Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          x0zjv/CZEToPRr3Fbw/K0Dn1OYp/t+yBCKV3ZF6xECc=
Subject key identifier:   53:34:28:58:2F:AA:4A:56:BD:35:A1:CF:98:C9:9D:A3:49:0B:34:8A
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          4F
Signing time:             Wed 17 Sep 2025 05:03:44 +0000
Manifest this update:     Wed 17 Sep 2025 05:03:43 +0000
Manifest next update:     Fri 19 Sep 2025 05:03:43 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: B/iifYzkLbUyPdvsta7MENkuu0HQvDF/IL3vAjSCWVE=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Sep 17 05:03:43 2025 GMT
            Not After : Sep 19 05:03:43 2025 GMT
        Subject: CN=68ca4130-885a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:bf:93:70:45:4d:1b:73:d7:ef:b2:b6:0d:
                    84:dd:33:7e:b3:e1:18:43:54:c7:2e:57:0c:17:71:
                    de:c1:e6:50:95:ba:26:5c:ee:00:e8:07:f9:c3:75:
                    8c:bc:7a:76:d2:f1:06:cb:cd:08:34:8c:1c:af:02:
                    1a:c8:48:67:f1:c1:a7:47:8f:cf:01:49:d9:4b:47:
                    30:f4:66:8a:08:3a:ed:94:5a:19:14:68:ef:6a:65:
                    5c:9d:8b:3e:d9:24:b5:c6:78:59:34:73:31:26:78:
                    f7:7c:87:c6:8a:a0:23:24:e1:da:92:c3:14:d3:32:
                    ae:08:52:e1:67:47:2b:5f:f6:e0:ae:35:32:2a:8c:
                    d3:26:88:4e:ad:49:3a:5b:df:7e:ce:1d:2c:de:50:
                    35:c8:a7:ec:41:56:54:bc:c8:6c:e6:6b:8d:58:37:
                    30:07:e6:40:c4:06:4a:33:e5:be:92:7a:2a:0f:bc:
                    9f:4c:38:38:ee:65:b4:54:c6:ed:f9:16:a7:7a:da:
                    1d:8c:1a:6b:c8:32:8d:8b:1a:a8:ce:95:95:9f:d1:
                    3b:48:f2:f1:44:0b:7b:2d:f5:f9:92:52:e6:56:5e:
                    ff:58:7a:08:a4:69:3f:e0:12:c0:94:e0:43:79:e2:
                    1c:23:cb:b2:8e:8b:ea:3d:51:e9:04:5c:05:4a:66:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:28:58:2F:AA:4A:56:BD:35:A1:CF:98:C9:9D:A3:49:0B:34:8A
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:ef:c8:89:5f:ed:99:68:01:c3:1a:a1:83:1f:88:1c:44:
         7c:d6:f2:e7:ef:11:69:ae:2f:f8:fb:e0:fd:7a:4f:b6:6c:f5:
         1b:e4:ed:51:47:09:4d:2e:8a:fa:d0:e4:5e:3e:e9:92:d5:5d:
         0a:9f:0f:ef:11:70:fd:e6:12:2b:b2:90:da:9b:ee:a7:35:08:
         b7:fb:45:08:d6:8e:a2:c7:41:55:a3:2d:71:f9:42:a0:cc:52:
         75:26:80:6d:53:96:41:f0:15:f3:27:46:7b:00:f9:7c:82:6f:
         b0:92:21:71:44:17:49:ff:31:0b:44:af:d3:db:0b:46:75:f4:
         6e:18:a6:c2:d2:81:04:cd:0b:85:7c:53:ef:0d:9b:ec:d1:66:
         52:5e:9f:c5:fc:9b:a0:28:c8:85:6e:08:65:22:89:53:0e:4a:
         db:cb:7d:82:d7:4e:53:57:09:ca:cf:64:bf:f4:f2:b5:dd:13:
         29:3f:e0:d7:2b:90:35:ef:22:31:15:c7:d3:ac:e5:17:6b:80:
         47:f4:a9:5e:fe:0a:9e:d5:43:f2:4b:a5:5a:c2:fe:2a:48:6e:
         2e:ac:30:d6:9d:3e:34:a9:27:93:4d:e4:41:09:7d:9d:c3:85:
         2b:ee:0a:f5:93:c2:e5:30:de:33:d6:b9:a8:07:fe:1e:ca:f4:
         36:46:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:19:30 2025 by rpki-client