Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          12ppCno15q0goaCDy0puyNs5Qvyff+v0C62d3Jz8k5k=
Subject key identifier:   2F:C1:68:CF:E4:9F:80:A1:16:07:5B:B5:7B:41:AF:D8:FF:35:F3:48
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0EB3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0EA6
Signing time:             Tue 16 Sep 2025 00:55:55 +0000
Manifest this update:     Tue 16 Sep 2025 00:55:54 +0000
Manifest next update:     Thu 18 Sep 2025 00:55:54 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: RDccX85PVf9dNceuCgewxyCyHPB6XEuHdMPvE7kNozg=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3763 (0xeb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Sep 16 00:55:54 2025 GMT
            Not After : Sep 18 00:55:54 2025 GMT
        Subject: CN=68c8b59b-5abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:c7:30:38:ea:1e:67:51:5c:02:1f:bb:af:
                    26:c3:2c:2a:16:15:81:17:d1:b0:70:ca:99:ed:37:
                    d4:dd:83:25:79:ba:55:7e:30:d7:75:0f:cc:af:fb:
                    29:84:f5:07:3d:83:c4:de:9f:2e:1a:a6:e8:09:e7:
                    5d:57:f8:80:b4:60:f2:59:85:3c:97:0c:4a:89:d0:
                    63:f2:d2:f8:d6:3c:c8:0f:b7:73:b2:b4:17:82:a9:
                    68:fc:4d:88:cd:ab:e6:6e:e5:eb:6b:76:82:16:9b:
                    3e:c6:a4:86:2a:f3:26:90:45:bd:e4:65:eb:94:06:
                    97:24:d2:77:63:46:7d:fa:2b:d9:4b:aa:37:d2:b4:
                    ae:92:88:b8:bb:b5:33:25:ea:f0:73:1b:aa:cd:d0:
                    ec:1c:37:f4:da:4d:41:e8:e1:c9:b1:75:db:60:d6:
                    fa:7a:4d:84:b3:ba:73:15:10:4c:af:72:4c:b8:4a:
                    56:f0:43:ef:79:53:d9:0e:24:a1:8f:a1:3d:c0:cc:
                    69:93:88:1c:59:b9:1f:88:fb:fb:76:a1:d5:b2:4b:
                    dd:8a:3f:7d:38:0b:5c:76:04:e6:fc:b7:20:92:0d:
                    30:e9:bf:b2:d2:59:df:0d:5d:91:b6:87:00:78:db:
                    5c:cb:ae:23:7b:8b:0a:a3:87:5b:52:8c:f3:e3:41:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C1:68:CF:E4:9F:80:A1:16:07:5B:B5:7B:41:AF:D8:FF:35:F3:48
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2d:15:4c:9a:91:d7:6d:4f:96:4f:96:a2:c2:d1:45:00:a4:
         8e:60:4b:16:a3:e6:b1:89:9b:51:f1:cd:45:99:84:df:6f:c3:
         16:8b:61:e7:e1:a9:40:02:1d:40:70:e1:8f:0d:5f:f5:ec:4b:
         c0:1d:32:96:62:09:14:b7:96:e2:20:ee:93:fe:18:a4:86:26:
         38:bc:de:99:30:0b:33:6e:13:88:65:b4:20:6c:df:40:fb:e7:
         2c:99:33:c5:81:43:66:95:2b:de:4c:19:44:f7:83:17:5d:65:
         e7:4c:7b:62:5f:2a:29:75:cd:05:5e:6c:cf:ef:01:f1:84:36:
         5a:c4:cf:ee:04:92:f6:db:6d:62:02:d9:2d:bf:5d:83:fe:6c:
         c4:37:01:57:e1:dd:b7:93:a2:74:65:ef:9a:af:4c:96:58:46:
         39:56:14:2d:4a:cb:dc:7a:80:1e:ea:dc:bc:a1:b7:66:33:34:
         9d:8c:af:a9:82:cb:d5:f4:90:43:8c:c1:15:c5:fd:66:4b:8c:
         9a:06:ad:c4:a5:d2:a5:ec:ab:69:58:a6:d5:f7:2b:79:78:b9:
         aa:cb:24:ee:f0:c5:da:71:b9:3e:2d:19:0d:6e:19:36:f6:2c:
         9c:48:e7:df:4f:d5:f6:99:cf:1e:4b:bc:68:e5:03:d2:1a:c0:
         fb:8c:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:04:07 2025 by rpki-client