Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          yy0j0I/rugtLTMSzh7hJbFmakL7v3VnidNTe33pY/eQ=
Subject key identifier:   2E:85:6B:CE:6F:6E:19:B5:A2:20:DF:86:46:F1:46:B9:8F:84:0A:29
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       02CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          02C9
Signing time:             Wed 17 Sep 2025 03:50:14 +0000
Manifest this update:     Wed 17 Sep 2025 03:50:13 +0000
Manifest next update:     Fri 19 Sep 2025 03:50:13 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: ArG+i+PVNYgLSw/xGEMNGr/7bO7RBAM01wjtu/1hN0E=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Sep 17 03:50:13 2025 GMT
            Not After : Sep 19 03:50:13 2025 GMT
        Subject: CN=68ca2ff6-c089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4a:b9:ee:8d:f5:64:36:16:2f:42:6c:2a:41:
                    24:21:aa:ef:4b:14:f6:bc:1e:1a:7f:2d:6d:12:1b:
                    17:01:1d:91:e3:cd:4a:72:90:31:c0:b0:8a:91:28:
                    36:ff:60:ad:67:9d:5f:f9:a4:70:69:3e:2c:3d:90:
                    99:ba:3e:05:a1:a3:5f:07:58:b2:82:07:93:d4:44:
                    bd:f5:e6:be:ae:53:2c:e4:f3:75:ee:d7:7a:2a:b4:
                    83:ca:16:d0:b3:02:03:41:fc:98:0f:b8:0f:14:66:
                    a1:cf:03:e5:98:07:29:50:44:14:1b:f1:62:d7:e6:
                    ae:a4:42:3e:77:eb:0c:64:d7:31:88:bc:ed:ea:24:
                    5e:0b:52:3f:06:5f:a0:c8:f8:67:89:7b:a6:e4:47:
                    7f:b4:19:8f:22:9f:01:3a:24:83:2d:3a:23:31:7a:
                    dd:43:39:42:88:32:26:99:38:a5:ce:d1:0d:3c:23:
                    82:9b:11:db:32:2d:de:b2:ce:23:5a:a6:9f:b4:1a:
                    e2:5d:87:7d:67:73:d3:06:46:d5:1d:cd:0c:db:57:
                    45:35:3f:63:99:94:78:e1:3f:e0:92:ba:1a:6b:02:
                    7e:87:b0:62:ee:cd:4b:85:a2:21:90:4c:dc:4c:64:
                    16:aa:e7:69:f0:ff:dc:ef:e8:36:3a:98:11:5f:6a:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:85:6B:CE:6F:6E:19:B5:A2:20:DF:86:46:F1:46:B9:8F:84:0A:29
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:a3:88:45:03:34:66:89:ef:48:89:2f:92:1c:fe:1c:45:
         37:01:8c:f6:1f:f2:29:7c:d7:c6:8c:62:13:02:d9:4b:3f:16:
         1d:6d:43:e5:ef:a0:0a:36:f3:79:23:23:30:80:09:de:39:28:
         c9:68:02:03:8f:ba:da:87:33:e7:a9:2f:1c:f0:83:91:c0:cc:
         37:0a:69:e0:01:65:5e:ef:88:0c:65:bb:88:66:ab:45:08:47:
         1b:a9:ed:74:34:e2:17:31:c7:eb:cb:7c:17:5e:59:d7:17:76:
         7b:99:7b:50:af:91:7d:c1:1d:74:a4:c2:f7:6e:0c:16:44:b3:
         65:51:d0:c3:a9:76:07:d3:19:03:be:06:26:84:5c:84:61:a3:
         43:8f:b0:b6:ca:29:99:6b:01:63:58:11:31:a0:d4:d9:3d:1e:
         b0:63:2d:b2:94:79:4e:f0:4f:b8:dd:b4:21:15:4c:39:f8:5a:
         7b:98:c1:d3:e6:b9:ed:80:b0:3e:69:1b:1f:69:f3:23:b9:69:
         69:c4:c5:d8:09:98:62:1f:99:5a:9c:e9:8b:cb:c2:db:b0:13:
         f5:81:88:01:3c:00:24:ff:05:87:ad:6f:f9:03:4f:e0:6d:00:
         16:aa:f8:9a:4e:d7:d6:9a:c3:b1:2c:73:cb:01:a2:35:e2:15:
         71:fa:8e:2b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRERkRBRjExMC8GA1UEBRMoM0NFNzRBQzUyNUFCQzlCNTA1MTMxRTU2RDNBRjRC
QUEwQ0E4NkJDNzAeFw0yNTA5MTcwMzUwMTNaFw0yNTA5MTkwMzUwMTNaMBgxFjAU
BgNVBAMTDTY4Y2EyZmY2LWMwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtSrnujfVkNhYvQmwqQSQhqu9LFPa8Hhp/LW0SGxcBHZHjzUpykDHAsIqR
KDb/YK1nnV/5pHBpPiw9kJm6PgWho18HWLKCB5PURL315r6uUyzk83Xu13oqtIPK
FtCzAgNB/JgPuA8UZqHPA+WYBylQRBQb8WLX5q6kQj536wxk1zGIvO3qJF4LUj8G
X6DI+GeJe6bkR3+0GY8inwE6JIMtOiMxet1DOUKIMiaZOKXO0Q08I4KbEdsyLd6y
ziNapp+0GuJdh31nc9MGRtUdzQzbV0U1P2OZlHjhP+CSuhprAn6HsGLuzUuFoiGQ
TNxMZBaq52nw/9zv6DY6mBFfagjbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULoVr
zm9uGbWiIN+GRvFGuY+ECikwHwYDVR0jBBgwFoAUPOdKxSWrybUFEx5W069Lqgyo
a8cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0REZELzkxODdDNUQ0Nzc2NzExRUU5OURGRDk3MjRBRDlFNkZDL1BPZEt4
U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BPZEt4U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFE
OUU2RkMvUE9kS3hTV3J5YlVGRXg1VzA2OUxxZ3lvYThjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCL9aOIRQM0ZonvSIkvkhz+HEU3AYz2
H/IpfNfGjGITAtlLPxYdbUPl76AKNvN5IyMwgAneOSjJaAIDj7rahzPnqS8c8IOR
wMw3CmngAWVe74gMZbuIZqtFCEcbqe10NOIXMcfry3wXXlnXF3Z7mXtQr5F9wR10
pML3bgwWRLNlUdDDqXYH0xkDvgYmhFyEYaNDj7C2yimZawFjWBExoNTZPR6wYy2y
lHlO8E+43bQhFUw5+Fp7mMHT5rntgLA+aRsfafMjuWlpxMXYCZhiH5lanOmLy8Lb
sBP1gYgBPAAk/wWHrW/5A0/gbQAWqviaTtfWmsOxLHPLAaI14hVx+o4r
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:30:36 2025 by rpki-client