Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
File:                     M-hGYU4VRCxoAFpeP85ct1bgSn8.mft (raw, json)
Hash identifier:          ANUCI+r4naXIoY/mT6SBx8Li0Ud4Ilk2+odvESqlASQ=
Subject key identifier:   68:97:3C:B2:07:40:30:5E:58:2B:72:D2:92:29:42:A3:16:3F:BD:72
Authority key identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F
Certificate issuer:       /CN=F3613F08AF/serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
Manifest number:          02A4
Signing time:             Sun 27 Jul 2025 04:06:42 +0000
Manifest this update:     Sun 27 Jul 2025 04:06:42 +0000
Manifest next update:     Tue 29 Jul 2025 04:06:42 +0000
Files and hashes:         1: M-hGYU4VRCxoAFpeP85ct1bgSn8.crl (hash: m0Ok2vBzhVOnI49xbCotJrZcxFsyWrgErOIKwTy8ASU=)
                          2: AC0A32D0690611EEB3384E8B4AD9E6FC.roa (hash: kErDXNR3ZNhWVzlb8Vo/Il2bfhwKojLKehJI3WdRMNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613F08AF, serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
        Validity
            Not Before: Jul 27 04:06:42 2025 GMT
            Not After : Jul 29 04:06:42 2025 GMT
        Subject: CN=6885a5d2-8b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:73:85:97:67:f3:59:3d:1f:7d:ca:5e:5b:
                    50:ea:c3:d5:3e:0a:4c:db:b9:a9:98:af:20:a4:85:
                    1f:03:75:7a:e0:e5:41:18:c1:6f:62:94:a0:b2:2d:
                    70:5e:18:17:bd:5b:c0:18:3e:f9:ec:2f:88:48:52:
                    8d:21:25:ce:9f:ff:6f:86:49:c8:ce:61:aa:76:9c:
                    6f:26:7b:40:83:32:2b:20:61:5c:d5:2b:60:4f:62:
                    51:c1:2c:85:5d:5c:da:c2:ef:e3:df:37:58:1b:e3:
                    17:38:8e:77:6e:9b:f5:d8:b8:ea:75:c3:96:58:7b:
                    52:43:96:51:0a:a6:7c:8e:43:01:09:f5:e9:2b:2b:
                    ab:37:73:4e:22:e2:ef:59:78:fc:4e:e6:e2:68:bc:
                    75:cf:cd:0a:ff:cd:99:43:b0:0a:aa:db:09:fd:89:
                    24:5c:66:24:bc:41:f1:d8:7d:49:be:3f:0c:92:7a:
                    4a:c1:bc:ce:3d:ab:91:0f:82:07:83:0c:05:9d:1b:
                    49:8e:69:bc:d5:bb:6f:81:ad:50:76:9b:8a:2b:88:
                    65:00:67:69:44:f9:86:cb:e6:fb:1c:2a:cd:13:bf:
                    8c:54:11:90:a9:29:8c:75:a0:59:87:01:06:a7:3a:
                    c9:a5:ec:6f:c5:80:b1:c4:ac:c1:0f:92:dc:eb:fd:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:97:3C:B2:07:40:30:5E:58:2B:72:D2:92:29:42:A3:16:3F:BD:72
            X509v3 Authority Key Identifier:
