Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft (raw, json)
Hash identifier:          DMFzmf5FtIPUl4W0ITFJZB4Wv0CcTtwSwOZ/6PyBoAk=
Subject key identifier:   1B:2E:7B:8C:B7:E9:B3:7D:8C:70:CD:10:71:CD:54:37:2A:14:8B:47
Authority key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Certificate issuer:       /CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
Certificate serial:       0131
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
Manifest number:          0130
Signing time:             Thu 31 Jul 2025 05:07:03 +0000
Manifest this update:     Thu 31 Jul 2025 05:07:02 +0000
Manifest next update:     Sat 02 Aug 2025 05:07:02 +0000
Files and hashes:         1: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl (hash: /WBLrZp6UaOWNy5G8nntPkonuGivMy5VmZg1MHjHmAQ=)
                          2: 2043601A871311EFAA833C47762E951A.roa (hash: 7V2EXwaz5iXOD12PTDbUdoIOuqdno8tko8fgycVsw+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9AF, serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Validity
            Not Before: Jul 31 05:07:02 2025 GMT
            Not After : Aug  2 05:07:02 2025 GMT
        Subject: CN=688af9f7-5e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:e4:8d:51:57:89:ec:f6:d8:01:8a:c7:37:
                    ea:6b:a1:f7:4f:84:ed:b6:41:da:04:d0:58:04:0f:
                    f0:3e:fe:9c:b6:6d:5e:01:6e:8a:ed:d1:f3:6b:f5:
                    2e:99:ae:b0:4e:e9:ce:87:40:e8:4a:cb:b3:a4:34:
                    b3:ae:e2:41:10:6d:39:48:54:7e:23:6b:f0:8d:65:
                    53:e2:e8:83:a8:c3:fb:58:0e:10:4a:50:22:cd:70:
                    a6:b9:6c:59:dd:e8:3d:98:18:de:d9:80:a8:57:1a:
                    ef:e1:28:e3:06:e2:8a:27:6f:97:a3:da:d8:7b:a9:
                    e0:e4:c8:ce:de:ce:3f:c0:b5:64:2a:94:48:8c:88:
                    0f:da:e9:fc:54:61:18:94:2d:71:c1:9f:b2:a0:4b:
                    3c:e4:ff:e4:a7:37:d1:da:ea:fb:11:88:44:89:8c:
                    4f:04:a3:3e:64:19:40:34:7a:38:27:03:19:23:55:
                    3e:0f:6f:0a:8c:c3:f8:1c:de:43:df:02:d6:d6:46:
                    51:0f:bc:a6:13:40:96:16:c8:28:3d:30:af:04:9f:
                    49:41:bf:ee:a3:32:44:5f:ab:b3:51:c8:37:c2:0f:
                    07:0a:96:d1:63:ed:17:b1:00:66:23:9f:e7:e8:72:
                    51:7b:c8:dc:0c:1e:e1:60:e6:8a:04:2c:32:3e:12:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2E:7B:8C:B7:E9:B3:7D:8C:70:CD:10:71:CD:54:37:2A:14:8B:47
            X509v3 Authority Key Identifier:
                keyid:C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e2:48:5e:28:53:51:f1:8e:8d:ca:db:c5:b3:51:c0:6c:4c:
         dd:42:3a:fc:00:e1:c4:54:76:4b:e0:4b:74:43:7f:56:c2:95:
         b5:37:c5:22:9a:bb:59:53:f2:b9:34:3c:e2:90:b4:42:90:42:
         11:f5:83:91:1f:48:43:16:4e:e4:84:c3:16:74:d4:e9:42:d4:
         6b:f1:c0:c8:c5:41:1d:88:23:7f:33:08:35:d5:28:df:59:3a:
         6b:5c:bd:82:4b:e5:4b:ee:93:d9:d6:72:dc:33:5c:b8:db:3e:
         04:a8:31:ca:bc:39:95:a9:e9:7a:12:96:d0:50:ef:ff:44:30:
         7b:72:0f:15:7b:7d:62:5a:58:55:66:63:33:78:20:83:a9:12:
         1d:d3:3f:bb:92:5a:f7:19:1a:d4:a6:02:08:61:2e:ba:43:61:
         22:e6:d3:b7:dc:81:dd:8e:d9:87:68:57:c9:c5:ad:24:e6:6b:
         73:ef:a6:a9:6e:5e:a1:5b:b5:57:b5:72:98:5e:3d:5d:d9:24:
         7d:d7:14:fa:da:bb:e9:26:c3:1a:62:98:f0:42:c4:97:86:24:
         1f:be:8a:bf:99:67:86:c7:0d:a1:54:37:9b:ea:66:7b:34:10:
         f4:7b:6c:69:bc:b2:eb:50:29:a1:41:f2:ff:38:ac:02:88:97:
         05:0d:3d:14
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzkwQTlBRjExMC8GA1UEBRMoQzc0MjNFRDI3QUZDQzEwRDU5ODI5QTgwQjE3OTcx
NjJCNjQ2RkZERDAeFw0yNTA3MzEwNTA3MDJaFw0yNTA4MDIwNTA3MDJaMBgxFjAU
BgNVBAMTDTY4OGFmOWY3LTVlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRyeSNUVeJ7PbYAYrHN+profdPhO22QdoE0FgED/A+/py2bV4Bbort0fNr
9S6ZrrBO6c6HQOhKy7OkNLOu4kEQbTlIVH4ja/CNZVPi6IOow/tYDhBKUCLNcKa5
bFnd6D2YGN7ZgKhXGu/hKOMG4oonb5ej2th7qeDkyM7ezj/AtWQqlEiMiA/a6fxU
YRiULXHBn7KgSzzk/+SnN9Ha6vsRiESJjE8Eoz5kGUA0ejgnAxkjVT4PbwqMw/gc
3kPfAtbWRlEPvKYTQJYWyCg9MK8En0lBv+6jMkRfq7NRyDfCDwcKltFj7RexAGYj
n+foclF7yNwMHuFg5ooELDI+EnxrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGy57
jLfps32McM0Qcc1UNyoUi0cwHwYDVR0jBBgwFoAUx0I+0nr8wQ1ZgpqAsXlxYrZG
/90wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5MEE5LzMxQTNEREEyODZFMjExRUZCQjNENkM5Njc2MkU5NTFBL3gwSS0w
bnI4d1ExWmdwcUFzWGx4WXJaR185MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3gwSS0wbnI4d1ExWmdwcUFzWGx4WXJaR185MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzkwQTkvMzFBM0REQTI4NkUyMTFFRkJCM0Q2Qzk2NzYy
RTk1MUEveDBJLTBucjh3UTFaZ3BxQXNYbHhZclpHXzkwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBI4kheKFNR8Y6NytvFs1HAbEzdQjr8
AOHEVHZL4Et0Q39WwpW1N8UimrtZU/K5NDzikLRCkEIR9YORH0hDFk7khMMWdNTp
QtRr8cDIxUEdiCN/Mwg11SjfWTprXL2CS+VL7pPZ1nLcM1y42z4EqDHKvDmVqel6
EpbQUO//RDB7cg8Ve31iWlhVZmMzeCCDqRId0z+7klr3GRrUpgIIYS66Q2Ei5tO3
3IHdjtmHaFfJxa0k5mtz76apbl6hW7VXtXKYXj1d2SR91xT62rvpJsMaYpjwQsSX
hiQfvoq/mWeGxw2hVDeb6mZ7NBD0e2xpvLLrUCmhQfL/OKwCiJcFDT0U
-----END CERTIFICATE-----
Generated at Thu Jul 31 10:12:03 2025 by rpki-client