Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
File:                     uHhAHkl1TlCh8pefEijlQVr3hcs.mft (raw, json)
Hash identifier:          ft3zrkdgIZhddxGuo8TXBAUN7K2xQZKEPLk7yMlUYhg=
Subject key identifier:   9C:27:C0:B8:1B:84:37:BC:3D:76:28:27:B4:79:12:13:DD:1D:25:90
Authority key identifier: B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Certificate issuer:       /CN=F36D06FDAF/serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
Certificate serial:       0127
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
Manifest number:          0125
Signing time:             Wed 05 Nov 2025 05:18:19 +0000
Manifest this update:     Wed 05 Nov 2025 05:18:18 +0000
Manifest next update:     Fri 07 Nov 2025 05:18:18 +0000
Files and hashes:         1: uHhAHkl1TlCh8pefEijlQVr3hcs.crl (hash: xDbGIaZRg0kjhGRh4TqNOCCeUB8meYLayhvCR3LJ2RQ=)
                          2: D378C19EDB2C11EF97120DAA762E951A.roa (hash: XvBxie++FSr21ud0Lfttnl+zogzSereMyWWkFD2zdWI=)
                          3: 7E8F4432DB2C11EFB85EEEA5762E951A.roa (hash: 0iUpszT2w0fm3mXYVrua9cWk6MIv4HV5O6NkTkk5EUY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D06FDAF, serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
        Validity
            Not Before: Nov  5 05:18:18 2025 GMT
            Not After : Nov  7 05:18:18 2025 GMT
        Subject: CN=690ade1b-116b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:a8:94:98:2f:c4:29:85:82:02:d8:96:5c:
                    04:b4:67:84:5e:e0:1d:5d:9f:ba:81:11:cf:33:ad:
                    48:46:50:5f:08:d8:63:f4:06:35:07:8b:35:fe:3b:
                    1a:d2:ee:3f:a0:58:72:a8:46:4a:44:fc:4a:10:3a:
                    e0:eb:5e:fc:a2:40:0e:6c:2d:9e:0c:bd:f6:45:56:
                    1f:4d:3a:bd:cf:1e:0b:25:f4:c8:04:23:88:06:e9:
                    f3:de:15:93:45:03:6e:00:c8:7c:be:e9:94:9c:36:
                    17:9f:1b:3b:62:d0:19:56:4d:9f:86:ba:44:ad:9d:
                    6c:be:0f:12:3f:a3:d6:39:ee:ce:96:08:b7:3c:84:
                    2f:ec:4c:af:74:b2:31:14:95:31:91:60:ff:83:a3:
                    cb:78:0c:78:6e:f4:95:01:f1:d7:34:45:4f:aa:3a:
                    52:fa:57:ad:2f:66:6d:95:de:55:b9:af:bd:50:71:
                    b2:f7:f2:82:c9:c5:44:cb:a4:b8:51:40:2d:0b:75:
                    45:b5:ea:3c:cc:a1:79:ae:db:d8:35:b1:57:17:c9:
                    58:19:75:0b:0b:b7:2d:6b:9f:7b:65:4c:c7:d7:2b:
                    be:50:08:c7:54:e8:02:f5:17:62:55:81:a4:fd:80:
                    34:84:d4:28:73:62:58:52:d6:9e:a3:66:7d:0b:83:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:27:C0:B8:1B:84:37:BC:3D:76:28:27:B4:79:12:13:DD:1D:25:90
