Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
File:                     AIjURX5EJgLXZtupDh_CJL1-i7Y.mft (raw, json)
Hash identifier:          grunbAn3jQOGqlI7GjhVSlOxl0QOH1RuVA1LtUTSaEg=
Subject key identifier:   CA:F8:62:4A:27:79:42:D9:14:A8:6D:DE:65:73:30:71:5E:01:9A:FD
Authority key identifier: 00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6
Certificate issuer:       /CN=F3640D65AF/serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
Certificate serial:       3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
Manifest number:          3C
Signing time:             Wed 17 Sep 2025 05:07:13 +0000
Manifest this update:     Wed 17 Sep 2025 05:07:12 +0000
Manifest next update:     Fri 19 Sep 2025 05:07:12 +0000
Files and hashes:         1: AIjURX5EJgLXZtupDh_CJL1-i7Y.crl (hash: 8O+89NB8I4pwV6HTOY2HAqG21NPm/qHBL8eIui/tauQ=)
                          2: AF736D22669511F0AE6F0B7FDAE4EC9C.roa (hash: z5Q6Me8+hrh2wppVl3E0nnD4XDb7iRxKouJNGG6mdYs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640D65AF, serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
        Validity
            Not Before: Sep 17 05:07:12 2025 GMT
            Not After : Sep 19 05:07:12 2025 GMT
        Subject: CN=68ca4200-6cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:02:9e:2b:bc:61:61:3f:8c:a5:3c:92:3c:
                    cb:26:90:ca:fb:d2:e6:ce:a0:fd:ff:3b:30:60:9a:
                    e2:18:ce:dc:e2:28:bc:65:14:15:b4:f7:6f:15:f6:
                    73:e4:5e:02:14:33:14:d7:65:f8:2c:2f:2b:dc:1b:
                    3d:f6:fb:bc:57:f2:66:a7:70:8c:0a:4c:18:a4:f0:
                    85:2e:af:09:b1:49:80:b5:05:ed:1a:28:ff:0d:6b:
                    ed:cc:08:3d:e7:45:d4:b4:d0:bb:2d:f2:4e:00:cb:
                    0e:8f:03:88:8b:5e:03:a3:25:6f:99:bd:b0:08:57:
                    c6:62:e3:f3:27:b0:8f:5f:b2:c2:46:9a:4b:4f:d3:
                    1b:1d:57:4e:84:a4:cf:2b:6b:c8:6c:d9:44:ea:bc:
                    0c:b4:41:5f:97:f9:98:cd:09:da:9d:c1:e8:70:80:
                    4b:27:d8:ae:d5:3b:c9:02:31:8e:1e:74:c5:a9:f5:
                    3e:b3:be:29:de:f9:23:54:40:01:2a:c0:99:7c:dd:
                    85:f4:a3:5e:5c:8f:d0:0e:f4:06:9b:f4:28:74:d0:
                    a0:f8:db:c2:28:af:e1:23:8e:87:09:57:00:2b:16:
                    4b:e0:29:fb:78:2d:e8:2f:e5:78:51:95:dd:f0:55:
                    82:53:73:c0:ed:90:ab:a7:f9:45:48:0a:7e:36:d3:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:62:4A:27:79:42:D9:14:A8:6D:DE:65:73:30:71:5E:01:9A:FD
            X509v3 Authority Key Identifier:
                keyid:00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:24:85:ba:f3:51:05:a9:76:4d:fc:c9:a5:72:f2:88:e3:88:
         25:41:de:d3:10:d0:6c:07:41:cb:2a:15:82:c4:a3:85:5f:e3:
         e7:93:f6:e1:5e:04:1b:7d:2a:bf:64:8c:11:51:cf:38:49:7d:
         85:20:43:d2:20:90:bb:3b:c7:e1:83:27:0a:69:e1:e4:34:9a:
         cc:8f:b8:b2:9b:6e:f3:45:8f:95:5f:fd:1d:43:96:30:89:a3:
         8e:5c:c1:ad:22:14:eb:f1:dc:da:37:f3:7c:21:ed:97:7e:15:
         24:0d:37:92:58:2b:a3:b4:a4:78:de:8e:4c:2a:cd:ee:b4:05:
         8c:6f:e7:6c:b9:40:91:93:fc:64:64:7b:c2:e8:e7:db:4a:bd:
         9b:90:32:25:80:1d:ad:4a:2c:d2:5c:ad:8a:d7:39:66:ad:66:
         88:ad:da:7f:5d:b6:bc:d6:a0:7d:b6:76:40:7d:22:9c:6d:50:
         fc:1c:65:3a:da:02:48:da:ff:25:09:e5:cd:81:bb:46:e0:c2:
         d8:c1:e2:c1:69:bf:2f:9a:13:a5:96:2b:e2:27:67:0d:4d:9b:
         a4:05:93:8a:1e:6b:c8:2f:77:e9:9c:d9:6f:fc:a7:ea:8b:89:
         6c:1b:0f:cb:71:fa:6f:d3:91:a7:27:b6:68:b4:93:65:0b:83:
         73:54:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:59:00 2025 by rpki-client