Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File:                     Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier:          F1/jc2Bxl6zwlJmUY8f6mA6c54jV3W3gTxvuUQ9c9cs=
Subject key identifier:   0D:48:F3:9E:3C:4C:70:3A:3A:39:1D:5D:C1:7E:8E:08:74:25:9E:54
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       11
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number:          10
Signing time:             Wed 17 Sep 2025 05:15:02 +0000
Manifest this update:     Wed 17 Sep 2025 05:15:01 +0000
Manifest next update:     Fri 19 Sep 2025 05:15:01 +0000
Files and hashes:         1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: eaz+HrPTBpeHV0fPZoRVTtVeqaXEnUbj52tqynp1dqM=)
                          2: A19BA40E895D11F0BE8951DBDAE4EC9C.roa (hash: Et+VW4knLp0d295uH8UgXrH5+8q9h3SexmR3jtKPDNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Sep 17 05:15:01 2025 GMT
            Not After : Sep 19 05:15:01 2025 GMT
        Subject: CN=68ca43d6-8267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:f5:dd:7c:94:5a:e2:1f:70:2d:6a:5c:a6:
                    c2:8a:28:19:96:76:09:36:b4:f2:dd:34:dc:84:e5:
                    f3:c0:c3:09:2a:80:62:f9:cd:9a:77:b4:13:4d:ad:
                    f4:de:6c:f4:20:ca:fb:76:8e:1d:dd:c7:d9:a7:14:
                    2d:f3:10:0f:3c:fa:8a:41:0b:05:02:75:ab:30:03:
                    29:10:b8:79:62:98:04:26:e6:5d:aa:0f:25:cb:1e:
                    e7:72:4e:a5:35:8d:47:88:c8:42:cf:35:1f:c3:79:
                    70:1e:ad:31:bc:ae:08:bf:67:fd:5e:dc:3e:db:d8:
                    b3:0d:fa:cf:69:3c:1c:ac:7b:7e:fc:f9:ae:4e:da:
                    1c:96:b3:c4:c0:31:2c:43:81:e2:68:97:f6:1c:fd:
                    b9:f9:d2:17:96:c2:04:82:1c:00:7c:a8:16:b6:bf:
                    74:40:7e:d8:47:8f:c9:bf:c2:76:b1:27:e2:b9:05:
                    0f:22:b0:7d:b3:d2:41:76:95:df:65:83:58:a5:2c:
                    6d:3d:d0:32:23:d8:e8:fd:12:c0:de:37:34:c8:7e:
                    b5:95:e2:20:ad:f4:cb:e2:a2:c9:08:6d:64:56:f5:
                    1a:4f:b3:87:ed:c5:e1:d7:cb:0d:3f:74:dc:d3:91:
                    7d:35:35:1d:e5:7c:1c:b6:05:92:6f:5e:b1:47:a9:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:F3:9E:3C:4C:70:3A:3A:39:1D:5D:C1:7E:8E:08:74:25:9E:54
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:79:62:13:58:24:04:55:d8:69:12:2e:13:40:48:8f:88:
         4e:4a:2a:c6:cb:23:f7:de:d9:c1:c6:2c:ab:6d:9e:2e:c1:ba:
         4c:6a:29:7f:b9:20:2e:e9:89:bc:e5:9a:5d:87:85:42:1d:b9:
         e5:bf:c9:e9:87:f3:15:2f:1d:e1:bb:2b:a4:3c:9b:70:37:fd:
         ad:70:f8:01:e6:ee:76:92:22:63:ca:22:62:8d:2a:9d:f2:fa:
         4a:bd:c3:8b:4a:c6:3e:fe:b2:69:d7:79:f3:b6:f4:4b:b3:2d:
         b7:f6:48:3e:20:56:0d:b8:95:69:f0:48:53:00:30:6a:f7:f9:
         ac:93:78:0e:07:94:45:de:44:a1:05:df:c2:f6:67:f1:e0:cf:
         8f:0d:3b:be:f5:eb:a5:51:14:5c:4c:ab:f3:a8:e0:67:04:e5:
         aa:6c:97:bb:24:70:b6:4a:d6:1e:6a:df:ee:f5:1c:c6:23:d2:
         b4:86:03:b5:94:d7:a0:5e:14:57:f8:ac:3a:d8:5e:6b:41:6b:
         f8:b6:3f:94:14:be:69:7e:06:da:ee:9b:b9:ed:c1:a4:d1:ad:
         e6:8d:ae:19:59:0a:1b:77:6c:fc:06:0b:38:57:87:1a:f1:6d:
         b7:3d:41:74:6a:c0:e8:b4:45:e1:38:84:bf:23:62:d1:43:b7:
         4b:00:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:05:37 2025 by rpki-client