Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          3i1iz869uuvV+5ITmlTzjhN46oRL0+eZgnrEXanBMOI=
Subject key identifier:   C8:99:22:E8:A7:98:42:6D:7C:AF:AD:C5:BD:68:C2:3F:EB:03:07:C4
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0C60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0C5F
Signing time:             Wed 05 Nov 2025 01:08:25 +0000
Manifest this update:     Wed 05 Nov 2025 01:08:25 +0000
Manifest next update:     Fri 07 Nov 2025 01:08:25 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: DB8UP155IucYRbgA95azo/Kvq+r43R1V80PyqIIIOPc=)
                          2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: Nov  5 01:08:25 2025 GMT
            Not After : Nov  7 01:08:25 2025 GMT
        Subject: CN=690aa389-0420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:f2:30:74:23:da:42:31:c4:f6:e7:db:5c:
                    9f:7e:09:f9:64:ee:97:d4:4b:83:29:82:a3:20:0c:
                    57:b1:80:0c:ac:af:e5:59:18:dc:cb:f5:ce:c3:ec:
                    56:e2:42:c7:af:87:f3:8e:24:f0:8d:c0:95:6a:30:
                    9f:94:95:be:8e:b8:ff:17:8b:0b:fa:d6:c3:49:80:
                    4a:2d:1d:12:16:ff:10:96:7a:c3:08:06:ca:72:b7:
                    68:2d:6d:55:20:1c:dd:fb:bb:ce:eb:72:39:ea:64:
                    47:ca:39:a3:2c:e4:d9:fe:7d:14:00:d5:97:9f:15:
                    7c:d5:af:6e:cd:09:8a:2c:d3:3b:c1:4f:f6:d9:1f:
                    9e:d5:15:06:2b:4a:7d:7f:b5:fc:ac:34:15:75:6c:
                    e4:52:79:01:c6:bb:ef:fc:0c:3b:af:8e:cb:47:68:
                    dc:98:00:59:5e:bf:94:b6:e6:2e:54:15:83:b2:79:
                    3a:6f:af:90:86:a7:6c:b7:4b:14:eb:1c:5a:8c:88:
                    25:a9:ea:23:7f:88:c0:f7:fb:a1:0b:7f:b7:11:d7:
                    68:af:5c:02:f4:e2:95:77:a1:90:4d:25:6e:0c:9f:
                    41:8b:37:d5:7d:0e:c4:e9:24:f8:16:b5:4a:02:6e:
                    18:fc:03:89:dc:4c:ed:de:4e:12:b8:a5:61:a5:13:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:99:22:E8:A7:98:42:6D:7C:AF:AD:C5:BD:68:C2:3F:EB:03:07:C4
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:50:17:1b:3a:3d:94:e4:ff:5b:15:2a:13:d9:9d:61:49:6e:
         3f:eb:d8:12:93:3e:ff:61:43:a4:0a:ef:d4:55:44:d5:ff:19:
         b4:8e:ac:76:f1:85:b4:77:07:80:d3:43:04:53:67:12:9c:d2:
         74:8f:62:ae:aa:26:e9:bd:80:70:e6:7c:d3:3b:7b:52:aa:ff:
         11:28:39:39:b4:27:1b:6b:86:fd:cd:56:4d:3f:cf:e8:0d:ec:
         b2:20:b0:d4:af:35:81:b5:13:34:36:10:6a:ff:fa:32:ea:24:
         f1:0f:89:be:3e:44:75:63:f2:68:50:6f:4e:49:6b:c0:9a:e4:
         b5:27:47:9d:4d:f8:c4:c0:eb:af:16:f8:66:85:45:b5:5f:cf:
         88:ed:cf:41:82:08:bf:8e:a1:a6:c2:e8:78:90:ad:0c:a2:5e:
         27:77:eb:a9:e0:20:6c:61:31:03:ad:b3:70:71:ab:12:f9:39:
         91:28:34:5f:06:c3:57:50:e2:e7:51:ec:93:a1:ba:81:e1:e9:
         ba:bc:fb:d5:20:81:4a:dc:24:7d:ba:12:4f:20:49:7d:bf:9b:
         4a:ca:14:80:68:9c:29:17:58:42:9f:a7:e6:84:e2:ed:9b:b3:
         16:18:1c:f7:ff:7b:90:5b:2d:93:dc:ee:38:b9:d7:14:a0:82:
         d3:b4:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:26:36 2025 by rpki-client