Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
File:                     M03n0uuGIBi7lXSbZI3Lr1DRPag.mft (raw, json)
Hash identifier:          XlB5uWni8ZH/0KmCN8QetICPLps9MFlaEDrk5UTE5Y8=
Subject key identifier:   65:FE:56:58:A7:1C:01:F8:6C:6E:96:F4:73:B6:BB:54:38:E3:C3:AB
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0DA0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
Manifest number:          0D9D
Signing time:             Sun 27 Jul 2025 01:01:51 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:50 +0000
Manifest next update:     Tue 29 Jul 2025 01:01:50 +0000
Files and hashes:         1: M03n0uuGIBi7lXSbZI3Lr1DRPag.crl (hash: U3rdQhNC6KcbLawf39Onyu5O3K3HkYddysZfucWC5DI=)
                          2: D4836C70F58E11E59F714033F8AEA228.roa (hash: pN8APZRuxk6Jm4N1ZwtHoYfsYhbm0SmVWbFKIM+vAlY=)
                          3: 6CF64EE6A62211ED8F649780F1222468.roa (hash: NWE8clw8CF7WBnE8BhZlyK4mx7cNZXF3h1x6LHBwvwc=)
                          4: F019B85EA62111ED8776367FF1222468.roa (hash: vz0gdE2qPXTbuobi42RjN0wKI0ZjByLhBDreE92zsPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3488 (0xda0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: Jul 27 01:01:50 2025 GMT
            Not After : Jul 29 01:01:50 2025 GMT
        Subject: CN=68857a7f-4a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:9b:08:8a:3e:d3:5c:b4:42:c8:ea:df:8b:
                    ff:44:60:62:9d:25:69:d7:4b:19:3f:ce:f5:3d:d5:
                    ee:22:cf:9f:c9:16:1a:d7:98:32:86:c0:e8:eb:cc:
                    da:b1:9b:95:60:8c:cd:7e:78:78:15:f3:21:4c:82:
                    40:7f:e3:15:ae:5e:ea:76:b9:84:5f:b4:7b:cb:56:
                    05:ec:53:b2:a6:ca:0b:8c:fd:7c:80:68:16:a0:03:
                    13:6e:e6:ab:67:cc:94:ed:7d:4c:d8:15:a8:af:2c:
                    2b:62:e9:5d:00:42:9e:a0:ba:94:4d:76:31:ff:7f:
                    07:74:74:f2:a0:cd:9d:d7:73:44:95:93:f9:a7:eb:
                    6d:45:6a:0b:3e:8e:37:30:f9:ec:cd:84:8c:bf:8b:
                    e2:f8:e7:85:80:c6:2a:28:b3:4a:9a:7a:3b:c7:8c:
                    43:a4:12:cb:8b:40:24:14:fe:f7:dd:35:ed:9f:53:
                    9b:dd:6a:c5:c1:c4:3b:a9:fe:a0:12:f9:8b:16:f3:
                    cd:6e:95:0a:63:95:66:e1:9a:8b:e9:4e:0e:2c:fe:
                    39:2f:30:f3:c2:2c:83:3b:78:4b:1c:ff:83:3c:d8:
                    1b:14:5b:f8:41:53:95:ae:47:e6:41:89:38:1b:1b:
                    37:bb:aa:58:2e:c9:bd:7c:91:16:fc:be:97:1c:d5:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FE:56:58:A7:1C:01:F8:6C:6E:96:F4:73:B6:BB:54:38:E3:C3:AB
