Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
File:                     c_ReAoX9cOku_fc2CqXtcWKLafw.mft (raw, json)
Hash identifier:          CHPheJQWXPAArii21nkVomuYFaketMiZTzlqIDgqg0U=
Subject key identifier:   CD:A3:A2:79:40:C6:D2:DC:C4:31:99:53:CB:80:7B:54:6C:46:EE:F4
Authority key identifier: 73:F4:5E:02:85:FD:70:E9:2E:FD:F7:36:0A:A5:ED:71:62:8B:69:FC
Certificate issuer:       /CN=F36ED8A8AF/serialNumber=73F45E0285FD70E92EFDF7360AA5ED71628B69FC
Certificate serial:       F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
Manifest number:          F4
Signing time:             Wed 05 Nov 2025 05:22:38 +0000
Manifest this update:     Wed 05 Nov 2025 05:22:38 +0000
Manifest next update:     Fri 07 Nov 2025 05:22:38 +0000
Files and hashes:         1: c_ReAoX9cOku_fc2CqXtcWKLafw.crl (hash: Lhq0810tNxO2e0uXkVKoFuQfTy9gzllRvWjkepAgCH8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AF, serialNumber=73F45E0285FD70E92EFDF7360AA5ED71628B69FC
        Validity
            Not Before: Nov  5 05:22:38 2025 GMT
            Not After : Nov  7 05:22:38 2025 GMT
        Subject: CN=690adf1e-f578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:e3:64:66:a5:e5:ef:ac:85:1a:88:c7:c6:
                    5f:81:a1:99:6d:e7:e5:8d:d8:b1:26:ef:7a:b8:a5:
                    5d:c1:06:ce:e0:43:29:f9:92:13:2e:7b:68:51:a3:
                    67:ea:c3:1c:4a:12:9e:07:f1:1c:b8:fb:1e:be:1c:
                    60:63:26:50:98:0d:29:78:e0:00:de:2c:23:71:b5:
                    04:3f:28:67:86:f2:c6:01:30:99:87:16:e7:cd:ba:
                    66:f1:27:7c:b6:2b:f1:0c:04:5a:9e:ac:6a:16:20:
                    67:0a:c4:67:8b:17:87:aa:eb:f6:eb:de:fa:12:ed:
                    ad:8c:3d:80:32:57:67:9a:1c:37:f1:0b:57:93:08:
                    f4:db:0e:68:26:e0:ca:b7:31:12:01:98:9b:dd:46:
                    72:b2:94:65:ae:39:5b:28:5f:88:15:69:c2:d8:4d:
                    4b:c6:ae:56:cd:d2:74:c9:a1:d9:ee:3d:6f:63:62:
                    89:48:a2:e4:35:d0:54:e1:66:41:41:0f:6e:49:85:
                    c0:27:bd:74:e1:2c:58:0b:9a:72:a4:2a:4e:f2:43:
                    56:9b:e1:8c:14:ea:fc:14:fb:86:7c:d7:fa:cb:84:
                    cf:b2:07:02:b5:ea:fe:18:8f:86:ac:1d:93:f5:23:
                    14:9c:66:fe:ca:77:e0:52:eb:af:80:3d:98:44:69:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A3:A2:79:40:C6:D2:DC:C4:31:99:53:CB:80:7B:54:6C:46:EE:F4
            X509v3 Authority Key Identifier:
                keyid:73:F4:5E:02:85:FD:70:E9:2E:FD:F7:36:0A:A5:ED:71:62:8B:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:0f:81:ee:18:37:05:9b:b5:dc:01:e9:6b:be:80:43:a3:
         c0:ac:47:21:b8:d7:7d:16:63:58:a0:da:69:8d:12:cd:c4:d4:
         ed:a7:46:2d:bd:22:4a:1e:e6:b1:e5:3e:e4:c2:08:dc:4e:eb:
         de:82:7c:54:50:95:08:de:32:12:13:22:d0:b3:1f:3b:ff:d9:
         13:4e:5b:81:82:a8:97:2b:4f:5a:20:8a:eb:1a:b8:1f:9d:c9:
         52:2e:cc:d6:e0:e7:6f:4b:3c:4e:30:d5:38:a3:ba:30:97:6a:
         80:2a:f1:fc:2a:e9:f0:ba:5c:e4:51:50:22:46:04:ff:ca:65:
         b9:7a:ff:94:21:a6:e8:1e:57:e7:3c:34:f8:d7:6f:80:9d:ad:
         79:ce:35:d8:5e:69:38:92:7b:b9:24:6a:3d:2d:af:b5:29:ed:
         fe:c8:b1:68:db:e9:64:ef:65:2e:c0:32:c1:b3:f4:62:49:13:
         fa:de:c8:6c:f5:75:46:89:50:4e:12:87:03:34:47:b1:42:b3:
         9f:b2:cd:8a:32:65:32:a1:ee:e7:98:1f:a2:a5:75:c8:35:b5:
         5f:46:fa:61:f1:bf:af:b2:d4:07:81:f2:cb:2a:5f:95:ed:97:
         0d:0a:b3:40:b5:5a:1f:e5:ba:44:e7:42:10:53:3f:a8:c3:56:
         1d:1d:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:10 2025 by rpki-client