Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          rRx/hu7ePjOw6zj0mXH3BFzbO9k2ooMdNJ7MCKMxWTI=
Subject key identifier:   80:E5:D6:A2:B1:08:8A:9D:35:63:27:53:8D:DD:92:A0:AD:AC:89:7E
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          E1
Signing time:             Wed 17 Sep 2025 04:52:45 +0000
Manifest this update:     Wed 17 Sep 2025 04:52:45 +0000
Manifest next update:     Fri 19 Sep 2025 04:52:45 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: AaR5UDI6wmQiDf4WC6PUYQc9YfuUxdlhSj8ouo56zyQ=)
                          2: 12C71FFA414211F08D0BA2A9DAE4EC9C.roa (hash: L0xlt1TQw2jjAYhdxTaR7ffVXvpBJOWHJHDBNeBUdlQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Sep 17 04:52:45 2025 GMT
            Not After : Sep 19 04:52:45 2025 GMT
        Subject: CN=68ca3e9d-2b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:a5:d6:e9:3b:46:31:fc:55:81:03:f6:b9:
                    75:b2:9d:09:15:d4:63:4b:12:cd:a4:38:a6:09:78:
                    7a:e4:61:9d:b7:b7:9f:78:e2:e4:a3:8b:44:d4:0c:
                    5d:88:28:86:f0:5f:9a:db:50:37:1b:31:92:2f:3e:
                    d8:67:ee:cb:67:b9:1d:69:1e:c1:56:90:6e:ba:86:
                    0c:11:55:8e:a8:2d:0b:8a:bf:50:3a:bc:e2:a5:c6:
                    b0:77:1d:d1:d2:e8:3e:04:3f:43:cb:80:09:e7:d7:
                    ff:d2:9e:75:cd:7d:ee:c0:94:93:ec:ae:32:55:a8:
                    f8:cc:2e:cb:96:e9:6a:29:98:cb:9d:9d:22:a2:e9:
                    6c:d6:05:a0:ec:6a:7e:fd:f2:5b:4e:60:1d:d9:21:
                    68:87:76:e8:81:36:f8:56:bc:d1:d7:be:99:f4:18:
                    9f:9c:83:9c:4e:e5:11:09:21:d9:79:d0:e2:ec:a3:
                    b8:35:0a:46:f7:52:b8:2c:11:63:42:02:eb:7f:6f:
                    31:c8:85:4f:23:39:1e:69:0a:29:3b:7b:c5:7d:24:
                    65:61:76:c6:b2:e0:96:e9:9d:b8:22:e1:18:13:0b:
                    13:e5:a9:99:17:49:19:2e:27:f4:44:11:e2:41:74:
                    f4:19:7a:21:39:05:f2:76:a8:42:ab:dc:bf:45:11:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E5:D6:A2:B1:08:8A:9D:35:63:27:53:8D:DD:92:A0:AD:AC:89:7E
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:67:dc:27:e5:fd:d0:54:e2:74:89:1f:fd:be:4d:3f:3c:
         fe:53:c3:12:fe:81:de:08:12:1b:b5:27:9e:5f:4e:15:ea:2f:
         d2:e2:12:1c:d9:38:ea:ba:6d:99:80:e9:13:9c:cf:e6:8e:64:
         44:87:04:ed:b6:08:c7:90:0c:4f:a0:3d:f5:0a:3d:10:5e:9b:
         95:38:9d:d7:bb:7e:3f:a8:e1:10:a6:27:b1:ba:23:42:76:61:
         6a:00:8a:5e:3e:27:24:56:7d:7d:15:a6:3a:28:b2:94:72:e9:
         a3:c5:f0:1f:e0:2f:ec:80:2b:c4:6d:eb:38:77:c6:cc:f0:30:
         1d:26:b8:72:02:e2:08:3f:44:ab:0e:07:98:42:5e:e3:f2:8e:
         c3:c5:e4:d1:23:8f:bf:94:be:a6:15:d9:84:6a:45:de:bf:c2:
         6b:42:df:97:bc:65:e9:0a:8a:76:96:e8:e1:a0:c6:de:bb:8c:
         03:9b:7e:93:fb:91:cb:df:3e:0b:d3:85:b5:e7:2e:32:ce:cf:
         eb:08:8e:c3:4a:34:69:aa:b2:51:80:bd:39:bd:3f:bb:76:15:
         94:25:b7:3c:63:da:64:43:a7:d3:ba:72:bb:f8:d3:2c:dd:af:
         e4:db:66:b4:eb:48:8d:54:58:c1:99:9d:ed:5f:2e:e0:cf:47:
         de:cc:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:07:08 2025 by rpki-client