Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          1ahn9AppnShh+FJ3AQe2SfHPwj6LHvkIqYpJi48tOWw=
Subject key identifier:   19:CD:D3:43:8A:C0:AB:19:44:B2:D8:D1:90:3B:B5:5D:A6:5B:F9:6A
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0970
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          096C
Signing time:             Sun 27 Jul 2025 01:20:48 +0000
Manifest this update:     Sun 27 Jul 2025 01:20:47 +0000
Manifest next update:     Tue 29 Jul 2025 01:20:47 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: aUXViQj49wcdiL0cmcWuQE0UZwMLxio9e4YulJNhXtU=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416 (0x970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Jul 27 01:20:47 2025 GMT
            Not After : Jul 29 01:20:47 2025 GMT
        Subject: CN=68857ef0-b639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:50:1c:80:9f:f2:15:f2:72:03:a3:60:8b:
                    59:98:78:9b:21:e1:36:0b:6a:0a:6c:67:32:a9:e0:
                    1a:e7:09:16:a7:18:95:a6:01:1f:ee:77:25:12:af:
                    de:ce:7a:c2:cb:8a:8d:73:74:ef:26:0f:72:d7:0d:
                    9b:09:7c:ee:6e:ed:41:c0:28:f1:02:64:80:53:ec:
                    f0:e6:d7:37:3a:51:da:e1:5e:fb:be:e5:cf:11:e4:
                    57:ab:97:bf:cd:fb:54:ee:33:6f:51:e2:bb:c7:5e:
                    75:b8:3e:d5:30:97:1c:05:73:01:36:6e:7b:2c:b5:
                    12:36:19:b5:9c:34:bc:93:e5:dd:70:70:26:79:7b:
                    8e:aa:0c:26:6a:a3:81:f6:d6:fa:58:ab:00:b1:79:
                    27:f7:46:d7:87:83:9f:01:56:f3:cb:8d:5d:8d:d0:
                    09:e7:23:c8:d7:66:3f:fa:c1:ab:37:0b:39:02:3b:
                    43:a3:80:2a:dd:d5:4e:cd:15:71:8b:ab:04:93:de:
                    6c:cf:09:08:67:ee:7d:07:01:01:bd:94:77:99:54:
                    f4:4f:bc:b8:1f:18:7f:0e:b1:8d:cc:49:a3:f6:c1:
                    77:02:16:b9:01:54:f7:ed:09:2b:52:9a:ec:ff:da:
                    d2:56:6d:39:98:39:f9:4a:27:83:82:c8:17:33:b2:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CD:D3:43:8A:C0:AB:19:44:B2:D8:D1:90:3B:B5:5D:A6:5B:F9:6A
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:48:49:c1:9d:22:9a:1a:84:6c:ec:86:04:84:cd:81:0e:31:
         ab:ea:be:cb:f1:fe:99:5e:c7:a9:15:4c:ab:2c:df:6a:19:7e:
         60:82:42:22:6c:55:81:e8:ad:d8:64:c7:b6:f8:46:f5:34:b6:
         65:e3:37:b0:bf:b4:61:d3:c2:60:ed:e1:27:39:cc:4b:f2:e1:
         51:b4:69:6f:2e:ea:a9:09:93:29:63:3a:b6:23:fa:04:a5:28:
         14:04:ad:36:15:fd:89:4d:b9:95:44:e9:50:a5:0b:05:5d:86:
         a4:52:4f:32:4d:e6:85:d0:a1:9b:4b:f4:db:ad:be:5d:5e:74:
         76:00:cb:93:0b:a2:6f:89:b0:1e:0e:b1:e2:e7:28:39:19:9e:
         71:83:14:86:8f:09:7f:7c:7f:65:df:d6:80:1d:02:cd:2f:df:
         dd:df:32:89:53:63:05:1c:7e:53:29:d4:8d:ec:9d:a9:7a:55:
         95:a9:9d:dc:b9:ab:15:48:b9:b7:6b:60:5e:fc:e6:e3:b0:e6:
         69:81:33:f7:af:89:16:6f:89:ce:fe:a3:63:cc:68:5a:58:97:
         38:fc:e4:10:b4:5a:78:bd:d1:ba:50:84:c9:92:d3:10:3c:cf:
         06:93:dd:1a:33:50:ac:43:70:0e:d2:a9:58:60:12:ec:dc:e0:
         14:90:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:25:04 2025 by rpki-client