Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
File:                     TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft (raw, json)
Hash identifier:          tz1WjVsEZHXY8dTTJY2wgM06481yoncu+PRkMTJy3I8=
Subject key identifier:   1E:FF:4A:D2:44:3C:F1:7F:26:AB:4D:95:92:3E:16:4C:37:5E:BC:1A
Authority key identifier: 4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
Certificate issuer:       /CN=F3611B04AF/serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Certificate serial:       72
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
Manifest number:          71
Signing time:             Wed 17 Sep 2025 04:59:31 +0000
Manifest this update:     Wed 17 Sep 2025 04:59:30 +0000
Manifest next update:     Fri 19 Sep 2025 04:59:30 +0000
Files and hashes:         1: TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl (hash: FPNcdOi6Uc/huiWY5p4dpZ1FBGEgDAZycBlbL02eaNI=)
                          2: D4D84B9E3D5211F08FF5E995DAE4EC9C.roa (hash: /d1iMp/ZT/BMLsfn6Ybe9u0ARPnAxFGfjCR2WymN//o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611B04AF, serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
        Validity
            Not Before: Sep 17 04:59:30 2025 GMT
            Not After : Sep 19 04:59:30 2025 GMT
        Subject: CN=68ca4033-932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:17:93:ab:b5:ca:d1:f7:c6:60:99:0a:47:4b:
                    9d:6a:01:b8:c4:ef:16:04:05:5c:be:a9:43:b9:80:
                    69:64:a2:13:83:b2:ba:5f:4b:54:18:f0:a9:9f:c6:
                    14:02:c3:17:3a:8c:06:36:01:c0:f5:fc:3d:45:1c:
                    fa:eb:ae:64:17:28:78:16:39:79:6b:46:9e:21:d1:
                    42:9a:e2:e5:b6:b7:37:a7:c4:5c:0e:ec:f4:a2:a7:
                    b6:49:c6:00:ee:ec:8c:8a:17:90:49:c3:bf:44:82:
                    07:f7:01:bb:40:41:78:46:b7:a6:8c:8b:1b:00:5c:
                    f2:25:2a:80:da:66:30:5e:6c:bc:ff:a2:48:4c:4a:
                    63:a4:9a:e3:16:ef:cf:64:de:a8:cd:1f:0b:b3:0e:
                    9a:af:c3:ac:6e:e8:6e:14:94:60:a3:6c:43:15:e3:
                    7e:4d:e8:44:09:cb:71:e6:3a:bb:8b:41:a7:cd:c3:
                    d8:01:2b:0d:98:ce:fd:3a:52:7f:20:e4:ca:04:c7:
                    ac:3a:de:f4:1a:22:c1:a4:e1:53:93:7a:ca:eb:7b:
                    2b:9a:79:fa:e1:73:44:ed:3c:b5:6c:cd:fa:35:17:
                    7d:a1:e9:a6:59:2c:1b:5e:e1:54:8a:64:b4:ea:38:
                    fe:2c:e8:1f:ea:ab:17:30:82:54:6a:61:c2:bf:d3:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FF:4A:D2:44:3C:F1:7F:26:AB:4D:95:92:3E:16:4C:37:5E:BC:1A
            X509v3 Authority Key Identifier:
