Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          lvJMAo9K2WQHmH+5PlxReZ5hqUgETcnROIh08DHJ5IU=
Subject key identifier:   EE:60:95:09:91:80:51:46:AA:17:DF:13:C8:DC:D1:D0:5F:77:43:D2
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       0644
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          0642
Signing time:             Wed 05 Nov 2025 02:25:34 +0000
Manifest this update:     Wed 05 Nov 2025 02:25:33 +0000
Manifest next update:     Fri 07 Nov 2025 02:25:33 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: rNFfqeo5NkyF/Z1Ars1wbmI7JPWDTy7yF7dW8s6wVOI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Nov  5 02:25:33 2025 GMT
            Not After : Nov  7 02:25:33 2025 GMT
        Subject: CN=690ab59e-4035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:72:68:af:2d:20:6f:76:2d:4a:92:ed:8c:
                    6a:c1:6d:03:69:b8:71:a5:ba:6b:f1:11:9f:fd:bb:
                    20:9d:cb:3a:93:4d:b9:5b:08:8a:d3:17:79:fa:55:
                    e5:91:b7:c2:68:15:6c:88:56:fe:48:8f:a2:4d:51:
                    77:51:55:0f:36:47:0f:40:a0:eb:58:64:20:60:9e:
                    cc:4d:47:2f:49:f1:a5:c8:c8:29:74:f3:74:f9:38:
                    f9:c5:13:76:77:10:02:cd:40:1b:54:74:ce:ca:a9:
                    cc:69:ea:d7:d8:8e:ae:45:b5:46:18:30:ec:00:42:
                    16:34:55:81:36:2e:15:9b:83:10:4f:ff:8a:19:40:
                    13:41:68:71:01:18:8f:11:09:22:dc:7d:35:35:7e:
                    4a:f3:00:6c:d4:a1:26:da:a7:e0:05:57:6a:52:a4:
                    e6:8f:3d:cd:45:b6:b1:e2:c7:af:70:29:6f:ec:a9:
                    c3:3e:0c:11:81:b1:f2:9b:fd:49:f5:42:40:07:48:
                    61:72:80:e6:98:f3:94:df:32:bf:80:5a:ec:32:5d:
                    3a:42:78:41:ec:b5:4f:53:cb:e3:f0:40:e3:fc:86:
                    cf:0e:87:f0:17:b4:05:26:22:b6:ff:75:91:77:c0:
                    e4:8f:50:64:b9:2b:62:87:99:c8:bd:54:c9:73:e0:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:60:95:09:91:80:51:46:AA:17:DF:13:C8:DC:D1:D0:5F:77:43:D2
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:d4:57:cb:46:66:31:7f:f9:b1:98:45:c2:15:2b:f3:1e:
         93:6a:4c:35:31:c0:ae:98:90:41:61:95:56:b9:65:53:0f:2f:
         f9:17:6c:49:fc:46:42:41:43:23:b3:76:54:c6:2f:2b:23:18:
         51:71:8d:22:2f:5f:ef:df:8d:6d:b1:c8:8b:b8:8f:83:32:34:
         81:a7:51:d9:00:eb:bd:25:08:d8:59:19:44:09:4b:31:ef:46:
         40:08:b3:02:b1:12:aa:74:3c:31:bc:63:47:51:e3:86:43:b7:
         0c:c3:a5:57:0f:65:d5:ad:95:79:8c:31:47:3f:67:08:e0:45:
         fa:9e:6d:ae:ad:1f:d6:ba:4e:ec:45:0d:08:77:fc:b6:04:32:
         21:32:b7:88:5d:70:b0:a9:54:0f:c7:cb:ac:79:27:9c:d5:b0:
         a0:68:81:f1:22:e8:47:c2:46:7e:fa:19:ec:82:99:1a:66:9a:
         01:6c:9b:f5:8a:d1:df:17:87:54:79:74:ae:77:63:2e:f1:24:
         8c:62:c2:f8:c1:cd:3f:d2:8d:bb:68:c8:52:a8:67:c8:40:10:
         2f:34:6c:35:3a:3d:98:6c:8b:56:cb:fc:ea:1a:ef:b4:d0:32:
         8f:39:ea:f1:a5:b3:92:07:5b:b9:a8:66:2a:c4:51:81:1f:8e:
         4d:54:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:21:06 2025 by rpki-client