Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
File:                     2WACNlD1TrS44dw0q9RZ9QJw140.mft (raw, json)
Hash identifier:          C1Eu0tEnMLNmg9jDzUkTPZi7rpAajpcCbzJjOHYUVgU=
Subject key identifier:   D2:D6:0E:FD:B3:B5:27:C0:31:67:59:97:C0:3F:87:8F:E2:84:65:39
Authority key identifier: D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
Certificate issuer:       /CN=F36B9A81AF/serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
Certificate serial:       0256
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
Manifest number:          0255
Signing time:             Thu 06 Nov 2025 04:31:56 +0000
Manifest this update:     Thu 06 Nov 2025 04:31:56 +0000
Manifest next update:     Sat 08 Nov 2025 04:31:56 +0000
Files and hashes:         1: 2WACNlD1TrS44dw0q9RZ9QJw140.crl (hash: 3qS8VfjP6ZWxS4BTnUX82m1SKt0Qoy+AqPF+IcG9rr8=)
                          2: 31539876F1A311EEAC1F355D775412E6.roa (hash: j6M+6W88movOdd6zMZWbEb9mu+RhA+HSxS5xxIDt/qU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Nov 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9A81AF, serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
        Validity
            Not Before: Nov  6 04:31:56 2025 GMT
            Not After : Nov  8 04:31:56 2025 GMT
        Subject: CN=690c24bc-24e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:b9:e6:87:ce:a8:bd:60:7e:4a:a3:c4:91:
                    05:dd:28:12:fa:38:d3:4c:07:77:e2:98:e4:03:64:
                    bf:18:d2:90:bc:18:19:97:64:c7:e8:13:18:9d:8a:
                    b2:51:23:e9:83:71:43:8d:1a:a9:05:d4:99:2c:7f:
                    37:b6:e3:97:ce:ed:3e:33:2d:bd:4d:e6:d5:82:00:
                    8b:ec:37:36:96:72:3b:77:99:b5:16:36:34:7e:eb:
                    72:3e:92:8e:35:08:51:94:68:71:58:7b:6b:0e:32:
                    3b:79:51:d4:db:3b:4b:4d:ac:08:86:6b:c7:81:a0:
                    b4:6b:61:0f:f0:6c:ef:e2:b3:b2:6b:d4:04:4c:a4:
                    cf:18:b7:2a:79:ce:45:92:75:84:12:93:61:9d:02:
                    8b:08:9b:7b:a0:a6:3d:c5:5f:cb:86:ed:67:bd:e7:
                    34:90:71:08:e5:16:7f:e7:8d:d2:c9:f3:bb:56:99:
                    bb:cd:81:e1:f5:46:ad:1d:a6:4f:a6:f5:a0:76:39:
                    45:5d:d3:93:89:5d:d4:56:39:ec:40:22:f4:21:7b:
                    6d:49:60:9f:87:44:37:45:99:bb:99:8d:26:92:19:
                    43:ee:aa:4a:6e:42:23:f4:98:2d:4d:76:b4:67:e2:
                    00:14:96:c7:82:18:68:30:3f:a3:77:95:36:be:d2:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:0E:FD:B3:B5:27:C0:31:67:59:97:C0:3F:87:8F:E2:84:65:39
            X509v3 Authority Key Identifier:
                keyid:D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:76:e6:2a:d5:19:21:49:2b:c1:83:2a:8e:18:9f:78:2b:ac:
         4c:89:64:88:dc:db:f9:f9:49:ef:0f:6b:e5:05:4c:ad:d7:49:
         30:aa:64:6e:21:4c:17:3a:20:00:71:5b:f9:93:9c:e9:1e:20:
         2f:79:4e:1b:5a:e8:bc:71:d1:21:f2:cf:cf:6f:0a:9b:08:68:
         3d:23:a2:ac:63:27:23:de:ed:49:68:40:eb:8e:44:72:dd:3d:
         6a:b9:cd:32:17:ff:3d:26:11:86:35:2e:07:35:f3:aa:a9:9b:
         6e:18:29:61:13:a0:99:57:49:af:3e:18:01:d8:37:2c:c6:51:
         a4:73:71:87:2d:73:36:7d:88:f1:88:dc:6c:d5:ef:7e:b8:e2:
         d3:06:7e:59:82:08:b2:b8:09:98:48:83:8a:cd:37:4d:31:f1:
         87:28:40:be:68:54:58:6e:56:de:3f:4f:79:42:08:e2:2e:4f:
         ff:bd:d5:1c:41:57:2a:48:5e:d7:a0:ee:20:4f:47:c8:4c:09:
         c7:7e:0d:5b:d3:7b:9b:10:c4:49:0e:b1:dc:df:a0:04:ac:65:
         9d:51:98:a5:ac:da:73:27:1d:f8:ac:e2:3f:7b:41:58:f1:a5:
         c0:0b:89:cd:67:4a:d0:1d:9b:9a:d3:f0:bb:53:22:b9:dc:38:
         21:ab:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:33:02 2025 by rpki-client