Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier:          +rKE6PQUL2uEocAM66XYlauMdnV5xgmfhZA8nmd0joE=
Subject key identifier:   FA:A8:B4:8C:F1:67:96:67:C4:DB:FB:11:2F:63:7D:DC:5D:99:97:18
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer:       /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial:       01AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number:          01AB
Signing time:             Thu 31 Jul 2025 04:43:37 +0000
Manifest this update:     Thu 31 Jul 2025 04:43:36 +0000
Manifest next update:     Sat 02 Aug 2025 04:43:36 +0000
Files and hashes:         1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: faCsMx7o1TDMTix+2G1eVyuIOfMd9UxFKKVOt0DE7iI=)
                          2: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Validity
            Not Before: Jul 31 04:43:36 2025 GMT
            Not After : Aug  2 04:43:36 2025 GMT
        Subject: CN=688af479-cc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:2a:d8:56:8f:d8:ad:e8:81:51:a8:fd:89:
                    b8:17:2b:3a:80:1a:38:e9:e7:6f:28:7f:50:f2:91:
                    7f:ad:c5:39:25:40:7a:11:ad:db:f2:95:f3:57:d4:
                    d6:63:8a:c9:4f:64:60:c0:42:14:a1:46:2e:32:82:
                    21:21:ff:e2:9e:54:51:e5:50:f2:0c:9f:65:f1:b4:
                    6a:5e:66:8f:30:77:0a:7e:cc:a3:98:d2:eb:6e:2f:
                    f3:b4:e8:b7:7f:f5:df:60:04:b7:ed:69:62:e0:86:
                    41:24:7c:28:3f:45:28:e3:cd:39:83:47:3f:a7:ff:
                    45:65:51:8b:63:3e:e0:2e:0a:eb:f7:6e:bd:bf:fc:
                    31:1c:c5:a4:7d:e0:3f:8c:03:e0:1f:d6:2c:9b:dd:
                    ee:6c:12:b0:28:28:a6:e5:04:ad:51:67:6e:9f:2c:
                    f1:ca:be:47:8f:5d:93:bd:d6:9c:93:af:b4:1b:4d:
                    e3:db:9b:f2:a6:96:c6:b6:2d:84:50:44:17:89:f3:
                    98:cb:e5:89:16:60:83:fe:6c:1b:b0:7e:19:01:8d:
                    45:17:1c:c8:0c:2e:ed:95:a4:fb:fc:ea:f5:bb:ea:
                    cd:9c:29:cb:84:6a:81:12:b6:b5:33:c9:c2:ec:b1:
                    b1:18:7f:4e:ed:82:40:2e:57:eb:12:89:1c:7f:b0:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A8:B4:8C:F1:67:96:67:C4:DB:FB:11:2F:63:7D:DC:5D:99:97:18
            X509v3 Authority Key Identifier:
                keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:43:f1:3d:c0:26:9e:7c:cc:d3:12:c1:86:25:f2:d9:34:60:
         c5:de:6e:53:68:80:6e:16:c6:32:b3:ce:42:fc:88:26:2f:3a:
         5d:63:8d:53:b0:dd:5d:2d:de:06:b9:25:b6:c2:dc:9d:46:2a:
         ae:de:f0:64:3c:55:f5:1d:6d:ee:f1:9b:e2:ec:a3:4d:46:50:
         7e:31:55:26:18:de:51:a4:9e:fe:89:c4:48:c0:c3:9a:b1:af:
         48:7d:cc:5b:29:9d:5f:5b:0d:cf:cf:e4:b4:7b:a4:ff:7c:a7:
         39:46:1f:7d:5a:c0:21:c2:14:9e:27:e6:59:60:0c:15:29:4b:
         1a:68:9c:0a:52:94:e8:0a:90:1c:fd:96:2b:c3:cd:d0:f6:91:
         fc:7a:05:00:64:70:1d:59:ff:e2:ed:37:6a:73:1d:c8:47:8a:
         f6:6d:db:c2:5e:a5:16:67:ee:80:34:6d:7d:1b:81:27:05:c1:
         61:fd:d4:7e:20:cc:c4:13:34:c5:b2:c0:69:50:e7:a0:e1:6b:
         97:01:db:88:1a:4a:fb:99:80:38:b5:f2:d3:00:b7:3e:96:b5:
         3f:7f:50:4c:78:52:32:4b:9e:e1:0e:d8:8b:62:60:a7:99:3f:
         03:97:03:73:6a:80:ac:ec:68:72:b5:89:e4:51:41:45:d7:c6:
         94:e3:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:23:22 2025 by rpki-client