Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
File:                     3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft (raw, json)
Hash identifier:          n9gngOIzBy12414xVrDUygI7TsaPzKictILaAO7cnHw=
Subject key identifier:   67:57:8E:04:6F:09:7A:A2:C4:14:D3:21:48:12:B8:1E:9F:04:2C:05
Authority key identifier: DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
Certificate issuer:       /CN=F36167D3AF/serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
Certificate serial:       DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
Manifest number:          DD
Signing time:             Wed 17 Sep 2025 04:52:33 +0000
Manifest this update:     Wed 17 Sep 2025 04:52:33 +0000
Manifest next update:     Fri 19 Sep 2025 04:52:33 +0000
Files and hashes:         1: 3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl (hash: HJFTCgDA0EW9cJRWrBeLcKZXst974M8dGYnTjmR2uP8=)
                          2: B916B790E93511EF85696B6B762E951A.roa (hash: ggevfaeeCUMvKWREnfa5ZTaHefEit81KWkRtGhD4nDA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36167D3AF, serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
        Validity
            Not Before: Sep 17 04:52:33 2025 GMT
            Not After : Sep 19 04:52:33 2025 GMT
        Subject: CN=68ca3e91-ca66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:0e:c7:de:6d:e8:01:58:7f:19:a2:60:ed:
                    e3:8c:1a:ee:98:16:a6:3f:bd:ce:85:05:a9:ea:85:
                    c8:11:91:79:69:a7:f4:dd:a2:b4:53:df:ed:50:b5:
                    7b:1b:93:36:d7:e3:d4:b2:97:94:fd:07:29:da:fe:
                    80:63:1f:bf:29:55:9b:e9:a7:e4:c9:ce:26:2a:31:
                    d5:58:e9:cb:b1:79:38:07:08:66:da:eb:4d:ac:55:
                    8e:ab:3a:72:f3:38:0d:dd:56:1a:06:3a:3b:d2:4e:
                    d3:54:44:d9:af:2e:44:9f:6e:05:3b:54:9c:fc:89:
                    d7:25:e5:22:29:82:18:69:ad:2a:3f:f5:de:6b:d0:
                    2f:d3:be:b9:9e:89:99:54:5b:70:cd:c3:b8:2d:10:
                    6e:83:a0:16:e6:92:75:2b:6a:e9:9f:68:7b:e9:b7:
                    62:64:74:cf:a8:9b:c6:5b:df:7e:fc:7d:39:72:8c:
                    b1:96:a0:40:e0:e9:5c:3f:eb:4b:2c:26:f3:34:07:
                    5e:67:1b:a5:98:1a:5a:dc:2d:33:33:c2:b0:95:1b:
                    bb:36:05:d8:06:50:70:2a:c2:26:f4:1d:87:be:38:
                    f2:6d:24:70:f1:5f:2c:c6:81:59:1f:d9:58:84:b8:
                    ac:d7:03:8f:c8:d4:f1:41:3e:56:44:40:4b:6c:1c:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:8E:04:6F:09:7A:A2:C4:14:D3:21:48:12:B8:1E:9F:04:2C:05
            X509v3 Authority Key Identifier:
                keyid:DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:88:f9:62:e1:15:f9:ef:d9:74:e0:96:e2:6a:16:08:bf:d1:
         89:e5:85:1a:87:76:66:36:80:2f:ea:1e:c2:5b:d5:07:8a:df:
         cc:cd:90:19:8d:d1:f1:5b:9c:9f:85:ee:e7:8a:c0:f7:26:b4:
         bd:63:f1:63:21:cc:1a:be:81:9f:3e:8a:13:35:f7:04:b6:a3:
         d2:0c:32:b5:62:27:47:eb:47:c0:49:06:f4:c9:8a:36:42:3f:
         17:1c:52:90:ba:61:e0:cc:95:af:82:ac:ec:36:6f:cc:af:b1:
         d4:90:89:44:0b:84:e0:e1:98:ee:dc:9c:07:c6:92:a9:32:ec:
         67:1a:e6:46:db:c4:98:50:d8:5d:6f:70:98:a3:6d:80:65:96:
         3c:e5:96:f9:27:ca:42:cd:fe:97:67:5d:27:1c:5a:d3:ab:65:
         be:8e:e2:7c:cf:14:39:ad:44:e9:fc:5f:c4:bc:2b:42:ad:ef:
         e6:b8:32:54:47:57:f8:71:9a:85:eb:93:e8:e4:fa:9a:29:30:
         02:cc:9b:27:74:4b:35:05:17:d8:6c:f2:e4:fb:53:f9:b8:e9:
         ee:e5:1f:c8:18:29:4b:3e:72:67:d7:3f:44:60:48:83:1b:4c:
         23:ea:97:0d:54:a9:ff:f4:d4:44:4d:8b:90:f9:5f:69:b6:a2:
         85:ae:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:51:06 2025 by rpki-client