            X509v3 Authority Key Identifier:
                keyid:B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9b:4e:76:51:b0:a3:08:7b:84:42:e9:b8:e5:8e:17:52:77:
         f6:31:92:6c:8d:f1:79:3d:a6:99:8c:8e:8e:50:38:50:17:7b:
         6f:8b:06:4a:25:0f:25:d8:0c:f2:be:c1:c1:b6:95:d5:2d:e8:
         9c:a2:52:cc:36:f3:24:92:30:04:84:db:11:6a:e7:13:27:f6:
         8d:a5:f1:ec:ad:be:5b:5a:6c:b8:f2:19:57:4c:61:8b:e3:94:
         92:fd:bb:14:47:2f:2b:e8:94:24:1a:a8:8a:2a:b8:c4:ef:b6:
         27:b4:d2:2f:e7:fd:0b:60:75:60:e9:1c:78:63:14:65:08:19:
         99:61:3a:2d:e3:0e:11:a8:a4:f1:d8:1a:61:3b:b2:3a:0a:5c:
         9e:0c:3b:d3:e6:01:3b:5f:0c:00:1b:ac:55:9c:32:14:5c:9c:
         ba:bb:31:e1:2b:2e:04:2f:59:c8:ee:2e:92:a8:05:43:21:da:
         4f:d3:67:7c:f4:45:e5:65:c0:55:dd:ce:4b:7b:27:a1:36:c0:
         06:4a:c7:06:ae:1e:5d:46:15:96:2e:fc:02:96:79:62:51:e0:
         74:f7:33:f3:d4:6b:33:e2:46:f5:e4:06:e2:8e:90:ce:04:99:
         95:74:2b:02:a7:73:ea:09:67:cd:10:37:58:76:c9:58:93:cb:
         64:17:2d:74
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAScwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDA2RkRBRjExMC8GA1UEBRMoQjg3ODQwMUU0OTc1NEU1MEExRjI5NzlGMTIyOEU1
NDE1QUY3ODVDQjAeFw0yNTExMDUwNTE4MThaFw0yNTExMDcwNTE4MThaMBgxFjAU
BgNVBAMTDTY5MGFkZTFiLTExNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvA6iUmC/EKYWCAtiWXAS0Z4Re4B1dn7qBEc8zrUhGUF8I2GP0BjUHizX+
OxrS7j+gWHKoRkpE/EoQOuDrXvyiQA5sLZ4MvfZFVh9NOr3PHgsl9MgEI4gG6fPe
FZNFA24AyHy+6ZScNhefGzti0BlWTZ+GukStnWy+DxI/o9Y57s6WCLc8hC/sTK90
sjEUlTGRYP+Do8t4DHhu9JUB8dc0RU+qOlL6V60vZm2V3lW5r71QcbL38oLJxUTL
pLhRQC0LdUW16jzMoXmu29g1sVcXyVgZdQsLty1rn3tlTMfXK75QCMdU6AL1F2JV
gaT9gDSE1ChzYlhS1p6jZn0Lg9mJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnCfA
uBuEN7w9digntHkSE90dJZAwHwYDVR0jBBgwFoAUuHhAHkl1TlCh8pefEijlQVr3
hcswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwNkZELzA1Q0M3QUM0REIyQzExRUZBMkQzMTlBNTc2MkU5NTFBL3VIaEFI
a2wxVGxDaDhwZWZFaWpsUVZyM2hjcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VIaEFIa2wxVGxDaDhwZWZFaWpsUVZyM2hjcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDA2RkQvMDVDQzdBQzREQjJDMTFFRkEyRDMxOUE1NzYy
RTk1MUEvdUhoQUhrbDFUbENoOHBlZkVpamxRVnIzaGNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7m052UbCjCHuEQum45Y4XUnf2MZJs
jfF5PaaZjI6OUDhQF3tviwZKJQ8l2AzyvsHBtpXVLeicolLMNvMkkjAEhNsRaucT
J/aNpfHsrb5bWmy48hlXTGGL45SS/bsURy8r6JQkGqiKKrjE77YntNIv5/0LYHVg
6Rx4YxRlCBmZYTot4w4RqKTx2BphO7I6ClyeDDvT5gE7XwwAG6xVnDIUXJy6uzHh
Ky4EL1nI7i6SqAVDIdpP02d89EXlZcBV3c5LeyehNsAGSscGrh5dRhWWLvwClnli
UeB09zPz1Gsz4kb15AbijpDOBJmVdCsCp3PqCWfNEDdYdslYk8tkFy10
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:22 2025 by rpki-client