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:dc:41:04:6c:4e:15:0d:e4:bd:fc:71:c7:fd:48:84:1b:
         a5:4e:c6:f7:f3:1b:d3:b2:6c:bf:ba:1a:9f:ca:f9:01:b9:01:
         21:0d:5f:fd:04:c7:04:f4:68:a6:61:a8:a9:06:3d:a9:f9:1a:
         11:28:64:c1:a3:8a:78:38:a8:7b:a1:65:1b:f8:0c:79:44:25:
         03:f7:62:52:f3:c5:71:7a:f8:a7:57:e5:6b:ec:21:93:d9:21:
         b4:37:fe:b5:0f:09:17:de:91:42:06:9f:e3:0a:5b:90:91:0c:
         ce:b6:17:cf:d2:bc:b1:ed:76:4b:22:5a:34:9a:44:98:53:a9:
         6d:a1:0b:53:b7:77:0d:aa:dc:4c:c9:a9:a0:45:52:aa:fc:c4:
         16:6d:11:2d:5d:e1:c5:ad:81:52:cd:4c:28:10:b6:26:09:55:
         5c:23:ae:29:fb:79:2f:75:28:f3:77:00:7f:0f:fb:6a:e2:9c:
         b4:56:e0:5c:13:11:82:06:65:d8:34:a5:59:45:ea:41:6e:7e:
         62:6a:e5:51:1d:24:e4:38:dc:4d:99:80:69:ea:b1:9d:ab:5a:
         74:15:ac:82:90:8d:f4:7f:f9:79:1f:b9:3d:95:8d:bd:ec:db:
         7d:da:fe:be:e7:ff:2f:4c:21:0d:96:62:af:cc:38:b5:51:cd:
         26:f8:f5:3b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjNDQUZBRjExMC8GA1UEBRMoMzM0REU3RDJFQjg2MjAxOEJCOTU3NDlCNjQ4RENC
QUY1MEQxM0RBODAeFw0yNTA3MjcwMTAxNTBaFw0yNTA3MjkwMTAxNTBaMBgxFjAU
BgNVBAMTDTY4ODU3YTdmLTRhMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/eJsIij7TXLRCyOrfi/9EYGKdJWnXSxk/zvU91e4iz5/JFhrXmDKGwOjr
zNqxm5VgjM1+eHgV8yFMgkB/4xWuXup2uYRftHvLVgXsU7KmyguM/XyAaBagAxNu
5qtnzJTtfUzYFaivLCti6V0AQp6gupRNdjH/fwd0dPKgzZ3Xc0SVk/mn621Fags+
jjcw+ezNhIy/i+L454WAxioos0qaejvHjEOkEsuLQCQU/vfdNe2fU5vdasXBxDup
/qAS+YsW881ulQpjlWbhmovpTg4s/jkvMPPCLIM7eEsc/4M82BsUW/hBU5WuR+ZB
iTgbGze7qlguyb18kRb8vpcc1biDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZf5W
WKccAfhsbpb0c7a7VDjjw6swHwYDVR0jBBgwFoAUM03n0uuGIBi7lXSbZI3Lr1DR
PagwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzQ0FGL0QxM0Y5REIwRjRGMTExRTVCRThBNjM0Q0Y4QUVBMjI4L00wM24w
dXVHSUJpN2xYU2JaSTNMcjFEUlBhZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL00wM24wdXVHSUJpN2xYU2JaSTNMcjFEUlBhZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjNDQUYvRDEzRjlEQjBGNEYxMTFFNUJFOEE2MzRDRjhB
RUEyMjgvTTAzbjB1dUdJQmk3bFhTYlpJM0xyMURSUGFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChwNxBBGxOFQ3kvfxxx/1IhBulTsb3
8xvTsmy/uhqfyvkBuQEhDV/9BMcE9GimYaipBj2p+RoRKGTBo4p4OKh7oWUb+Ax5
RCUD92JS88VxevinV+Vr7CGT2SG0N/61DwkX3pFCBp/jCluQkQzOthfP0ryx7XZL
Ilo0mkSYU6ltoQtTt3cNqtxMyamgRVKq/MQWbREtXeHFrYFSzUwoELYmCVVcI64p
+3kvdSjzdwB/D/tq4py0VuBcExGCBmXYNKVZRepBbn5iauVRHSTkONxNmYBp6rGd
q1p0FayCkI30f/l5H7k9lY297Nt92v6+5/8vTCENlmKvzDi1Uc0m+PU7
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:46 2025 by rpki-client