Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
File:                     mCHIciHScLQv-d2CYEi5ksDg4_g.mft (raw, json)
Hash identifier:          g6uqFQfIwqOnfEl3d8YZ/BIsdM9mBTHEuC1eCy7oToM=
Subject key identifier:   F4:F9:2C:60:AC:85:9E:4F:C9:91:31:72:11:DA:02:81:48:3D:4A:39
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Certificate issuer:       /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial:       0993
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
Manifest number:          097C
Signing time:             Wed 05 Nov 2025 01:28:46 +0000
Manifest this update:     Wed 05 Nov 2025 01:28:45 +0000
Manifest next update:     Fri 07 Nov 2025 01:28:45 +0000
Files and hashes:         1: mCHIciHScLQv-d2CYEi5ksDg4_g.crl (hash: AFtH5Wy7Q0CTDOMX8DE/J899u4+zVarVphyKRl5K+Hg=)
                          2: 69F6F72E183911EFBF341D4D017001B1.roa (hash: DuMThKY6xBymEy/33KKiiuYHPeaPmPt6u+DXp7D5WjQ=)
                          3: 20E37D84181E11EF884D5670017001B1.roa (hash: r4JXcPcpV3yHS4MSrJyqmzyEIPekoajFMK2etOSwSmw=)
                          4: 1B0A9C8E193C11EFA964BD07017001B1.roa (hash: NAP2HUgvz/UnL9IaRYi5mpgMbBqnI4I0duHhEgFfKiU=)
                          5: F17735F8193B11EFBB9B5707017001B1.roa (hash: rP8+XOS2i6Wv+uX+uRO8DnePWvJsxmp6m/QIOOMttEU=)
                          6: 01C465AC09B211EDA2B591F4F1222468.roa (hash: 2EpB7RaoJ24NXvT5qfIYQLCMWI8szsFSjFsm/RP0908=)
                          7: CB4AFBFAFC5311EC9724A380F1222468.roa (hash: 2sFMoTvQJl4L9hfB3Yyl+kk4dzHhxa7IIdirIWzz6+4=)
                          8: 0D3699EA182011EFB0665C02017001B1.roa (hash: ffLj8neZ8zF5YH02WG3kYbtHmn8I2gcOMC6IWbrZsZ4=)
                          9: 441AF75E193C11EF8B2A4608017001B1.roa (hash: LBmATIjlAFyVvWTju4PJRcrTlmU1BoTbZcCfdVCkOpk=)
                          10: 8474E3C0193511EFBBDCF64F017001B1.roa (hash: lD46K/SWIIlyy7r0WqwsbOFMFHdgeEoplVoIisW1eKI=)
                          11: 2D6EC9D0182F11EF9D7EC8FD007001B1.roa (hash: mZJR8/8heetzC1ByMuN1CwCkJrHPUy6Xi1M3Cz7urKE=)
                          12: 32C3FF14184C11EFBABCB663017001B1.roa (hash: jVOSrPy6rBmNjgBvmjlpyANo+SgMJVoT9LMIbEspZNM=)
                          13: 3EC80414193B11EFA814C401017001B1.roa (hash: RwdDWn+rCeNIP2TaM9FNS+HHzJKG99nTcmVTo1KCVzY=)
                          14: 671080BE182C11EF929AE265017001B1.roa (hash: 26vGSbnaEjAjV9LkmHmC7Z8/mZ5rYbu0rYbbhsdjxk0=)
                          15: CB965B0C193B11EFBA223A03017001B1.roa (hash: sMbPGMNRNs/HWlVnJHU38gLkDR93KstBJHkGXN3mkos=)
                          16: 04046444181E11EFAEE9FC6F017001B1.roa (hash: Bmr9RFUMYwMluDn47Xr62rRvVuIPy+J/XTHta98qV6w=)
                          17: B82002D4F14811ECAF1C02E4F1222468.roa (hash: duitgh3EHDUh0aFzVM+neWLovcHHsxs9PP1LAq5U0+w=)
                          18: A38114EA193B11EFBFE3D102017001B1.roa (hash: 3OVDDFhyULj89NUgF6NVKjGcWXCi7Vh0V5m2G3pIkUE=)
                          19: 75F8ADB6193C11EF939DBA08017001B1.roa (hash: 2AwJdyG/BsOF6Nkf1Pa3H+rtG00IJDTE6LVwear3MT0=)
