Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier:          ARSaINN2cH1vHDarAMXRA3IYvT76zyvsVtA/A0vfwXA=
Subject key identifier:   75:EE:7D:A5:2A:60:AA:61:CF:B9:A3:E1:67:21:C3:D3:32:37:27:9B
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer:       /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial:       FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number:          F9
Signing time:             Wed 05 Nov 2025 05:23:03 +0000
Manifest this update:     Wed 05 Nov 2025 05:23:02 +0000
Manifest next update:     Fri 07 Nov 2025 05:23:02 +0000
Files and hashes:         1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: Whr/ikOCCaViufIq3NKWQAeOH/dxnbsSpbHEtmwNkNY=)
                          2: 51D56DFEFE6311EF8981AA93762E951A.roa (hash: v1iecGoXLrBsavXRX1kf0YmMMDAB2gV9RZnpPeiZxzU=)
                          3: 81829ED6FE6411EF86C6749A762E951A.roa (hash: p0zc+GDWSPngPzC4UqPmM1kDzoimJaQE4vWQrsCXryc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
        Validity
            Not Before: Nov  5 05:23:02 2025 GMT
            Not After : Nov  7 05:23:02 2025 GMT
        Subject: CN=690adf37-9406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:60:5a:57:0f:44:14:27:44:ce:99:45:82:
                    17:e4:09:4f:67:1e:9b:7a:b4:8c:14:bc:d8:a6:3c:
                    61:00:3a:f7:03:0a:6f:90:15:79:dc:fa:2f:97:bc:
                    13:a0:cc:9e:04:c5:c1:02:5a:6d:db:5c:f1:0b:b1:
                    dc:03:94:24:86:0f:50:8d:0f:ff:95:93:ad:8e:c2:
                    0a:7f:7b:8e:b4:83:86:bd:e4:c5:d0:81:4d:9c:da:
                    95:c1:d8:a6:1b:d5:e2:b1:0f:bc:bf:6d:33:a7:d8:
                    10:8e:e5:a7:53:c8:cd:6a:a8:84:1c:11:20:fd:23:
                    9a:c7:b8:77:80:ce:cd:40:d7:45:ca:95:dd:f9:4a:
                    21:c6:9b:8f:af:07:49:be:a3:9b:f1:ff:35:8a:09:
                    e2:d0:fa:17:fa:f7:82:78:5b:e7:36:49:22:a0:4a:
                    13:ba:6a:2a:55:9a:29:c0:8c:55:47:e4:09:8f:02:
                    ce:0a:4c:28:68:ab:45:2a:1f:13:1c:b4:0e:5b:2c:
                    68:bb:2a:58:c7:69:c9:c8:7f:9f:9d:e1:12:39:85:
                    b2:79:05:e1:cd:a2:a8:f4:9f:82:63:1e:0e:5f:95:
                    dc:fe:8c:60:c2:90:78:43:54:a8:0a:64:0b:26:9c:
                    d9:46:0c:af:4e:76:1f:5c:66:fe:88:1e:a6:bc:87:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:7D:A5:2A:60:AA:61:CF:B9:A3:E1:67:21:C3:D3:32:37:27:9B
            X509v3 Authority Key Identifier:
                keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fb:a6:6d:a8:60:bb:fc:ff:f0:52:3f:94:ed:c2:b4:d4:2b:
         6b:cc:06:c0:0e:86:fb:94:60:2e:39:ed:5a:a2:85:af:38:75:
         93:dd:4a:62:9e:f5:ae:8f:50:31:3c:25:b1:8d:88:9f:08:30:
         b4:dc:82:90:32:5c:ef:1b:ea:1f:93:b5:87:c7:73:d6:15:b5:
         2a:7d:4b:3b:ae:bd:37:9f:89:59:a8:c9:49:ac:71:b6:24:24:
         0b:8f:ed:d8:02:3a:7a:e7:93:05:f2:45:5a:2f:3d:54:f8:5e:
         cd:26:59:fc:be:9a:27:fe:9a:86:f4:0f:6c:78:44:30:36:89:
         57:ad:38:85:08:5b:04:d6:e0:72:1a:68:f6:b3:95:d8:13:eb:
         b2:dc:94:a1:91:1c:28:22:df:3f:c2:eb:ee:cb:ec:d6:25:56:
         21:fd:34:1d:9b:54:b3:1d:48:21:75:63:f2:45:de:46:b7:a8:
         45:f8:4c:36:cb:3a:2e:2c:2e:5c:72:83:cd:74:ab:b7:1f:ba:
         df:bb:c4:cd:0d:9f:20:34:d8:26:c2:2a:ed:0f:67:35:4c:ef:
         61:95:21:d8:97:62:80:52:b5:9b:8d:bc:21:f8:fa:14:36:1c:
         d1:30:18:3d:71:4d:8a:c4:a4:10:d0:5b:98:f1:86:95:40:4c:
         1a:fb:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:56 2025 by rpki-client