Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
File:                     3EJIwHspjM1rOedr4TDL0ntsigU.mft (raw, json)
Hash identifier:          PwwxJ/MN0JouHyQOQq3Ltu/vFtgP1ZriN4BiBeEhTcQ=
Subject key identifier:   8C:69:FF:F8:9E:D3:3C:28:34:ED:D7:63:F8:C2:AE:76:F3:D8:5B:18
Authority key identifier: DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Certificate issuer:       /CN=F3629595AF/serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
Certificate serial:       0313
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
Manifest number:          0311
Signing time:             Thu 18 Sep 2025 03:41:29 +0000
Manifest this update:     Thu 18 Sep 2025 03:41:28 +0000
Manifest next update:     Sat 20 Sep 2025 03:41:28 +0000
Files and hashes:         1: 3EJIwHspjM1rOedr4TDL0ntsigU.crl (hash: kt/YSCAuTR8/WC4pmZZVRax55Y3uB0F+kLcPCZl/dLo=)
                          2: 054094BC3FF811EE81E5E73E4AD9E6FC.roa (hash: CjcOFUpPISl7bBWR1ojvxALzjkJgMeu4M9y6B2QpvRg=)
                          3: BE084E483D0C11EEA697D1784AD9E6FC.roa (hash: d3pcG470SIIHRtD4u5KMhKjkrzBNkxu/J9n0pkCnKfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629595AF, serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
        Validity
            Not Before: Sep 18 03:41:28 2025 GMT
            Not After : Sep 20 03:41:28 2025 GMT
        Subject: CN=68cb7f69-b02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:1a:4f:82:83:9f:ec:32:75:04:ba:dd:36:
                    05:48:f5:dc:30:b1:29:1a:c8:67:35:f8:55:33:bf:
                    d6:0f:16:9d:73:4e:96:30:40:39:c4:da:cf:44:82:
                    7a:b3:af:81:02:3c:a9:0c:ef:88:8c:5c:ae:85:ea:
                    2d:74:f1:23:04:f7:64:2d:eb:36:ca:b8:d2:ab:40:
                    70:49:c4:8c:98:7c:0f:04:62:84:69:8a:2e:fc:0f:
                    ae:a4:33:7c:33:24:f7:75:4c:12:c7:37:a1:f9:64:
                    ca:32:2b:6f:03:f1:9c:d2:72:40:05:88:63:44:c8:
                    58:1d:de:4e:c2:e4:75:82:7b:14:d1:8c:2f:c8:fc:
                    35:5a:d4:59:5a:e8:55:51:23:b6:94:e2:d3:34:4a:
                    11:e1:7d:b8:bd:25:1f:1b:82:67:8b:54:79:62:8c:
                    3c:57:bb:ad:f4:0a:3c:1f:f5:a1:1c:e0:71:88:2c:
                    3a:80:fc:6e:7b:2d:38:f4:ed:6c:ab:a2:ed:ae:67:
                    49:87:7d:db:7c:90:35:7b:a1:e9:cd:41:49:55:35:
                    44:3f:ec:3e:8b:b0:e3:da:f7:63:43:fc:4f:95:4c:
                    b5:65:80:07:52:2d:42:da:77:27:07:19:bf:bd:da:
                    11:45:d6:a8:f7:c3:44:c3:8b:e2:d0:fc:b9:28:55:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:69:FF:F8:9E:D3:3C:28:34:ED:D7:63:F8:C2:AE:76:F3:D8:5B:18
            X509v3 Authority Key Identifier:
                keyid:DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:e2:2d:57:42:61:7b:10:0b:1c:3c:26:5a:02:a7:e7:71:
         aa:05:ad:09:5d:3d:3c:73:11:0d:a6:ef:90:3c:44:3b:eb:6c:
         b4:9d:18:a9:1e:ff:88:c6:97:89:f2:15:f9:6d:fc:cb:27:a9:
         7d:e0:06:88:14:17:8b:b8:0f:3b:e4:5d:ee:ea:e1:8f:cb:3c:
         7f:f7:65:3c:4f:51:63:94:3a:ea:68:0e:17:61:7a:d3:4e:f7:
         35:bd:65:9a:b2:57:dd:ae:c8:2a:b3:81:79:1f:6c:44:00:ac:
         e5:91:24:44:5a:49:96:5f:b4:22:78:22:d2:58:05:37:26:61:
         d3:36:a5:cc:06:64:d6:5f:87:6b:be:8b:f5:f9:26:8e:4f:f1:
         44:08:fc:16:26:c3:d2:3e:c8:f6:7e:4f:9a:02:07:88:ea:8d:
         0f:05:d5:7c:f7:64:25:9d:50:b0:47:50:cb:a8:82:b4:c4:fb:
         b5:29:b9:09:69:7f:b8:3c:77:dc:e0:f2:ae:15:a5:7c:e0:0a:
         d5:77:ba:e6:d7:4e:dd:01:d0:38:96:45:5c:02:21:d6:7c:4d:
         55:04:b1:16:6f:cb:e3:97:bd:35:29:a0:e3:a9:e9:3a:77:48:
         05:e4:e2:6d:23:13:e8:17:f3:b1:d6:9c:b8:b6:3f:27:41:90:
         d4:e7:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:02:14 2025 by rpki-client