                keyid:4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:c9:7b:aa:3b:41:36:82:6e:d2:29:5f:97:4b:51:1b:e0:
         02:2d:cf:1b:f4:f0:0c:f3:ca:8c:7d:73:b8:45:47:18:49:d3:
         f0:11:ca:ff:d3:19:3d:08:6b:a0:e7:6c:d5:51:2b:54:f7:68:
         6c:2c:7c:4b:29:65:18:c9:57:f5:d9:84:1e:73:f3:7e:84:19:
         0a:05:82:4b:d9:63:e2:59:eb:24:0f:ed:fb:27:35:7c:ac:af:
         0c:d2:3b:a2:31:da:e2:b3:85:f8:e4:fe:9a:bc:9a:11:8e:57:
         89:5e:61:ab:80:24:25:56:1c:0c:d7:eb:59:3a:34:92:ae:df:
         1f:cd:e4:59:fc:54:54:c5:e4:1c:b3:6b:15:57:a4:3a:7e:1f:
         11:0b:b4:8c:0d:e9:f1:50:75:26:f0:56:bc:74:34:8f:0c:14:
         79:2a:dd:70:99:0c:c1:f6:87:9d:c3:68:42:85:57:1f:67:7e:
         68:85:e2:14:50:73:6a:fc:46:74:7a:9b:e1:04:76:f3:bf:2c:
         5e:09:55:c3:5d:22:57:2b:1d:24:82:e4:34:8e:cf:42:eb:f2:
         41:a3:a7:c2:b0:41:29:39:cf:07:19:37:82:85:ca:95:13:59:
         ab:3a:5c:5a:82:b6:df:89:81:26:56:0a:a1:a2:0d:2b:d8:f5:
         2c:26:ab:52
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBcjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MUIwNEFGMTEwLwYDVQQFEyg0RTIzQUE3QTBEQTgzNDBFMkVEREZEMjE1RUI2QzQ1
MzM3NDJGQ0YwMB4XDTI1MDkxNzA0NTkzMFoXDTI1MDkxOTA0NTkzMFowGDEWMBQG
A1UEAxMNNjhjYTQwMzMtOTMyYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN0Xk6u1ytH3xmCZCkdLnWoBuMTvFgQFXL6pQ7mAaWSiE4Oyul9LVBjwqZ/G
FALDFzqMBjYBwPX8PUUc+uuuZBcoeBY5eWtGniHRQpri5ba3N6fEXA7s9KKntknG
AO7sjIoXkEnDv0SCB/cBu0BBeEa3poyLGwBc8iUqgNpmMF5svP+iSExKY6Sa4xbv
z2TeqM0fC7MOmq/DrG7obhSUYKNsQxXjfk3oRAnLceY6u4tBp83D2AErDZjO/TpS
fyDkygTHrDre9BoiwaThU5N6yut7K5p5+uFzRO08tWzN+jUXfaHpplksG17hVIpk
tOo4/izoH+qrFzCCVGphwr/TSTECAwEAAaOCArgwggK0MB0GA1UdDgQWBBQe/0rS
RDzxfyarTZWSPhZMN168GjAfBgNVHSMEGDAWgBROI6p6Dag0Di7d/SFetsRTN0L8
8DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTFCMDQvNzhGOTVBMTgzRDUwMTFGMDgwREJEQTg2REFFNEVDOUMvVGlPcWVn
Mm9OQTR1M2YwaFhyYkVVemRDX1BBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVGlPcWVnMm9OQTR1M2YwaFhyYkVVemRDX1BBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxMUIwNC83OEY5NUExODNENTAxMUYwODBEQkRBODZEQUU0
RUM5Qy9UaU9xZWcyb05BNHUzZjBoWHJiRVV6ZENfUEEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACfsyXuqO0E2gm7SKV+XS1Eb4AItzxv0
8Azzyox9c7hFRxhJ0/ARyv/TGT0Ia6DnbNVRK1T3aGwsfEspZRjJV/XZhB5z836E
GQoFgkvZY+JZ6yQP7fsnNXysrwzSO6Ix2uKzhfjk/pq8mhGOV4leYauAJCVWHAzX
61k6NJKu3x/N5Fn8VFTF5ByzaxVXpDp+HxELtIwN6fFQdSbwVrx0NI8MFHkq3XCZ
DMH2h53DaEKFVx9nfmiF4hRQc2r8RnR6m+EEdvO/LF4JVcNdIlcrHSSC5DSOz0Lr
8kGjp8KwQSk5zwcZN4KFypUTWas6XFqCtt+JgSZWCqGiDSvY9Swmq1I=
-----END CERTIFICATE-----
Generated at Thu Sep 18 04:42:55 2025 by rpki-client