Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          W2H8XXIE1Ej6BYUy4/TnIi0wysF0Pa6V3QDZMxkrjxQ=
Subject key identifier:   9B:55:6E:DF:DD:B4:90:76:A7:58:72:DA:E4:A8:1D:59:EF:CA:C2:42
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       01F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          01F4
Signing time:             Tue 04 Nov 2025 05:39:08 +0000
Manifest this update:     Tue 04 Nov 2025 05:39:07 +0000
Manifest next update:     Thu 06 Nov 2025 05:39:07 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: kv3Jx0yxfMWj2klRo4vSLZylbXHMsa4eIgdC+Rnxws8=)
                          2: C398885E3AC311EF90F6DF67762E951A.roa (hash: ul3nn21hDO7UgXCYkLGPryVSInddXUiuHuE7QBhZSgU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Nov  4 05:39:07 2025 GMT
            Not After : Nov  6 05:39:07 2025 GMT
        Subject: CN=6909917c-73fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:b1:df:56:0e:45:32:67:93:dd:5e:ef:47:
                    40:2b:3f:de:e2:b4:1a:2e:81:c7:91:9f:a8:f6:ae:
                    5c:36:39:89:79:ed:1f:d8:76:9b:3e:56:3a:04:13:
                    cd:6f:6a:53:0b:c5:cc:36:58:86:4c:52:81:02:ec:
                    47:68:89:0d:f8:b6:74:46:23:00:63:f5:2f:6a:bf:
                    95:bb:f5:71:c0:0b:c6:8d:2e:ad:17:d6:52:63:61:
                    64:62:71:8d:4c:e9:b9:d8:46:73:4b:fa:58:9a:d0:
                    c1:f7:5f:73:43:67:d0:9f:4d:b0:12:d5:69:a5:c6:
                    e1:c6:9a:c3:0b:39:f1:62:4a:a3:7a:af:c1:a6:b6:
                    28:aa:37:00:5c:c0:a8:62:70:fa:4e:8d:c6:2a:88:
                    f1:d9:11:33:db:e4:b0:a3:61:6e:6c:13:98:7b:89:
                    8c:f7:b7:95:c0:ac:48:af:a2:f5:4c:17:81:2b:cc:
                    ad:e4:25:a3:a0:27:0a:df:d6:e5:80:28:bf:1b:0a:
                    5b:5f:82:ea:00:15:ab:d2:e3:36:1e:72:91:51:57:
                    fe:60:45:7c:fd:59:de:ed:f9:75:da:fa:84:51:ae:
                    57:e0:fa:a0:eb:79:5e:57:80:78:5a:28:8e:92:bd:
                    26:76:61:e2:ab:f5:f1:ad:59:6c:d7:ac:43:b0:c7:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:55:6E:DF:DD:B4:90:76:A7:58:72:DA:E4:A8:1D:59:EF:CA:C2:42
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:60:31:39:2c:37:a0:a4:08:64:6c:a6:08:cc:da:b5:79:6c:
         a4:cd:d9:8b:04:7e:77:9d:b7:ca:8a:64:46:34:2f:5f:54:33:
         c8:73:91:e1:d8:72:d8:a9:e2:78:5f:0b:3b:ac:15:a7:5d:b3:
         86:e6:37:1b:6f:b1:ef:0d:42:8a:a1:2e:37:c1:81:ce:68:67:
         a8:87:ba:3b:da:1d:d1:a2:3f:78:70:4f:c3:05:20:e0:78:60:
         7a:f9:ff:f7:f7:10:ae:53:dd:f8:58:02:f2:f0:9b:f4:6d:2e:
         c9:60:9c:a8:de:ee:07:83:27:80:37:43:ff:61:9d:f6:67:51:
         76:06:51:ce:54:a0:eb:e0:bd:e1:56:b2:24:15:20:fc:8a:21:
         86:15:1b:9d:52:4b:23:60:75:c4:19:23:ec:3c:ef:01:d5:99:
         45:89:65:a2:f7:c7:96:71:ec:b7:33:0b:ab:d4:87:9d:2f:87:
         2d:66:ea:7e:51:02:13:d2:96:76:29:67:e9:96:05:14:6a:55:
         a6:99:a7:62:2e:91:ef:6a:97:26:40:2e:3d:ee:ac:24:2d:ed:
         37:9e:3a:cf:31:d2:8f:da:3a:ea:e9:54:36:43:1e:8e:6a:18:
         48:da:49:75:ca:af:4d:05:29:b5:95:c0:65:37:00:90:42:5c:
         b7:97:46:83
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTBDNTdBRjExMC8GA1UEBRMoNDYxREU2NUU1QTJDOUY0NkNEQjE1NDQ3MEExNDJD
RUFCMDAyQTNFODAeFw0yNTExMDQwNTM5MDdaFw0yNTExMDYwNTM5MDdaMBgxFjAU
BgNVBAMTDTY5MDk5MTdjLTczZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDO/rHfVg5FMmeT3V7vR0ArP97itBougceRn6j2rlw2OYl57R/Ydps+VjoE
E81valMLxcw2WIZMUoEC7EdoiQ34tnRGIwBj9S9qv5W79XHAC8aNLq0X1lJjYWRi
cY1M6bnYRnNL+lia0MH3X3NDZ9CfTbAS1WmlxuHGmsMLOfFiSqN6r8GmtiiqNwBc
wKhicPpOjcYqiPHZETPb5LCjYW5sE5h7iYz3t5XArEivovVMF4ErzK3kJaOgJwrf
1uWAKL8bCltfguoAFavS4zYecpFRV/5gRXz9Wd7t+XXa+oRRrlfg+qDreV5XgHha
KI6SvSZ2YeKr9fGtWWzXrEOwx5VxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUm1Vu
3920kHanWHLa5KgdWe/KwkIwHwYDVR0jBBgwFoAURh3mXlosn0bNsVRHChQs6rAC
o+gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUwQzU3L0E0QUU4RDg2M0FDMjExRUZBMTg5RDM2Mjc2MkU5NTFBL1JoM21Y
bG9zbjBiTnNWUkhDaFFzNnJBQ28tZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JoM21YbG9zbjBiTnNWUkhDaFFzNnJBQ28tZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTBDNTcvQTRBRThEODYzQUMyMTFFRkExODlEMzYyNzYy
RTk1MUEvUmgzbVhsb3NuMGJOc1ZSSENoUXM2ckFDby1nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOYDE5LDegpAhkbKYIzNq1eWykzdmL
BH53nbfKimRGNC9fVDPIc5Hh2HLYqeJ4Xws7rBWnXbOG5jcbb7HvDUKKoS43wYHO
aGeoh7o72h3Roj94cE/DBSDgeGB6+f/39xCuU934WALy8Jv0bS7JYJyo3u4HgyeA
N0P/YZ32Z1F2BlHOVKDr4L3hVrIkFSD8iiGGFRudUksjYHXEGSPsPO8B1ZlFiWWi
98eWcey3Mwur1IedL4ctZup+UQIT0pZ2KWfplgUUalWmmadiLpHvapcmQC497qwk
Le03njrPMdKP2jrq6VQ2Qx6OahhI2kl1yq9NBSm1lcBlNwCQQly3l0aD
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:34 2025 by rpki-client