Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.mft (raw, json)
Hash identifier:          trvY5L+zCTYILlnxbZXuKhnTwGGpvFo8h5IoQuBNpEc=
Subject key identifier:   92:5C:CD:BF:C5:C0:7C:3E:45:D2:3A:DC:DA:A4:AD:CC:67:C3:EB:17
Authority key identifier: C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Certificate issuer:       /CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
Certificate serial:       0276
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
Manifest number:          0275
Signing time:             Wed 05 Nov 2025 04:24:51 +0000
Manifest this update:     Wed 05 Nov 2025 04:24:50 +0000
Manifest next update:     Fri 07 Nov 2025 04:24:50 +0000
Files and hashes:         1: wzA4fNIYxMz6UivFNddwdVvPe28.crl (hash: WUC/W/Okn0mtHPuK5XVYL9p+c0kcDI1x9AjJxiydep0=)
                          2: D27A6A28D7C111EE8A342CA3775412E6.roa (hash: peA4+LIUnTnNHVNJXvAgPW0H2f9Uqrwu8nzHISX24Zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D591BAF, serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Validity
            Not Before: Nov  5 04:24:50 2025 GMT
            Not After : Nov  7 04:24:50 2025 GMT
        Subject: CN=690ad193-5a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6f:83:d3:7d:94:00:ef:1b:75:03:4c:8c:97:
                    2f:fb:1b:6c:7d:0d:b2:ce:dc:0a:93:b2:9d:1c:33:
                    a0:57:c7:bc:42:18:72:48:c7:ba:9b:e4:72:18:d3:
                    8b:2d:85:19:17:02:4f:96:e4:1c:0d:19:e0:c5:6c:
                    e1:60:92:59:73:93:fc:4b:74:e7:c7:71:62:6d:82:
                    1a:08:7d:60:1d:b1:7b:78:13:c0:d7:c5:24:38:61:
                    5f:d6:dc:38:b8:3d:d5:38:e9:7a:fa:75:5d:95:08:
                    d5:c8:7c:52:66:9e:5b:c0:06:ab:f8:36:2d:01:69:
                    7f:08:1c:68:99:42:33:82:29:14:98:60:f2:3a:ec:
                    37:c3:7e:68:ea:43:f3:cd:4a:9a:f9:6f:30:11:bc:
                    4f:5c:4f:1a:3f:09:ea:50:f9:4d:77:03:23:05:f6:
                    a1:b0:e9:6a:76:aa:02:77:8f:1b:eb:4f:71:4a:20:
                    a8:4f:03:e3:e9:31:f6:0f:5f:9a:a8:9f:62:d0:1d:
                    6f:35:52:53:c7:df:71:d2:6d:97:83:44:7e:e2:f4:
                    5d:08:17:c6:b3:df:dc:55:97:38:f9:83:33:76:3b:
                    6c:33:f0:8c:96:f3:dc:e8:76:b3:66:09:a6:e0:bd:
                    d8:2d:8c:79:b9:e1:c1:41:25:8f:33:70:ae:d0:6d:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:CD:BF:C5:C0:7C:3E:45:D2:3A:DC:DA:A4:AD:CC:67:C3:EB:17
            X509v3 Authority Key Identifier:
                keyid:C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:82:a8:a2:29:7b:b9:60:bd:b8:29:9d:95:ae:75:14:c8:49:
         b7:2a:80:c2:cd:f7:c9:98:20:34:3a:e3:01:a4:62:49:58:db:
         84:a6:1b:65:b8:fd:1d:b1:db:26:c9:cc:ab:e2:05:c7:4f:94:
         cc:ec:18:5f:ab:0b:74:29:af:6c:02:97:1e:44:f9:57:d6:6c:
         cd:42:f4:be:68:10:0d:4d:ac:3f:d5:33:47:81:f4:09:72:2b:
         54:b2:fd:23:bc:4f:9c:36:1a:c2:75:79:9e:11:6f:8d:ca:7e:
         ca:51:9d:76:96:4d:b0:5e:ef:de:7f:92:d4:72:66:c0:63:63:
         32:0d:07:8c:fe:20:71:f4:db:d9:28:73:96:f3:a3:9d:c3:a8:
         46:80:9e:6b:36:ad:fe:81:5f:84:9b:11:cf:e2:78:32:7a:8a:
         e8:a0:2e:16:3f:0a:33:3d:3d:15:16:89:d8:9a:a4:24:68:d8:
         b2:9c:31:c6:91:fb:50:1f:96:bb:2a:72:9e:09:38:05:a9:51:
         2f:81:2b:63:9a:98:db:78:dd:c2:63:04:77:45:89:fd:c8:39:
         cf:7d:12:80:e3:e9:ae:76:6c:19:06:c2:43:12:1e:f0:ee:dd:
         14:6a:a4:94:b9:a4:0d:9e:b2:f8:11:1e:23:33:57:6b:b8:26:
         80:15:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:35:26 2025 by rpki-client