Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
File:                     vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft (raw, json)
Hash identifier:          z+ulI8UCqKao6J/9ARgzRZmhPBipgaBhDXX7BDqWmOA=
Subject key identifier:   41:D6:CB:E5:CD:4F:15:D1:32:AD:2E:2E:D7:F5:93:67:6D:89:96:26
Authority key identifier: BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
Certificate issuer:       /CN=F36C6E82AF/serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
Certificate serial:       058C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
Manifest number:          0587
Signing time:             Wed 05 Nov 2025 02:44:09 +0000
Manifest this update:     Wed 05 Nov 2025 02:44:08 +0000
Manifest next update:     Fri 07 Nov 2025 02:44:08 +0000
Files and hashes:         1: vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl (hash: NHOWd91xmzLd7wLtOGVeYF/tG2g2RtZ1XXnlHaYwGKg=)
                          2: 50AFFF0ADD5E11EF9528EA76762E951A.roa (hash: X/76grUx+yq5QwPbiP76boks2mvwi+U8qIBcIC9zkRk=)
                          3: DE984A9CDD5F11EF97FAAB81762E951A.roa (hash: fUANEwPxt+FMRtzoia+WBkgjHhKhDNEr9B25Cto/vac=)
                          4: 981DE518DD5F11EFA9C15D7F762E951A.roa (hash: WU63DMCmbQDZq2LBTtRZnwwYc2gn9fKgVZ3QXsL3MLQ=)
                          5: 6A0C7B08DD5F11EFAC5D7A7C762E951A.roa (hash: PbOc0rH6HsLdll3C/DDTeZ+xtTIsbBYGvnSDWgrs3mk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E82AF, serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
        Validity
            Not Before: Nov  5 02:44:08 2025 GMT
            Not After : Nov  7 02:44:08 2025 GMT
        Subject: CN=690ab9f9-7f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:15:2d:08:9e:e0:86:f5:0e:30:27:a9:63:
                    37:21:e2:01:86:16:38:ee:91:3a:76:d0:97:0f:4a:
                    04:a6:b6:4e:f7:76:07:77:7d:cb:39:06:d3:e7:56:
                    36:62:2b:d8:31:bf:14:35:38:3d:97:b9:64:a8:ee:
                    c2:cb:eb:a2:cd:2a:f1:a0:49:a5:26:65:9a:9c:26:
                    0f:79:26:09:05:4e:c7:68:77:e0:08:1e:0c:62:31:
                    af:04:7d:be:d2:e1:39:5a:b1:07:d4:e7:84:94:fa:
                    49:c4:2e:35:40:8f:bd:09:03:25:64:f8:42:cf:7e:
                    ac:12:04:09:30:24:1c:37:8f:5c:e4:69:b6:c4:40:
                    67:d0:8c:df:e1:81:d6:25:d2:c4:93:a5:2d:f5:1c:
                    67:bf:23:1c:0e:6c:f4:2f:a9:2e:9f:37:5a:52:85:
                    ba:b1:f3:d8:ae:d8:e4:9b:7d:8b:cb:3a:11:cb:5a:
                    63:8d:67:f0:44:30:bc:5f:94:d4:c8:0d:2d:bc:17:
                    b8:18:52:3e:4e:cf:ac:dc:47:a8:ac:f9:de:e1:26:
                    cd:43:47:d7:95:6a:3b:44:93:e2:8d:47:1c:a4:c4:
                    86:01:fb:ab:d8:4f:cf:1e:bd:3e:cb:f8:5e:0e:fd:
