Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
File:                     4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft (raw, json)
Hash identifier:          IdaGGTgrCKbqsG57BG84ZSIMvIuiATBYInl9X274y1g=
Subject key identifier:   5D:79:4D:33:AE:39:7E:22:00:56:87:48:9E:4B:63:79:F5:6D:3C:A6
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Certificate issuer:       /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial:       0488
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
Manifest number:          0486
Signing time:             Sun 27 Jul 2025 03:03:33 +0000
Manifest this update:     Sun 27 Jul 2025 03:03:32 +0000
Manifest next update:     Tue 29 Jul 2025 03:03:32 +0000
Files and hashes:         1: 4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl (hash: TXyk5TixQXnupqmTywX/PkJ4Z47XtPtdUKzXNhL1Q38=)
                          2: 48A838F4F93111ECBE9EE388F1222468.roa (hash: NPEImA7F+Ur3FNr9HiE/AvEd4Yk5gaf4dPIpJJguxBQ=)
                          3: 1E0988AAF93111EC9FC04E88F1222468.roa (hash: 4J9tcGaipzQ9a1uydbIpmJsazATcy1aXE6+2hgX8+4c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639454AF, serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
        Validity
            Not Before: Jul 27 03:03:32 2025 GMT
            Not After : Jul 29 03:03:32 2025 GMT
        Subject: CN=68859705-5e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:2b:55:e2:ac:9c:f8:b1:eb:8c:81:e8:a4:
                    45:1e:02:c1:b5:59:1e:6e:51:98:a4:33:0a:d1:90:
                    1a:30:57:26:0e:90:d9:c5:03:10:e5:05:0d:c4:7d:
                    f5:a6:4a:67:e9:23:3a:8d:40:f9:a5:a9:24:7d:36:
                    b1:b4:05:cd:73:6b:e4:94:68:0c:76:de:4c:b2:5b:
                    17:95:fc:c9:f0:d2:61:b9:4e:76:95:28:cf:27:18:
                    ce:1a:db:91:96:b6:99:a7:7e:e0:5c:cf:37:dc:4e:
                    31:8f:cd:9f:8b:52:c2:5f:b7:42:f4:6b:85:5f:4b:
                    8e:5f:1b:ef:7c:3f:33:3d:09:ca:d2:8c:c8:9c:ac:
                    7f:f3:36:13:7c:fa:79:27:9c:10:a9:65:80:33:6b:
                    89:ea:1f:f3:ff:21:66:e9:a5:3f:a2:31:fa:fb:f7:
                    69:25:6e:c5:b3:87:57:be:26:aa:5c:f2:92:43:42:
                    b7:1c:b7:d4:59:dd:a3:33:d3:0b:2b:c3:4c:5c:9b:
                    c7:2a:67:8b:22:e6:9a:59:c7:56:9a:4b:4b:3e:35:
                    6a:c4:3e:af:32:59:f6:1b:b0:ab:de:74:bc:c3:d9:
                    59:70:5b:93:38:98:dc:eb:2d:a7:c7:d2:9b:c1:38:
                    3e:bf:55:04:c0:16:a7:42:7a:f5:b6:cc:d5:d8:06:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:79:4D:33:AE:39:7E:22:00:56:87:48:9E:4B:63:79:F5:6D:3C:A6
            X509v3 Authority Key Identifier:
                keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:49:26:ce:ed:09:56:c1:f5:b1:ab:5e:6a:52:6d:6e:47:8d:
         e3:f5:7a:fa:af:7d:23:a9:81:42:0d:22:83:e7:14:60:fd:18:
         5a:27:d7:78:c8:7a:8f:19:17:c4:e9:b9:53:42:f1:92:bc:29:
         24:6c:b3:d3:8d:59:9e:32:3e:8f:c6:49:c8:c6:0f:08:b0:cd:
         90:25:c4:89:c6:8a:20:ad:95:20:02:4d:db:f8:00:63:36:31:
         ba:73:2e:5d:87:a2:09:a3:05:52:d6:e4:f6:a6:60:e0:f5:b4:
         cc:44:8a:96:bd:b6:2b:d5:0e:3a:53:27:9f:d5:f1:0e:0a:39:
         e8:da:bf:9a:93:64:10:10:30:13:ef:7d:38:cf:36:e9:3c:fd:
         c7:e8:f9:50:5b:5d:98:93:05:0a:b3:90:cc:fc:e0:f6:67:d4:
         2a:2e:6d:c0:5d:06:82:0d:1c:1a:18:54:52:70:b7:92:36:5e:
         78:cb:5d:ee:18:93:8f:99:8c:d1:85:6c:8e:6a:ce:e5:87:d4:
         ab:dd:16:c1:87:21:93:88:82:26:91:e8:44:3f:f1:7b:ed:70:
         2e:e6:20:7e:e1:34:a8:60:a7:a5:6e:f0:92:ea:4c:67:80:fc:
         fb:13:e6:c6:dd:99:03:d9:e8:b5:8f:3e:10:69:07:ad:37:5b:
         41:4b:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:57:39 2025 by rpki-client