Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          ngcRcNAotjcRWuYfeMf+pGZ05hEjJkrjMcHgxzyUrmE=
Subject key identifier:   4D:50:EE:F8:1F:C2:F8:CA:82:36:90:EC:07:62:D9:89:6E:8E:1F:25
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       0240
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          023F
Signing time:             Wed 05 Nov 2025 04:31:13 +0000
Manifest this update:     Wed 05 Nov 2025 04:31:12 +0000
Manifest next update:     Fri 07 Nov 2025 04:31:12 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: QX0WRUjrYrQsWVyuOb4kRW3MKWTm720f8Haii0hOdWg=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
        Validity
            Not Before: Nov  5 04:31:12 2025 GMT
            Not After : Nov  7 04:31:12 2025 GMT
        Subject: CN=690ad311-5b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:cb:16:74:0a:8e:0d:3d:3a:e2:f2:fe:4c:
                    b0:66:47:f2:65:f4:98:31:15:9a:dd:86:74:2e:61:
                    f9:a4:9e:d0:65:d3:d2:7b:9e:2c:ee:05:33:74:1b:
                    e8:00:ac:d9:08:bf:5e:74:a5:2e:49:1f:73:bf:2e:
                    46:ee:34:5f:15:24:57:f9:06:34:12:53:5d:fd:ba:
                    17:9e:fe:82:f9:c8:16:8d:d0:07:23:c4:1a:3d:d4:
                    5c:7e:e4:a6:5c:e3:60:3d:9c:2d:a5:92:d2:5f:0a:
                    12:6f:08:46:71:8c:91:ec:2a:4b:20:b9:4a:83:23:
                    30:b9:38:ec:0b:ec:e6:ce:34:65:ba:cf:6b:16:09:
                    b3:8e:8b:84:42:d3:85:95:a6:6e:48:4b:e8:f7:5e:
                    09:37:64:86:11:6b:29:1a:17:8c:75:e6:49:56:7b:
                    27:43:8d:11:80:1e:ec:04:7c:87:aa:f1:75:cf:1c:
                    3d:8e:ab:4e:91:66:72:b4:56:95:c6:cc:2e:17:18:
                    31:8a:19:fc:08:86:94:13:f6:18:c9:7a:43:80:31:
                    f4:cf:f8:eb:2d:15:d9:e8:a2:8d:85:48:9f:80:8f:
                    b2:b6:12:f0:9b:b5:11:8d:f9:70:ef:89:71:06:9b:
                    ef:be:77:6c:1b:97:05:f8:65:c9:f6:5e:2f:b2:27:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:EE:F8:1F:C2:F8:CA:82:36:90:EC:07:62:D9:89:6E:8E:1F:25
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:de:72:82:f9:2b:3a:34:0b:1d:3d:f7:2e:48:96:82:db:41:
         9a:a5:3c:ce:7f:93:bd:c6:9a:1b:67:45:7c:ee:87:47:eb:57:
         01:7e:ef:11:72:41:fc:c6:58:ff:f5:ec:78:25:1b:46:3f:92:
         a3:07:b6:59:ce:83:49:59:bb:c2:9a:7a:32:7b:75:a7:dc:e5:
         61:30:c0:cd:e6:c2:21:c4:be:90:85:5f:89:6a:6b:9b:56:df:
         cf:36:d0:43:d1:7d:fc:66:60:a8:b9:d6:65:ea:b3:48:d1:69:
         78:cf:23:77:e5:d7:c9:06:6c:d3:f5:a2:ac:44:33:d8:11:ec:
         86:69:e1:c1:dc:36:f8:ab:a7:f9:48:e5:80:82:ed:e7:24:a4:
         0e:6f:05:dd:44:45:99:91:15:4e:07:6b:41:3f:83:72:98:98:
         49:8f:7f:61:cc:ba:b8:67:74:8c:56:b8:4a:7b:46:3b:5d:c3:
         fa:52:eb:ad:c3:a4:53:e0:89:2b:dc:41:49:91:90:9b:94:79:
         bb:1b:c4:85:46:8a:28:b5:8f:fe:e6:f0:ce:6a:61:ee:ca:2d:
         6d:74:93:38:13:72:93:16:ae:97:04:37:a1:3f:92:39:f2:af:
         6e:4f:1a:42:5e:06:b5:d6:cd:56:05:0b:eb:8c:26:09:0a:6c:
         d6:22:4b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:24 2025 by rpki-client