Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File:                     XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier:          Cl5mr/1d6lLvKWCLZg9H0RVwX9BuTrRRrIi5eINOdew=
Subject key identifier:   75:FD:A5:ED:CC:8C:2F:11:48:FB:4D:D1:95:C7:35:A1:F1:E6:33:A5
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer:       /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial:       04C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number:          04C7
Signing time:             Wed 17 Sep 2025 02:49:17 +0000
Manifest this update:     Wed 17 Sep 2025 02:49:16 +0000
Manifest next update:     Fri 19 Sep 2025 02:49:16 +0000
Files and hashes:         1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: pd1jVyycfsARz+f6VNSymPInn0zcPQxZRSaWHdK918Q=)
                          2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
        Validity
            Not Before: Sep 17 02:49:16 2025 GMT
            Not After : Sep 19 02:49:16 2025 GMT
        Subject: CN=68ca21ac-1a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:bd:33:37:47:d9:ff:a9:e5:62:9d:8a:bd:
                    04:bc:f6:f3:c9:2d:88:17:a0:62:85:07:d0:ac:56:
                    55:9e:99:d3:b8:e9:aa:2e:f6:3f:f8:2e:d8:2b:08:
                    9d:97:c6:29:56:9a:f9:b4:41:92:6c:c2:51:de:1c:
                    ad:c3:c1:b3:f0:87:10:44:83:64:97:c2:9f:d2:2e:
                    f9:c4:d8:60:06:7a:4b:15:91:9d:2c:f7:b9:c6:6d:
                    6f:5c:c8:e8:32:93:23:b2:5f:9a:a1:3d:35:9b:af:
                    fc:88:29:6e:ca:48:8e:e9:9a:06:af:ca:02:74:55:
                    7e:07:00:18:58:4e:7e:18:c6:ba:62:62:fa:dd:ed:
                    90:4d:bc:68:b7:28:f3:30:76:2a:3d:59:37:7f:2d:
                    d0:82:39:ab:37:28:c1:79:93:e8:11:57:7a:a5:fa:
                    13:a9:aa:33:03:78:b4:5e:49:02:c2:28:c0:b4:0f:
                    fb:06:db:2a:57:c2:ee:3f:32:6f:84:64:55:0b:34:
                    97:e1:5c:21:61:41:01:d2:68:49:90:17:cf:ae:b8:
                    aa:4a:fd:38:05:01:91:30:37:8c:a8:11:52:3b:64:
                    77:44:cb:a4:02:c9:ba:b8:32:f3:20:8e:37:94:db:
                    8c:d6:5a:c1:68:53:61:5e:a4:23:d9:c7:74:07:0a:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:A5:ED:CC:8C:2F:11:48:FB:4D:D1:95:C7:35:A1:F1:E6:33:A5
            X509v3 Authority Key Identifier:
                keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:20:35:9a:1f:2f:c2:d0:08:fe:34:db:d2:3c:c6:eb:27:d1:
         ac:fe:17:0f:02:92:4d:2e:c1:7b:7f:e6:51:f0:5c:22:20:35:
         fd:72:41:06:5c:8a:34:5c:a4:50:0d:8a:72:81:aa:05:73:80:
         7b:89:23:48:4c:93:8e:07:b2:81:03:8f:f1:91:43:5c:aa:5c:
         0f:f2:1f:a1:01:dc:e8:73:19:0a:e8:14:9f:3c:0b:7b:09:1f:
         c4:ae:18:c0:a0:00:c2:38:51:a7:18:bf:98:c0:ea:40:9e:84:
         24:d0:d1:4b:44:7c:4a:e4:5c:94:44:b1:58:d4:7a:b1:84:78:
         9f:86:9c:44:29:73:27:d4:db:6f:44:59:90:46:0e:fa:21:86:
         0d:ba:58:be:ab:01:a5:bd:48:96:f4:65:58:3b:c3:be:a5:bb:
         57:e8:f4:c0:82:66:96:55:55:b3:ef:ef:3b:cb:46:41:1b:d3:
         f0:d4:9b:ea:91:99:e1:e7:b2:5c:50:00:d7:0a:5a:98:4e:2d:
         6f:b0:c0:e2:01:38:7f:22:e9:b8:02:66:72:19:be:37:6b:70:
         be:ea:65:39:a3:7a:15:bb:44:b8:0a:e6:ec:66:b8:6d:d9:2a:
         35:19:04:32:08:ab:90:0f:9d:ce:54:23:52:d2:61:a4:87:22:
         7e:55:20:fc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUJBRjExMC8GA1UEBRMoNUQ1QzJBOTZCMkUzNzJCMEFDNDdGNDhEQkRDN0Q3
RkQxRkJEQjEzMjAeFw0yNTA5MTcwMjQ5MTZaFw0yNTA5MTkwMjQ5MTZaMBgxFjAU
BgNVBAMTDTY4Y2EyMWFjLTFhMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAVL0zN0fZ/6nlYp2KvQS89vPJLYgXoGKFB9CsVlWemdO46aou9j/4Ltgr
CJ2XxilWmvm0QZJswlHeHK3DwbPwhxBEg2SXwp/SLvnE2GAGeksVkZ0s97nGbW9c
yOgykyOyX5qhPTWbr/yIKW7KSI7pmgavygJ0VX4HABhYTn4YxrpiYvrd7ZBNvGi3
KPMwdio9WTd/LdCCOas3KMF5k+gRV3ql+hOpqjMDeLReSQLCKMC0D/sG2ypXwu4/
Mm+EZFULNJfhXCFhQQHSaEmQF8+uuKpK/TgFAZEwN4yoEVI7ZHdEy6QCybq4MvMg
jjeU24zWWsFoU2FepCPZx3QHCnalAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdf2l
7cyMLxFI+03Rlcc1ofHmM6UwHwYDVR0jBBgwFoAUXVwqlrLjcrCsR/SNvcfX/R+9
sTIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFCL0I1MTFGN0U0RjI0OTExRUNBMjc5MTE5MkYxMjIyNDY4L1hWd3Fs
ckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hWd3FsckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUIvQjUxMUY3RTRGMjQ5MTFFQ0EyNzkxMTkyRjEy
MjI0NjgvWFZ3cWxyTGpjckNzUl9TTnZjZlhfUi05c1RJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAIDWaHy/C0Aj+NNvSPMbrJ9Gs/hcP
ApJNLsF7f+ZR8FwiIDX9ckEGXIo0XKRQDYpygaoFc4B7iSNITJOOB7KBA4/xkUNc
qlwP8h+hAdzocxkK6BSfPAt7CR/ErhjAoADCOFGnGL+YwOpAnoQk0NFLRHxK5FyU
RLFY1HqxhHifhpxEKXMn1NtvRFmQRg76IYYNuli+qwGlvUiW9GVYO8O+pbtX6PTA
gmaWVVWz7+87y0ZBG9Pw1JvqkZnh57JcUADXClqYTi1vsMDiATh/Ium4AmZyGb43
a3C+6mU5o3oVu0S4CubsZrht2So1GQQyCKuQD53OVCNS0mGkhyJ+VSD8
-----END CERTIFICATE-----
Generated at Thu Sep 18 00:46:54 2025 by rpki-client