Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier:          iuLYy/iDePGsOCN/kup9A+q2GIs5u7OhzFd/1Kehasc=
Subject key identifier:   54:ED:3B:46:07:61:36:2D:89:89:7D:C3:92:2F:4D:A4:2A:3E:45:C3
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer:       /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial:       01DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number:          01DA
Signing time:             Tue 16 Sep 2025 04:17:04 +0000
Manifest this update:     Tue 16 Sep 2025 04:17:03 +0000
Manifest next update:     Thu 18 Sep 2025 04:17:03 +0000
Files and hashes:         1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: 9Gq0jHLt7iO03zRpotsfPuKwVk0oKkd2bgv2bFmkMrk=)
                          2: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Validity
            Not Before: Sep 16 04:17:03 2025 GMT
            Not After : Sep 18 04:17:03 2025 GMT
        Subject: CN=68c8e4c0-daff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6d:f7:2d:6a:58:25:79:92:82:07:f9:c9:e4:
                    96:25:3f:ed:f6:08:66:3b:c6:96:25:03:14:28:73:
                    9d:50:b6:88:03:d4:ed:c5:b4:8c:aa:7e:65:d1:77:
                    f0:f4:7c:ef:84:39:cd:43:11:91:c1:7e:59:5f:a0:
                    b6:65:11:60:d3:3f:09:8e:20:52:bf:10:da:f5:88:
                    22:97:66:d0:1f:b9:a3:28:61:2b:c1:79:ee:12:3c:
                    d6:d3:58:e3:6b:19:98:d2:43:f2:1a:e9:15:87:38:
                    c2:61:c2:38:ba:86:cd:6b:dd:fc:6b:67:6c:55:b0:
                    d0:01:49:c3:2e:c8:3b:fb:0b:85:96:d5:9a:a0:53:
                    13:93:68:f9:8c:2b:07:0b:49:d6:14:bd:62:af:aa:
                    4c:81:e8:6c:58:cd:84:84:d2:67:22:8c:c1:38:5d:
                    dc:fc:a9:8c:68:be:34:3c:43:c1:3f:39:18:a7:7f:
                    86:2b:48:9f:ff:23:d9:63:b8:32:45:ee:e5:5d:a5:
                    1a:82:02:13:1a:23:ff:03:a2:eb:8e:2f:0f:56:12:
                    59:a6:c4:ef:59:c4:22:75:66:05:dc:0f:01:3e:bf:
                    19:40:0d:c7:94:ba:a7:38:3c:93:75:ef:f7:39:7c:
                    60:d8:ad:92:df:e7:3e:6d:9b:1a:92:ad:ed:aa:86:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:3B:46:07:61:36:2D:89:89:7D:C3:92:2F:4D:A4:2A:3E:45:C3
            X509v3 Authority Key Identifier:
                keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:6e:cd:51:30:28:d2:65:c9:bd:92:38:52:2e:79:4f:6f:
         72:c9:da:01:96:dc:c6:8d:2e:f9:f6:aa:4b:c9:a4:35:75:79:
         7a:ba:95:8a:67:31:04:a1:38:67:49:5c:58:1c:62:67:e9:59:
         88:73:fe:7c:6f:18:d8:b8:14:8a:c5:13:ff:60:d0:b9:fc:ae:
         1a:68:25:2e:39:f8:79:07:16:59:e7:3c:6b:98:6e:81:7a:7b:
         4e:8f:ed:48:38:18:0f:66:d9:8d:7a:69:31:20:14:26:9b:cc:
         e8:cd:4c:9c:7e:c7:83:c8:52:8b:08:65:e5:d9:6e:ad:57:fe:
         60:2c:aa:cc:ca:39:8d:49:b9:75:9e:71:3a:69:90:da:83:14:
         25:4f:dc:3b:2d:43:17:80:84:41:43:32:d9:1e:8d:79:50:dc:
         9f:80:47:3b:04:da:20:e6:a7:07:7d:ca:5b:f5:f9:ff:4b:1d:
         aa:58:3b:95:66:5c:0c:48:44:81:07:e8:8e:2f:b4:52:a4:09:
         a5:f5:5a:b5:b5:b2:f7:8f:25:88:b7:f3:de:39:cb:06:f2:aa:
         7f:d4:34:bb:02:6d:71:24:b8:2a:cf:99:26:ba:e1:ad:2b:f4:
         00:6a:85:ea:96:77:a4:a8:05:c4:68:1f:07:c2:37:8a:27:67:
         2a:80:db:b5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1OTBBRjExMC8GA1UEBRMoM0RENTc0MTg2NzZCNTZBQjlERTU2RkFBODBDMjc4
ODc5QkQ5NDVDRTAeFw0yNTA5MTYwNDE3MDNaFw0yNTA5MTgwNDE3MDNaMBgxFjAU
BgNVBAMTDTY4YzhlNGMwLWRhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqbfctalgleZKCB/nJ5JYlP+32CGY7xpYlAxQoc51QtogD1O3FtIyqfmXR
d/D0fO+EOc1DEZHBfllfoLZlEWDTPwmOIFK/ENr1iCKXZtAfuaMoYSvBee4SPNbT
WONrGZjSQ/Ia6RWHOMJhwji6hs1r3fxrZ2xVsNABScMuyDv7C4WW1ZqgUxOTaPmM
KwcLSdYUvWKvqkyB6GxYzYSE0mcijME4Xdz8qYxovjQ8Q8E/ORinf4YrSJ//I9lj
uDJF7uVdpRqCAhMaI/8DouuOLw9WElmmxO9ZxCJ1ZgXcDwE+vxlADceUuqc4PJN1
7/c5fGDYrZLf5z5tmxqSre2qhqu/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVO07
RgdhNi2JiX3Dki9NpCo+RcMwHwYDVR0jBBgwFoAUPdV0GGdrVqud5W+qgMJ4h5vZ
Rc4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTkwLzk1QzFBMzhBMjdGODExRUZBNDgxMjYxNjdEREMyNEMyL1BkVjBH
R2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BkVjBHR2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1OTAvOTVDMUEzOEEyN0Y4MTFFRkE0ODEyNjE2N0RE
QzI0QzIvUGRWMEdHZHJWcXVkNVctcWdNSjRoNXZaUmM0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAprW7NUTAo0mXJvZI4Ui55T29yydoB
ltzGjS759qpLyaQ1dXl6upWKZzEEoThnSVxYHGJn6VmIc/58bxjYuBSKxRP/YNC5
/K4aaCUuOfh5BxZZ5zxrmG6BentOj+1IOBgPZtmNemkxIBQmm8zozUycfseDyFKL
CGXl2W6tV/5gLKrMyjmNSbl1nnE6aZDagxQlT9w7LUMXgIRBQzLZHo15UNyfgEc7
BNog5qcHfcpb9fn/Sx2qWDuVZlwMSESBB+iOL7RSpAml9Vq1tbL3jyWIt/PeOcsG
8qp/1DS7Am1xJLgqz5kmuuGtK/QAaoXqlnekqAXEaB8HwjeKJ2cqgNu1
-----END CERTIFICATE-----
Generated at Wed Sep 17 00:54:50 2025 by rpki-client