Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File:                     iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier:          oiPyROAA5GC/T3998e3kqTaTwIuPcjGZOSWhi3XhKIg=
Subject key identifier:   E5:5D:2D:3C:59:79:78:E5:D2:98:F3:D9:18:42:3D:DE:EE:6A:AD:2B
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer:       /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial:       42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number:          42
Signing time:             Tue 04 Nov 2025 06:45:34 +0000
Manifest this update:     Tue 04 Nov 2025 06:45:34 +0000
Manifest next update:     Thu 06 Nov 2025 06:45:34 +0000
Files and hashes:         1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: YdHPCpoJiH0KEMSf+xKzhE3jNmCb+ggpGoFAZwG/RXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
        Validity
            Not Before: Nov  4 06:45:34 2025 GMT
            Not After : Nov  6 06:45:34 2025 GMT
        Subject: CN=6909a10e-7d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:94:10:d0:39:c3:2c:4b:a3:c3:7c:9f:94:
                    a3:6e:90:0d:3c:23:42:2a:38:79:a5:a5:7c:63:1d:
                    46:6b:93:5b:34:d1:12:75:fb:93:28:cd:67:bd:1a:
                    24:6e:6e:08:db:cd:de:ab:88:19:5f:3b:21:e3:0b:
                    ac:5f:b8:6d:38:af:91:91:df:1a:07:de:8f:4e:17:
                    fa:3e:c1:93:fa:1e:c7:53:e5:ad:ec:e5:32:42:4b:
                    70:f2:3f:c7:df:81:49:5b:4c:05:b6:f3:de:fc:f9:
                    45:52:a4:1e:19:f0:67:de:e7:a4:96:f9:42:1b:82:
                    57:16:bb:46:9b:17:b9:e5:81:00:f0:bc:59:98:a5:
                    64:c9:bf:bb:62:7a:fc:c7:cd:32:e6:41:00:36:83:
                    fd:18:39:d0:7b:2c:85:e2:88:4f:c5:87:d4:53:79:
                    63:11:fe:9c:3d:45:7f:a5:99:5c:56:a5:53:d6:fc:
                    7b:63:db:c4:8f:b1:03:1b:85:b7:35:ca:63:c0:2f:
                    05:f5:d3:2f:05:b6:17:12:17:d2:6c:db:5a:dc:47:
                    9f:f8:1c:17:f7:19:c0:3a:0d:7b:39:2c:3b:35:d5:
                    a7:0b:06:f8:0b:2e:af:fd:5b:90:5a:0d:38:fb:69:
                    24:97:8f:b5:48:92:10:97:a0:53:d6:f2:1b:75:4b:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5D:2D:3C:59:79:78:E5:D2:98:F3:D9:18:42:3D:DE:EE:6A:AD:2B
            X509v3 Authority Key Identifier:
                keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ad:b0:08:a5:bd:90:dd:b4:e2:01:22:c3:63:b9:2d:a1:d2:
         6c:b0:74:2d:22:0b:79:62:89:8f:04:76:73:57:0d:b0:e2:a9:
         7e:78:2f:6f:9b:a4:e1:7e:4e:f6:4a:06:1c:2d:e4:54:f4:08:
         e6:89:ef:d2:e3:f3:7d:bf:81:72:75:bd:e9:bd:6f:f6:c1:de:
         4a:e7:be:03:10:d9:03:43:1a:0f:0f:ed:d1:6b:fb:55:8e:9e:
         25:e3:8b:bd:2e:c6:76:3f:7e:33:89:b5:5c:6b:96:ec:62:be:
         44:42:00:4f:fb:58:89:f9:9d:06:83:39:8e:cb:af:aa:db:79:
         2a:4d:14:99:b5:2c:63:ff:9e:df:a2:b6:2b:70:53:da:f3:7c:
         13:e1:b9:c9:e0:c6:5c:8f:54:d8:52:b6:03:f2:0f:94:78:b3:
         f5:ea:9b:40:15:2a:5c:e3:1c:e2:c4:cc:fa:0e:46:ca:e4:7e:
         07:0c:ac:27:87:cb:39:85:dc:2b:cc:30:17:e5:ce:a5:34:60:
         65:1b:92:86:c6:73:f8:04:d8:39:1b:43:24:08:93:e3:5e:ad:
         9d:1c:41:f4:f2:0b:13:e2:3e:8a:51:44:e2:95:fe:a4:2b:c6:
         ad:59:e7:d2:e7:81:ac:82:0b:ec:7a:d7:bd:18:0d:b2:4a:38:
         0d:60:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:06:17 2025 by rpki-client