Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
File:                     -RyaVXksG3JGcT_syDoE0La_EpE.mft (raw, json)
Hash identifier:          8PTnI82sYc44mem7Vr2sYDB7XJjqSYdEHOsX9ORIrNU=
Subject key identifier:   E0:7B:15:FF:23:E8:58:6D:3B:A5:43:1D:BE:75:4E:73:0E:8A:B3:D1
Authority key identifier: F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
Certificate issuer:       /CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Certificate serial:       02DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
Manifest number:          02D7
Signing time:             Wed 05 Nov 2025 04:13:37 +0000
Manifest this update:     Wed 05 Nov 2025 04:13:36 +0000
Manifest next update:     Fri 07 Nov 2025 04:13:36 +0000
Files and hashes:         1: -RyaVXksG3JGcT_syDoE0La_EpE.crl (hash: 7KyVKi3006USp+MM5hxvTnPuATbTnhYfQNhXv+VpmVk=)
                          2: F85FFC4692E611EEB2D6445FD25BE465.roa (hash: muWneFlHYojsneBSKzrZDz/udMZ/g3nNGVbhuecawWo=)
                          3: 68052C5292E611EEB89A3D5ED25BE465.roa (hash: tfitjgyPV0bS1mdpb1R7yScmPtiSMrRxv3bQMLGjivw=)
                          4: 76838CE4E21211EEBB0FD29E775412E6.roa (hash: 83ixyn1DFACr3ZBupHAVOvYjpWf5hCNkOy2h0/nKuTw=)
                          5: 60DEE4F2E21111EEA9BF3698775412E6.roa (hash: kpV5c+Nm73LzjUsY4W/31mKZBHaBOvnt5Onm6QECScM=)
                          6: FFF44596E21111EE97790E9B775412E6.roa (hash: 3jeCnY7r5+OaUOOC086aUVH8hGb0UpeugYE741gqr+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9765AF, serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
        Validity
            Not Before: Nov  5 04:13:36 2025 GMT
            Not After : Nov  7 04:13:36 2025 GMT
        Subject: CN=690acef1-6303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:e8:5e:fe:81:7a:94:34:20:ab:16:af:d2:
                    27:75:56:6c:a9:a6:3e:da:1e:53:8c:fd:67:8c:ba:
                    39:68:73:e8:8c:c0:f7:9a:4c:d5:49:6e:81:6e:99:
                    11:94:b3:7e:ea:5c:bf:27:aa:7f:1e:9f:74:51:0b:
                    10:b1:52:9f:50:2a:60:bf:1b:d0:24:37:5f:83:2b:
                    e3:4d:83:d3:15:49:19:9c:39:e3:f4:01:87:ba:0b:
                    16:f6:4b:b8:e5:b5:dd:8d:23:11:6b:4c:bd:1f:5a:
                    9a:8e:e6:3a:ab:f0:eb:4c:8a:87:69:94:86:0d:00:
                    87:c2:d6:44:8b:1d:df:f5:a5:ca:5d:56:53:cc:cb:
                    06:d9:42:ae:4a:60:b4:0c:67:b9:d1:97:6a:31:65:
                    15:0d:1f:3f:01:4d:78:8f:ac:97:c1:e3:d1:7f:17:
                    ca:1b:dd:49:7f:e4:50:3b:f6:ad:66:6e:1e:67:fb:
                    1d:fd:66:df:40:85:43:76:6f:05:ba:52:f3:1f:cd:
                    f6:95:ca:00:2b:bf:4d:7d:ee:35:8a:97:3e:9a:08:
                    89:e3:a3:94:30:76:01:81:59:fb:d5:59:3d:0c:c0:
                    ca:2a:f6:ac:69:e2:39:4f:ad:24:85:f8:0f:e6:da:
