Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
File:                     RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft (raw, json)
Hash identifier:          /nFso32/bMTu+LFdGXvyTQYFQBd9gnYwbWpkhEsbd3o=
Subject key identifier:   90:12:9D:FE:FA:A8:DC:2E:54:A4:57:6B:EB:D9:E2:CF:71:66:43:FA
Authority key identifier: 44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
Certificate issuer:       /CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Certificate serial:       08E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
Manifest number:          08E4
Signing time:             Wed 17 Sep 2025 01:33:59 +0000
Manifest this update:     Wed 17 Sep 2025 01:33:58 +0000
Manifest next update:     Fri 19 Sep 2025 01:33:58 +0000
Files and hashes:         1: RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl (hash: SVKr5c0E3d4SxGW0dlsmBXr2yxz1Go13ji+xmU64bD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 01:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279 (0x8e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC54AF, serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
        Validity
            Not Before: Sep 17 01:33:58 2025 GMT
            Not After : Sep 19 01:33:58 2025 GMT
        Subject: CN=68ca1007-d85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:73:43:c5:aa:d5:98:e2:9f:ce:4e:1a:98:
                    9b:df:62:8b:0e:e1:b6:dd:1a:39:c1:3e:85:cb:64:
                    cd:c9:83:57:22:53:1d:64:75:72:bc:d4:23:5b:ee:
                    c6:cb:bf:1a:dc:60:06:b4:f7:4d:5a:2f:07:df:00:
                    ed:cb:ef:e2:b2:38:5e:8d:29:26:f3:1e:ac:b0:7a:
                    c1:e3:61:f8:ae:35:c2:60:db:48:c0:d6:59:91:a9:
                    da:ae:5f:da:c0:bf:93:47:08:b4:4f:c7:80:0f:a1:
                    b3:c9:65:4e:2a:5a:30:8e:2e:68:46:11:db:bf:31:
                    3d:9d:9a:ba:55:ae:cb:29:8d:fb:62:9f:36:53:8d:
                    e8:58:57:2d:52:c7:7b:38:2c:59:87:a0:c0:ac:c1:
                    fa:55:2e:3b:87:e9:f4:17:82:60:95:0f:0e:97:0e:
                    73:cb:c2:72:5d:89:7b:c7:5c:42:e9:8c:76:e0:ed:
                    0f:70:ed:05:e2:f4:11:73:4c:05:3e:e4:e3:27:26:
                    3e:8e:e3:6e:d0:69:67:72:00:da:40:90:23:e6:7f:
                    e9:8a:5f:da:09:cc:f5:01:03:82:b3:7a:e3:93:61:
                    89:be:0f:10:c2:96:e6:63:08:bd:ba:24:8c:84:3a:
                    ce:cb:46:05:09:64:27:59:d3:27:b8:63:96:2c:fc:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:12:9D:FE:FA:A8:DC:2E:54:A4:57:6B:EB:D9:E2:CF:71:66:43:FA
            X509v3 Authority Key Identifier:
                keyid:44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:92:d2:7c:ab:0e:f7:9c:31:4b:c3:aa:03:de:8d:fc:1d:c5:
         1c:45:67:d9:dc:9e:1e:5d:3f:dc:a4:a7:c5:4e:28:69:f8:20:
         d9:f8:47:97:d5:0f:24:44:ca:27:94:1e:54:55:09:d7:7f:bb:
         93:be:ec:8c:95:9c:20:3d:51:79:c9:72:7f:25:4b:c4:30:b5:
         00:4e:d2:a1:a4:2c:84:03:15:3d:1b:88:7e:32:ce:ce:31:b3:
         1d:58:ed:a7:b4:57:c4:d4:e7:0f:c1:40:db:ef:0c:2d:e1:f6:
         79:39:13:6a:84:74:3c:91:e2:ef:f0:3c:81:1e:42:bf:18:68:
         da:00:08:86:89:00:ac:8b:18:58:43:7e:94:ae:2a:0d:46:31:
         9d:32:07:11:4c:b3:bf:47:c0:a1:be:92:a6:2d:d3:e4:c7:06:
         35:7d:5e:01:82:fd:ec:f1:d9:c5:10:70:b3:74:57:0c:c8:3f:
         b4:95:37:15:ca:24:ba:c5:e7:2d:45:e1:bb:6e:5b:e0:2f:16:
         b5:21:e0:23:40:b0:e8:02:5e:fd:e9:7b:ff:01:86:cd:42:3b:
         76:51:7e:07:2d:30:20:35:22:e0:65:ab:29:a6:0a:f1:c0:04:
         d2:1e:dc:5c:a1:e2:bc:f0:1d:49:55:20:4e:f0:57:97:7d:95:
         0e:fb:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:07:53 2025 by rpki-client