                          20: AAAD458A09B211EDB6D79EF6F1222468.roa (hash: BidB951Ppl4rHIlEUl9v6erDQdFD3uYk8SZSKLKiU14=)
                          21: 839545FC193B11EFACD26F02017001B1.roa (hash: czlg8CfEAltZYLywfxFoeA7yscJbiONGYvSH2E6y30A=)
                          22: 601EE27C193B11EFA08C1D02017001B1.roa (hash: ntBI0CCcAp11C7pv36CUdwbbK/+TRzaLEh5A3QLQq80=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9F4BAF, serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
        Validity
            Not Before: Nov  5 01:28:45 2025 GMT
            Not After : Nov  7 01:28:45 2025 GMT
        Subject: CN=690aa84e-6a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:2d:17:90:1a:fb:b3:2d:a4:7a:cb:91:9b:
                    c9:db:32:8d:9d:ef:d7:3e:9f:8b:c3:95:f8:f0:4b:
                    29:e9:0c:7c:ce:3c:95:8c:7a:7f:33:c8:21:5a:83:
                    d9:39:12:83:86:32:0b:d4:48:70:d4:e8:3b:01:35:
                    38:78:1d:cf:3f:78:c1:9a:4a:db:62:ee:da:82:37:
                    28:82:42:28:66:63:96:4d:d1:71:4c:8a:45:d5:04:
                    b6:c7:70:85:d0:f6:de:d2:a1:ff:53:32:64:92:5e:
                    d1:7a:51:e8:18:0e:4b:4f:76:d3:51:8d:e4:2a:db:
                    ca:4e:23:bf:16:31:80:ad:d3:c7:16:29:0f:82:a2:
                    ca:30:32:b8:3a:70:b3:57:6f:91:7c:8f:0c:e4:b9:
                    c0:c8:3f:65:e9:b3:da:d7:29:e8:17:ef:69:36:ab:
                    a6:9a:e4:f2:f3:f0:01:29:48:5c:cf:c5:47:47:c7:
                    70:45:b6:bd:2e:57:15:62:30:f8:34:93:d2:b6:69:
                    b6:fe:d7:c6:be:e6:a9:5b:49:bb:88:77:8d:81:37:
                    63:29:bb:c8:ed:2d:37:b2:83:6b:7c:19:1c:39:34:
                    6e:1e:a5:5b:c3:a5:0c:af:80:b8:00:91:9e:66:9e:
                    65:85:fb:75:0b:7c:1e:4e:27:8b:95:6d:09:fe:43:
                    fc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:2C:60:AC:85:9E:4F:C9:91:31:72:11:DA:02:81:48:3D:4A:39
            X509v3 Authority Key Identifier:
                keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:3e:c1:43:8a:0e:51:b3:29:25:b4:8e:2e:15:ff:8c:8a:
         f4:95:89:ff:b0:a1:3d:82:7d:c6:31:c0:56:db:a1:63:f2:b6:
         c0:4f:36:b9:5f:c4:af:be:9a:0b:c5:47:2e:56:61:32:50:73:
         21:bb:e0:f2:97:30:bd:24:3d:a7:04:0c:fd:2a:ad:3a:5f:97:
         78:81:26:46:ae:9c:e4:46:a4:8d:38:05:69:c0:54:df:32:a6:
         e2:bb:6c:17:92:09:d1:60:ed:0f:3f:87:8a:47:85:7c:83:01:
         8b:bb:0c:39:cd:15:9e:76:ba:1a:70:0f:54:b2:e8:80:7c:c6:
         e5:9d:27:c2:30:7a:e8:ad:9d:b9:88:de:a5:0c:b7:7c:46:0c:
         e4:a4:18:4e:28:10:d5:e0:42:6d:d9:5d:fa:db:3a:2a:72:b0:
         80:bc:9c:22:4b:ea:21:7d:48:fa:59:17:76:e7:ec:55:13:57:
         9c:83:35:49:32:70:a0:b0:cb:3f:10:de:ba:0d:a4:dc:02:32:
         8d:01:91:1c:65:c2:7f:c2:b5:60:7f:e1:f3:de:6b:6f:04:ac:
         08:41:53:7d:ea:28:d4:db:52:a0:0d:b6:c2:1f:2b:65:f5:d6:
         c1:d0:7d:1a:f0:e2:8d:3a:80:89:7f:12:d6:ba:13:81:86:4a:
         b8:3d:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:08:39 2025 by rpki-client