Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
File:                     19cqZIe9d2qLv61POGE8OxU1CYM.mft (raw, json)
Hash identifier:          ItKYoybIt4StLbipAafgTr5Y9c5H/9K+TPypKhYmO/I=
Subject key identifier:   D2:28:7F:23:7B:D5:1B:BC:F6:12:A5:68:62:07:A3:E1:05:7B:67:81
Authority key identifier: D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
Certificate issuer:       /CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
Certificate serial:       0ED4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
Manifest number:          0ECF
Signing time:             Wed 05 Nov 2025 00:55:02 +0000
Manifest this update:     Wed 05 Nov 2025 00:55:01 +0000
Manifest next update:     Fri 07 Nov 2025 00:55:01 +0000
Files and hashes:         1: 19cqZIe9d2qLv61POGE8OxU1CYM.crl (hash: GYjTUgyQ//2Nu3N97r0OydZwdKASWvMsFxyqtvUCheM=)
                          2: 42BB6C92B57511EF951BBFBD762E951A.roa (hash: 1bWInketCzu/Dqakbj5R6DwsUfKJazNvf+AWykl+zAc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3796 (0xed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AF, serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
        Validity
            Not Before: Nov  5 00:55:01 2025 GMT
            Not After : Nov  7 00:55:01 2025 GMT
        Subject: CN=690aa066-82c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:53:40:c7:ff:86:6c:bf:f6:38:0a:b7:cf:
                    a9:34:e0:4b:99:94:04:f6:5e:01:e9:ca:9b:c0:e6:
                    95:39:f8:8d:46:7a:6c:98:64:69:c1:53:a1:d1:99:
                    f2:4f:7b:d2:6e:a0:a0:f3:96:dc:07:d5:52:07:e8:
                    c2:fa:12:da:2c:fa:ed:cc:a0:25:fc:c1:0f:9b:ae:
                    e7:64:d8:db:65:16:f4:45:ea:99:84:31:3e:c7:a9:
                    e7:fe:fb:29:3f:98:81:ff:86:e6:2b:9a:f9:3f:62:
                    27:39:e3:17:97:13:4f:69:1b:1f:54:f2:6d:d0:74:
                    4a:2c:90:84:6b:ea:75:bc:d0:f9:8a:93:28:f1:09:
                    79:6f:e0:26:e4:65:9c:6a:48:00:94:63:da:4a:74:
                    a1:91:99:0d:cb:6b:9d:78:07:8f:ca:e3:e4:4a:33:
                    7e:2f:76:1a:c3:46:82:52:1d:f1:fb:6a:b4:6e:0d:
                    72:b2:3d:90:82:73:21:71:8b:93:e2:b4:77:54:5b:
                    4d:af:e9:82:f1:9f:45:aa:e2:f3:66:fa:0f:c2:ca:
                    71:e3:91:6b:e0:28:e7:e3:7f:df:93:a0:aa:4d:64:
                    1f:c6:f9:71:ad:03:d7:26:83:26:0e:46:b1:63:ce:
                    fc:ea:bf:86:80:37:1a:cf:4f:fc:01:7e:9d:8b:aa:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:7F:23:7B:D5:1B:BC:F6:12:A5:68:62:07:A3:E1:05:7B:67:81
            X509v3 Authority Key Identifier:
                keyid:D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9e:e9:fd:e5:4e:15:cd:49:ee:30:d4:12:23:a3:e9:c7:86:
         de:9e:dd:b1:2d:35:bc:a8:4a:21:bc:8d:c1:14:f4:47:de:7f:
         69:6b:5d:41:f1:a0:8e:0e:df:99:51:77:a3:f0:8d:68:93:0c:
         a1:6c:b7:58:53:a2:38:2d:f2:a3:70:6d:94:ae:7d:f6:6a:0d:
         b1:45:2e:d9:6d:a9:1c:23:ce:8e:ef:40:90:fa:1f:2c:41:a6:
         1a:43:74:f8:c4:26:d3:2c:c6:c6:84:d3:cc:21:37:5d:9a:f6:
         3c:c6:9c:32:56:ed:2e:22:53:07:5c:6c:b2:6c:c6:15:24:71:
         98:11:af:76:5f:da:b9:5a:9c:d4:58:46:9e:74:9e:6c:80:bd:
         a1:64:35:dd:e9:62:f9:6f:b9:99:63:af:99:73:27:3c:08:f2:
         dc:82:3e:35:6d:d6:90:d4:a9:db:9c:e4:62:29:af:68:12:3a:
         ea:80:91:dd:08:6e:74:5c:19:04:cc:74:89:96:3e:4c:af:e2:
         74:2b:48:9c:00:af:29:39:b9:a3:c4:a4:5b:51:ec:32:80:9a:
         d4:1b:7c:07:99:ba:fd:f3:e6:6c:66:fa:0c:9d:38:0a:11:ec:
         80:01:4c:a5:ea:7d:3b:6f:02:b2:1b:85:52:27:68:c9:6b:b4:
         ac:cd:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:17 2025 by rpki-client