                    8c:e0:39:3e:4c:00:32:01:c6:d1:29:a8:e5:7b:fa:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D6:CB:E5:CD:4F:15:D1:32:AD:2E:2E:D7:F5:93:67:6D:89:96:26
            X509v3 Authority Key Identifier:
                keyid:BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:22:23:ea:95:db:a6:38:fe:66:b8:13:89:39:f1:79:e3:
         15:d5:a3:4e:84:73:56:aa:45:53:a1:f2:0b:9d:62:b8:d6:7d:
         3e:74:3f:51:d9:2f:cb:c4:33:99:88:9a:20:90:16:5b:f1:b7:
         e1:15:95:40:b0:ae:5c:46:31:6d:19:cf:3f:01:bc:94:d6:04:
         35:39:79:ee:bc:02:69:e5:26:3f:47:fe:b6:2e:fb:8f:3f:e4:
         8d:63:f5:41:f7:5e:64:f4:a3:eb:25:ce:97:6e:26:c7:82:40:
         f3:54:fd:d8:11:ab:59:ca:f4:db:b3:89:b4:49:da:36:c0:8d:
         4b:de:96:f0:a0:6d:ea:cd:6e:73:d9:23:70:32:e6:1f:79:33:
         dc:24:db:2c:47:ee:c0:27:3b:49:b6:0b:cf:53:11:37:a9:1f:
         09:3a:db:70:f3:26:f7:f7:81:00:be:3b:92:2d:d1:88:e2:41:
         2e:90:9c:60:4e:be:d5:32:89:bc:1d:82:08:cb:b2:aa:a2:11:
         42:0f:54:3c:b4:38:6f:aa:47:a1:3e:0c:ba:a6:6b:00:0c:a8:
         0b:f7:e0:1a:88:78:84:3b:99:34:3c:77:26:39:8f:ed:10:fd:
         4d:05:ef:df:b8:48:db:cf:23:75:f7:e9:d4:42:92:c4:9b:a1:
         f8:51:1b:df
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZFODJBRjExMC8GA1UEBRMoQkU5RTZBQjI2ODg3RTA0RDU1NkU4NTBDNTRBNUU3
RjEzMjREQkQ5RTAeFw0yNTExMDUwMjQ0MDhaFw0yNTExMDcwMjQ0MDhaMBgxFjAU
BgNVBAMTDTY5MGFiOWY5LTdmMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFbBUtCJ7ghvUOMCepYzch4gGGFjjukTp20JcPSgSmtk73dgd3fcs5BtPn
VjZiK9gxvxQ1OD2XuWSo7sLL66LNKvGgSaUmZZqcJg95JgkFTsdod+AIHgxiMa8E
fb7S4TlasQfU54SU+knELjVAj70JAyVk+ELPfqwSBAkwJBw3j1zkabbEQGfQjN/h
gdYl0sSTpS31HGe/IxwObPQvqS6fN1pShbqx89iu2OSbfYvLOhHLWmONZ/BEMLxf
lNTIDS28F7gYUj5Oz6zcR6is+d7hJs1DR9eVajtEk+KNRxykxIYB+6vYT88evT7L
+F4O/YzgOT5MADIBxtEpqOV7+tDfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQdbL
5c1PFdEyrS4u1/WTZ22JliYwHwYDVR0jBBgwFoAUvp5qsmiH4E1VboUMVKXn8TJN
vZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2RTgyLzFGMjkxMDY0ODM2RDExRUM4QzBENURENTVBNDBENTc3L3ZwNXFz
bWlINEUxVmJvVU1WS1huOFRKTnZaNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZwNXFzbWlINEUxVmJvVU1WS1huOFRKTnZaNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZFODIvMUYyOTEwNjQ4MzZEMTFFQzhDMEQ1REQ1NUE0
MEQ1NzcvdnA1cXNtaUg0RTFWYm9VTVZLWG44VEpOdlo0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCD4iIj6pXbpjj+ZrgTiTnxeeMV1aNO
hHNWqkVTofILnWK41n0+dD9R2S/LxDOZiJogkBZb8bfhFZVAsK5cRjFtGc8/AbyU
1gQ1OXnuvAJp5SY/R/62LvuPP+SNY/VB915k9KPrJc6XbibHgkDzVP3YEatZyvTb
s4m0Sdo2wI1L3pbwoG3qzW5z2SNwMuYfeTPcJNssR+7AJztJtgvPUxE3qR8JOttw
8yb394EAvjuSLdGI4kEukJxgTr7VMom8HYIIy7KqohFCD1Q8tDhvqkehPgy6pmsA
DKgL9+AaiHiEO5k0PHcmOY/tEP1NBe/fuEjbzyN19+nUQpLEm6H4URvf
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:37 2025 by rpki-client