                keyid:33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:a3:06:84:40:ee:05:92:ab:f0:62:2c:f4:57:65:4b:ce:
         8d:8a:da:06:e4:ca:c8:9f:15:b8:7f:1f:97:1e:e9:2b:7a:09:
         b6:fb:17:fc:6c:f6:85:c1:6d:4f:ab:6d:ac:8b:40:c5:27:32:
         18:87:bd:c7:86:c5:9f:12:50:94:40:4e:e2:36:14:ba:ff:71:
         7a:1b:2e:02:44:c6:8a:09:a2:41:ea:77:6e:a6:b1:77:77:d6:
         e8:96:0c:99:c8:22:50:a5:cc:c0:af:61:71:99:f4:86:09:34:
         db:44:28:6a:25:4d:09:07:d5:16:ca:6a:b7:be:ea:09:f2:42:
         83:08:0a:f0:9d:ac:b1:92:99:c0:64:45:97:ba:8e:63:4a:ab:
         03:53:80:0b:cf:06:a5:82:e8:52:84:d7:89:6d:33:7b:3d:0d:
         cf:f0:ec:70:5f:f1:89:0e:eb:80:02:9c:6b:30:93:75:e3:df:
         5b:6f:ac:fb:4f:66:13:9d:e5:f8:e3:00:e0:55:aa:45:b0:2f:
         2d:31:43:c0:b5:41:e7:8b:6a:3c:4f:0d:ab:a7:8c:29:3c:77:
         a2:2e:56:59:44:9b:bc:1d:bc:9f:5e:cc:47:ba:96:92:a2:8b:
         f1:bc:11:9a:54:ae:1d:27:7e:ab:50:2f:c5:7a:5c:50:9d:18:
         ad:43:6c:bf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTNGMDhBRjExMC8GA1UEBRMoMzNFODQ2NjE0RTE1NDQyQzY4MDA1QTVFM0ZDRTVD
Qjc1NkUwNEE3RjAeFw0yNTA3MjcwNDA2NDJaFw0yNTA3MjkwNDA2NDJaMBgxFjAU
BgNVBAMTDTY4ODVhNWQyLThiMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCot3OFl2fzWT0ffcpeW1Dqw9U+CkzbuamYryCkhR8DdXrg5UEYwW9ilKCy
LXBeGBe9W8AYPvnsL4hIUo0hJc6f/2+GScjOYap2nG8me0CDMisgYVzVK2BPYlHB
LIVdXNrC7+PfN1gb4xc4jndum/XYuOp1w5ZYe1JDllEKpnyOQwEJ9ekrK6s3c04i
4u9ZePxO5uJovHXPzQr/zZlDsAqq2wn9iSRcZiS8QfHYfUm+PwySekrBvM49q5EP
ggeDDAWdG0mOabzVu2+BrVB2m4oriGUAZ2lE+YbL5vscKs0Tv4xUEZCpKYx1oFmH
AQanOsml7G/FgLHErMEPktzr/XUVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaJc8
sgdAMF5YK3LSkilCoxY/vXIwHwYDVR0jBBgwFoAUM+hGYU4VRCxoAFpeP85ct1bg
Sn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEzRjA4L0JGNDcyQzc4NjkwNTExRUVCMDk5MjU4ODRBRDlFNkZDL00taEdZ
VTRWUkN4b0FGcGVQODVjdDFiZ1NuOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL00taEdZVTRWUkN4b0FGcGVQODVjdDFiZ1NuOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTNGMDgvQkY0NzJDNzg2OTA1MTFFRUIwOTkyNTg4NEFE
OUU2RkMvTS1oR1lVNFZSQ3hvQUZwZVA4NWN0MWJnU244Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMwKMGhEDuBZKr8GIs9FdlS86NitoG
5MrInxW4fx+XHukregm2+xf8bPaFwW1Pq22si0DFJzIYh73HhsWfElCUQE7iNhS6
/3F6Gy4CRMaKCaJB6nduprF3d9bolgyZyCJQpczAr2FxmfSGCTTbRChqJU0JB9UW
ymq3vuoJ8kKDCArwnayxkpnAZEWXuo5jSqsDU4ALzwalguhShNeJbTN7PQ3P8Oxw
X/GJDuuAApxrMJN1499bb6z7T2YTneX44wDgVapFsC8tMUPAtUHni2o8Tw2rp4wp
PHeiLlZZRJu8HbyfXsxHupaSoovxvBGaVK4dJ36rUC/FelxQnRitQ2y/
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:54 2025 by rpki-client