                    33:a5:b0:a1:1a:31:45:02:aa:df:02:50:75:22:0a:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:15:FF:23:E8:58:6D:3B:A5:43:1D:BE:75:4E:73:0E:8A:B3:D1
            X509v3 Authority Key Identifier:
                keyid:F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:7f:e1:ce:7a:66:27:16:26:37:09:4d:89:de:21:4d:e6:
         66:bc:39:de:cc:3a:27:8e:6d:68:08:02:b7:6b:6a:49:a5:bf:
         4f:b3:6c:b0:4f:ad:75:bd:83:c7:e2:cc:c5:6a:4c:11:5c:06:
         73:65:e9:fb:3a:7a:b2:ea:bb:68:88:05:21:22:63:71:3d:15:
         e9:e4:8b:82:a0:37:c4:37:3e:dd:e1:d1:bd:34:c6:11:f1:98:
         97:95:a9:7c:b2:42:d6:5f:1c:14:b4:b2:22:42:c3:07:32:02:
         81:a4:dc:1c:68:20:f7:63:06:51:5e:81:1c:54:6c:0d:48:24:
         0a:9e:63:71:63:a7:01:c8:4f:6a:af:c1:05:db:8f:90:03:b5:
         0d:de:cb:50:64:2c:61:d0:66:05:77:a3:1f:80:5e:29:af:f7:
         fb:53:c7:73:65:cd:5f:a9:9b:d3:8e:30:74:63:d0:15:18:37:
         4a:dc:dc:ef:27:88:47:9c:5c:0a:1a:39:7d:ee:3d:31:35:8f:
         c3:6c:e3:a5:0e:2a:05:a4:81:b6:6c:aa:2c:c1:88:4c:2c:79:
         7a:c5:29:b8:08:47:ad:f4:47:f2:a7:8d:a0:3b:dd:ca:b6:ab:
         cb:eb:7e:45:6f:0f:66:1f:7c:83:25:65:ff:56:b0:c7:52:ee:
         ed:a9:2d:98
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDk3NjVBRjExMC8GA1UEBRMoRjkxQzlBNTU3OTJDMUI3MjQ2NzEzRkVDQzgzQTA0
RDBCNkJGMTI5MTAeFw0yNTExMDUwNDEzMzZaFw0yNTExMDcwNDEzMzZaMBgxFjAU
BgNVBAMTDTY5MGFjZWYxLTYzMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFFehe/oF6lDQgqxav0id1Vmyppj7aHlOM/WeMujloc+iMwPeaTNVJboFu
mRGUs37qXL8nqn8en3RRCxCxUp9QKmC/G9AkN1+DK+NNg9MVSRmcOeP0AYe6Cxb2
S7jltd2NIxFrTL0fWpqO5jqr8OtMiodplIYNAIfC1kSLHd/1pcpdVlPMywbZQq5K
YLQMZ7nRl2oxZRUNHz8BTXiPrJfB49F/F8ob3Ul/5FA79q1mbh5n+x39Zt9AhUN2
bwW6UvMfzfaVygArv0197jWKlz6aCInjo5QwdgGBWfvVWT0MwMoq9qxp4jlPrSSF
+A/m2jOlsKEaMUUCqt8CUHUiCt7fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4HsV
/yPoWG07pUMdvnVOcw6Ks9EwHwYDVR0jBBgwFoAU+RyaVXksG3JGcT/syDoE0La/
EpEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ5NzY1LzE3RDkyQjVDOTJEQzExRUVCRkRENTg0REQyNUJFNDY1Ly1SeWFW
WGtzRzNKR2NUX3N5RG9FMExhX0VwRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1SeWFWWGtzRzNKR2NUX3N5RG9FMExhX0VwRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDk3NjUvMTdEOTJCNUM5MkRDMTFFRUJGREQ1ODRERDI1
QkU0NjUvLVJ5YVZYa3NHM0pHY1Rfc3lEb0UwTGFfRXBFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAU8H/hznpmJxYmNwlNid4hTeZmvDne
zDonjm1oCAK3a2pJpb9Ps2ywT611vYPH4szFakwRXAZzZen7Onqy6rtoiAUhImNx
PRXp5IuCoDfENz7d4dG9NMYR8ZiXlal8skLWXxwUtLIiQsMHMgKBpNwcaCD3YwZR
XoEcVGwNSCQKnmNxY6cByE9qr8EF24+QA7UN3stQZCxh0GYFd6MfgF4pr/f7U8dz
Zc1fqZvTjjB0Y9AVGDdK3NzvJ4hHnFwKGjl97j0xNY/DbOOlDioFpIG2bKoswYhM
LHl6xSm4CEet9Efyp42gO93KtqvL635Fbw9mH3yDJWX/VrDHUu7tqS2Y
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:38 2025 by rpki-client