:62:dc:a9:06:6f:34:cf:65:e9:
                    cd:e1:5e:be:e1:32:68:fe:77:28:ad:c2:d8:23:e0:
                    f1:e6:8d:9e:13:ed:30:72:99:08:93:d8:b1:5e:c9:
                    2c:bd:32:b9:9f:34:ec:cf:28:26:f5:80:25:4c:af:
                    dd:96:b6:d5:06:30:97:ba:12:f3:59:3d:fb:74:96:
                    12:60:d6:dc:18:2b:d2:c9:f4:df:76:1a:4a:4d:da:
                    68:2e:d6:9f:61:d4:05:f9:be:b6:d3:40:a3:0a:51:
                    a1:8c:f9:55:07:10:1d:08:b8:5f:3d:a3:10:18:18:
                    4d:5a:22:6a:6f:04:47:a1:2e:c2:c6:15:46:f2:dd:
                    9f:f4:81:b3:66:d9:77:3d:16:dc:0b:a5:0b:2a:3a:
                    99:46:bb:84:2d:6a:4e:a5:91:dd:e2:73:30:a6:3f:
                    67:78:77:80:31:90:86:ed:4e:61:0c:93:61:b2:e4:
                    3f:47:16:f8:f1:93:8f:86:9b:71:cd:19:96:72:2f:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:94:F9:94:41:F5:B5:82:76:BD:C5:14:9B:97:5E:79:F0:DD:E4
            X509v3 Authority Key Identifier:
                keyid:6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6b:2f:85:2d:9b:0e:6a:fb:9b:cf:91:66:a0:44:46:68:19:
         2e:ff:e0:ad:37:2d:b6:69:7b:db:fb:9c:a4:8e:25:31:ee:cc:
         bc:61:36:b8:b0:f0:7f:14:9b:e8:c5:b4:84:cf:f6:7e:b6:d6:
         eb:0b:fb:27:69:9e:d3:27:24:48:5d:7d:1d:30:6e:5a:c4:3e:
         d2:30:ba:db:2b:b7:94:3a:83:62:64:ba:32:d0:85:de:10:4b:
         f8:c7:43:90:ed:c4:c1:8a:c3:2f:b0:e1:af:01:5c:fd:fc:c1:
         ea:59:25:ab:90:ec:2f:6a:a3:43:76:3b:7c:11:fd:15:45:df:
         9a:d1:91:e4:59:61:b4:e3:a9:87:bb:1b:6a:ad:20:c8:1e:92:
         fe:83:ba:02:73:bc:ab:7c:c5:e9:60:54:45:7e:cd:23:dd:cd:
         fa:99:3d:e8:26:25:82:db:f8:9a:0f:8a:cd:46:78:52:6a:43:
         36:c8:e8:a6:2e:5e:65:9f:cb:73:16:59:96:99:a7:35:6b:b9:
         48:9e:d6:a4:85:65:ea:50:da:a7:6c:16:8d:bf:21:f3:86:25:
         9f:e2:1b:da:24:45:a2:26:a5:f7:cc:0b:a7:5c:50:92:16:b9:
         41:9c:91:4a:87:af:7e:1f:2b:c8:0a:de:8e:eb:d1:03:1d:0e:
         4f:4a:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:56:03 2025 by rpki-client