Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
File:                     37GYokEhr76oC-bCVT7Qn4UiUDI.mft (raw, json)
Hash identifier:          foGB81zPIoyTrS7jFO3L9KnCl1SQP7OsQaY5Lxmj6mc=
Subject key identifier:   82:E1:B1:1A:C8:CA:4D:5E:6C:5C:1B:7B:3D:45:DA:9C:22:0A:F9:2C
Authority key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Certificate issuer:       /CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Certificate serial:       0B9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
Manifest number:          0B99
Signing time:             Wed 05 Nov 2025 01:10:27 +0000
Manifest this update:     Wed 05 Nov 2025 01:10:26 +0000
Manifest next update:     Fri 07 Nov 2025 01:10:26 +0000
Files and hashes:         1: 37GYokEhr76oC-bCVT7Qn4UiUDI.crl (hash: UAxFsLN/uEJ/tI63UwXb63KyMpTmS+fX/jDLgbdkJ1k=)
                          2: FA78454ADDC111E8B15C694DF8AEA228.roa (hash: uu495Ulte7M9lqyB0F6mlOadgmAPbSCrWmqWcuFpoQU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2970 (0xb9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1839AF, serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
        Validity
            Not Before: Nov  5 01:10:26 2025 GMT
            Not After : Nov  7 01:10:26 2025 GMT
        Subject: CN=690aa403-3902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:90:e2:f3:1f:c8:e7:73:e0:d2:81:e8:37:
                    9a:9e:de:1e:a1:5f:73:37:18:ca:b8:8a:c1:40:45:
                    55:97:84:da:7b:e3:85:24:ff:70:df:b3:a0:7b:5d:
                    9d:d3:dd:9d:ca:00:1e:d5:98:7f:ff:d6:13:85:1c:
                    a0:1e:72:77:2e:01:74:7b:81:06:41:7a:ef:86:83:
                    d4:5d:d1:d8:d5:e4:eb:50:cf:3b:2b:e8:a7:16:aa:
                    bf:68:62:49:9d:f0:02:8c:b8:3a:7a:63:95:33:ff:
                    8d:0a:7d:a7:2b:11:e7:88:d0:d2:0c:2d:7d:af:68:
                    57:d4:03:a5:75:18:b6:cb:13:1f:18:b4:c9:f0:cf:
                    b6:e4:95:01:61:9d:36:04:cb:18:ef:99:c1:af:22:
                    aa:e9:25:6f:11:2c:41:1d:3d:7d:a9:25:16:02:c6:
                    e1:03:d2:80:49:9c:2c:a3:fd:c9:bb:cb:76:07:8f:
                    c6:06:7a:8b:62:c6:51:6b:b9:a4:45:2a:c8:5d:e7:
                    f7:5a:a1:fa:6d:33:45:c5:bd:19:45:b8:ab:87:76:
                    b4:d6:d3:a7:1e:49:10:b6:26:31:b5:d4:1d:85:ce:
                    63:3e:1c:7a:40:81:3f:74:6d:81:1b:1e:31:a3:85:
                    81:db:fb:a1:71:6e:04:75:f1:6e:33:41:9c:6c:5b:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E1:B1:1A:C8:CA:4D:5E:6C:5C:1B:7B:3D:45:DA:9C:22:0A:F9:2C
            X509v3 Authority Key Identifier:
                keyid:DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:04:ac:07:d3:77:7a:62:4b:7c:4c:50:54:0f:02:81:be:
         a7:f7:51:27:d0:dd:72:46:f6:0b:8f:3a:86:f1:3b:e9:46:fb:
         da:4d:4b:3a:c0:89:53:25:a2:d9:11:10:2f:46:41:20:ff:70:
         9f:72:7f:de:65:2e:fa:c0:16:56:f3:15:7e:05:df:91:80:d7:
         e0:f7:13:9e:ff:0a:04:39:dd:c7:e5:ab:3d:0c:18:e9:39:7d:
         1a:dd:37:dd:65:e3:0a:1c:39:95:0c:50:ae:bd:b6:d8:a0:05:
         63:26:02:f4:3c:51:80:7e:ae:c3:72:59:7d:b5:df:2f:c9:76:
         80:01:d2:1e:b2:8b:c3:57:6d:7d:17:cf:89:a9:c6:31:37:59:
         24:5f:ee:e8:be:15:3e:28:b6:76:16:f9:84:c3:5c:7a:d4:94:
         33:74:ee:8b:e8:dc:c6:e3:fc:f2:07:c0:b9:4d:64:cc:fd:af:
         06:8d:1f:af:67:5b:2d:42:98:fc:46:f8:9d:a9:2e:4c:77:91:
         10:06:8c:fc:61:ec:2c:24:25:55:b6:c4:27:ae:be:e9:ca:b9:
         15:fd:00:ad:82:95:49:cd:6c:ed:4a:7c:2c:09:e0:3d:1b:20:
         b9:91:42:d9:eb:48:3b:01:aa:04:bb:3e:d2:92:79:ec:df:1d:
         e9:bc:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:32 2025 by rpki-client