Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          mBXP9m0wL2EBiafrKZECXHO3gGN2O5BZuA8dDIgGJHg=
Subject key identifier:   AB:2E:62:33:55:CD:E2:43:3E:02:48:8B:6F:DA:5D:D7:0C:E6:F0:52
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       01E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          01E8
Signing time:             Wed 17 Sep 2025 04:16:36 +0000
Manifest this update:     Wed 17 Sep 2025 04:16:36 +0000
Manifest next update:     Fri 19 Sep 2025 04:16:36 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: 7Xn8DzktPgYmCq0SMQPEO+2p4ZGGfHiW9Dvhk8dVTlE=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Sep 17 04:16:36 2025 GMT
            Not After : Sep 19 04:16:36 2025 GMT
        Subject: CN=68ca3624-d9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:8a:8c:b9:7d:ad:92:37:2d:a2:27:42:eb:
                    bc:50:ee:1a:37:b4:29:06:74:f9:7d:22:19:f7:81:
                    22:0b:45:1d:c1:43:43:3d:c9:4f:7e:da:5a:2c:c6:
                    c6:19:61:94:03:36:5c:09:f5:ae:36:7b:a0:b1:75:
                    88:f9:88:af:b3:1f:d6:59:a4:f5:71:da:4c:cf:02:
                    71:2b:73:80:35:f5:a5:b1:97:28:4a:a9:87:ee:29:
                    43:e0:5f:06:b7:58:af:2b:54:bc:9e:05:f8:ad:4d:
                    0c:1c:11:d9:d9:6f:6e:95:d2:6e:d7:f1:57:95:1e:
                    ad:18:24:05:57:eb:ba:dc:be:ab:88:7b:2e:b7:54:
                    ac:5c:91:78:f7:a4:a6:8f:e9:1e:73:68:5e:b6:93:
                    e4:51:c5:13:36:ce:18:72:29:17:13:98:63:2b:a3:
                    8a:32:aa:ba:40:c2:a3:02:b4:24:c3:cd:de:4f:dd:
                    51:b2:c0:f3:50:3f:f4:92:68:98:b6:74:5a:28:d0:
                    9a:fa:dc:20:38:68:62:2a:b3:a7:8a:be:b2:a4:d1:
                    d2:a1:e9:45:ba:e4:c6:a0:4c:a2:dd:eb:86:f2:66:
                    88:07:05:3b:07:29:77:55:ca:b7:3e:ea:55:a0:fd:
                    45:e6:4c:0b:28:a3:23:e5:ad:84:06:94:5a:2e:b7:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:62:33:55:CD:E2:43:3E:02:48:8B:6F:DA:5D:D7:0C:E6:F0:52
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:a2:82:8d:54:0e:29:c8:df:8f:12:15:52:a6:02:e8:30:
         50:71:18:83:0f:ee:88:f7:33:aa:74:9a:5d:6a:f1:63:37:30:
         d3:87:5a:5f:82:ed:56:95:6e:a7:5d:cd:f6:58:bc:34:f1:29:
         5d:5e:b4:db:b4:71:1d:73:d1:4f:1b:79:3a:d4:46:5f:2f:60:
         45:eb:01:ba:b7:1e:fb:9b:7b:c6:df:40:2f:4c:74:8a:dd:65:
         00:cd:bc:1f:89:a5:57:bc:d8:52:61:f2:5e:34:60:2a:72:bd:
         18:29:a6:17:5f:0a:a2:fd:09:a7:a0:71:26:04:b4:6e:bf:e3:
         46:49:27:56:7e:1c:70:09:c4:fe:5d:a2:f3:cf:52:ff:d2:74:
         c4:eb:73:29:68:7a:7c:77:93:88:2c:14:77:5d:38:6b:69:74:
         4e:a8:7a:de:c4:d5:aa:1b:c0:18:be:55:5d:28:ec:cf:6a:e9:
         d7:64:d3:21:3c:40:9d:64:a0:38:53:97:44:0e:49:c9:bf:a6:
         d7:89:02:9c:cf:cc:5a:fd:44:18:e9:5e:26:3d:3a:81:21:8d:
         5c:b5:cd:4e:bb:3b:19:21:46:e0:52:7e:e5:82:0a:57:1f:b7:
         78:56:4b:0b:3f:74:cc:2d:cf:a6:17:4c:1e:cf:5d:b0:5f:18:
         6b:fa:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:04:49 2025 by rpki-client