Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File:                     sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier:          UlD47QL7HtWsQtb8LADoRe4F32ZyiyHnjVnuvkUYqE4=
Subject key identifier:   0F:53:05:47:07:2D:30:11:2C:E5:0B:59:2D:D3:8C:F3:C0:03:FA:F3
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer:       /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial:       95
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number:          95
Signing time:             Wed 05 Nov 2025 05:29:28 +0000
Manifest this update:     Wed 05 Nov 2025 05:29:27 +0000
Manifest next update:     Fri 07 Nov 2025 05:29:27 +0000
Files and hashes:         1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: PNiEx60R1rCas8EztLoD38ig15K63SX4na9WdSrIPUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
        Validity
            Not Before: Nov  5 05:29:27 2025 GMT
            Not After : Nov  7 05:29:27 2025 GMT
        Subject: CN=690ae0b7-accb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:cc:cc:3d:10:2e:4c:6d:de:7b:e8:70:8d:
                    a8:a8:f8:91:8d:af:83:4d:cd:3e:6d:06:eb:9e:ab:
                    19:90:94:47:07:80:d3:ca:db:2c:92:f7:57:ed:ef:
                    58:1e:1d:38:c6:a1:e1:50:60:48:70:25:7c:74:0f:
                    ab:10:d0:0d:93:01:fa:7d:cd:56:b8:e9:6e:52:33:
                    c0:2f:6b:be:a7:36:97:88:81:30:23:15:57:58:1f:
                    ad:f2:2c:46:16:63:fb:40:b6:43:84:c7:63:e5:99:
                    da:88:a2:95:1e:61:f0:15:34:5b:a0:6c:f5:32:0d:
                    33:c3:5e:60:07:94:b7:19:d1:3b:c7:e4:a4:18:53:
                    61:cf:40:2c:2c:9c:08:bc:99:92:d0:06:a9:51:44:
                    2d:1e:0c:19:1c:5a:8d:b9:fa:ee:e9:66:fe:4b:4b:
                    36:4a:45:ac:d5:11:2f:9f:00:51:2b:dc:ec:15:ff:
                    fa:34:2c:27:85:53:33:8c:70:87:d3:c9:8e:b1:16:
                    0e:ca:aa:76:a1:e2:b2:b7:7d:32:e5:60:72:65:b5:
                    e3:2c:0f:bf:ac:be:0a:57:95:65:cc:b5:76:ed:16:
                    c1:b1:cc:5f:92:ce:3e:f2:6e:49:76:0b:98:5b:aa:
                    b4:33:99:ce:fb:67:0a:1c:85:a8:2f:15:46:6f:08:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:53:05:47:07:2D:30:11:2C:E5:0B:59:2D:D3:8C:F3:C0:03:FA:F3
            X509v3 Authority Key Identifier:
                keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cc:05:fa:a6:2b:da:61:c0:4f:b6:0e:42:a3:04:f6:27:61:
         40:10:0f:e5:f4:68:f3:ee:72:2d:1d:8c:04:e4:7c:90:cd:d0:
         49:a4:2a:7d:56:ec:c2:25:ee:60:3c:aa:fa:4a:ce:a0:7e:dc:
         57:bd:d0:57:bc:15:96:71:a5:30:8f:d3:62:98:da:1c:c7:d0:
         b6:66:a3:be:55:01:90:08:a8:2e:44:8f:a7:3f:8f:0b:4a:ee:
         da:dc:2c:d1:36:f6:ca:e0:cc:27:85:ff:fc:7f:ec:d5:b6:21:
         d7:6a:22:01:cd:ec:01:3f:ec:82:da:db:f5:8c:01:1b:af:94:
         2c:45:3e:16:d2:52:70:3d:ce:e0:9d:29:af:c1:9a:74:68:28:
         dd:5c:86:71:26:b9:3a:e0:ce:77:6e:ce:2d:de:2b:fa:e9:97:
         72:e7:f1:84:80:de:75:2f:4d:72:e4:af:69:9d:26:0a:c5:d8:
         18:21:3d:0f:6e:df:40:53:11:a5:c7:42:14:f8:4d:76:e6:c6:
         b6:1b:15:78:96:02:8a:3e:c0:0b:3f:9e:77:cd:7c:88:63:97:
         50:b5:df:a0:95:19:cf:74:f0:df:12:13:69:36:ce:2c:6a:44:
         d1:0d:fc:39:54:85:bc:79:4c:c5:23:43:e7:4e:e0:d8:7c:93:
         b1:22:8c:bd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0VBMkFBRjExMC8GA1UEBRMoQjBENzYzNkI0NDA4RjBBQzI4QzU5Q0Y1QjkxNjY0
QkQ4MjMxNDA1MDAeFw0yNTExMDUwNTI5MjdaFw0yNTExMDcwNTI5MjdaMBgxFjAU
BgNVBAMTDTY5MGFlMGI3LWFjY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9GMzMPRAuTG3ee+hwjaio+JGNr4NNzT5tBuueqxmQlEcHgNPK2yyS91ft
71geHTjGoeFQYEhwJXx0D6sQ0A2TAfp9zVa46W5SM8Ava76nNpeIgTAjFVdYH63y
LEYWY/tAtkOEx2PlmdqIopUeYfAVNFugbPUyDTPDXmAHlLcZ0TvH5KQYU2HPQCws
nAi8mZLQBqlRRC0eDBkcWo25+u7pZv5LSzZKRazVES+fAFEr3OwV//o0LCeFUzOM
cIfTyY6xFg7Kqnah4rK3fTLlYHJlteMsD7+svgpXlWXMtXbtFsGxzF+Szj7ybkl2
C5hbqrQzmc77ZwochagvFUZvCL8vAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUD1MF
RwctMBEs5QtZLdOM88AD+vMwHwYDVR0jBBgwFoAUsNdja0QI8KwoxZz1uRZkvYIx
QFAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNFQTJBLzRDNjY5QjJDNDg0NjExRjA5N0Q4NEFEOURBRTRFQzlDL3NOZGph
MFFJOEt3b3haejF1UlprdllJeFFGQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NOZGphMFFJOEt3b3haejF1UlprdllJeFFGQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0VBMkEvNEM2NjlCMkM0ODQ2MTFGMDk3RDg0QUQ5REFF
NEVDOUMvc05kamEwUUk4S3dveFp6MXVSWmt2WUl4UUZBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHzAX6pivaYcBPtg5CowT2J2FAEA/l
9Gjz7nItHYwE5HyQzdBJpCp9VuzCJe5gPKr6Ss6gftxXvdBXvBWWcaUwj9NimNoc
x9C2ZqO+VQGQCKguRI+nP48LSu7a3CzRNvbK4Mwnhf/8f+zVtiHXaiIBzewBP+yC
2tv1jAEbr5QsRT4W0lJwPc7gnSmvwZp0aCjdXIZxJrk64M53bs4t3iv66Zdy5/GE
gN51L01y5K9pnSYKxdgYIT0Pbt9AUxGlx0IU+E125sa2GxV4lgKKPsALP553zXyI
Y5dQtd+glRnPdPDfEhNpNs4sakTRDfw5VIW8eUzFI0PnTuDYfJOxIoy9
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:05 2025 by rpki-client