Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
File:                     hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json)
Hash identifier:          BZewYFvR+F7IS1l5V+fCMP6GI0wZr1kjqZcBmzOznb8=
Subject key identifier:   56:59:71:E1:6E:CB:10:8E:A0:84:A2:42:3A:58:98:44:81:BE:0C:A5
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Certificate issuer:       /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial:       0EB9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
Manifest number:          0EA7
Signing time:             Wed 17 Sep 2025 00:56:12 +0000
Manifest this update:     Wed 17 Sep 2025 00:56:11 +0000
Manifest next update:     Fri 19 Sep 2025 00:56:11 +0000
Files and hashes:         1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: P2DTcC113hSy1VpVHLf+tnwSb0VfjRtSTQ2HjQMMz0A=)
                          2: 655F290413AE11F09DCA6CAC762E951A.roa (hash: MtTA05if95p/mNtRLM4nlSrYgGLQ7Pky8WnDGWJT8Mc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 00:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3769 (0xeb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
        Validity
            Not Before: Sep 17 00:56:11 2025 GMT
            Not After : Sep 19 00:56:11 2025 GMT
        Subject: CN=68ca072c-e016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:fb:3a:66:90:98:9f:a0:a9:17:b2:ad:4f:
                    48:91:a7:58:7a:6d:4d:a1:7d:92:89:59:c0:cf:70:
                    73:98:7f:7c:7b:62:fe:9c:2f:b3:48:ab:4e:01:81:
                    95:1a:81:b6:15:cb:df:95:00:7d:0a:d0:73:3e:2f:
                    f1:02:fe:9b:08:5d:29:f0:55:33:0c:b3:e1:20:ca:
                    c1:29:d1:3e:42:95:f1:e7:bf:d0:80:17:35:93:18:
                    2c:f2:11:86:b3:be:58:7d:0a:cf:c1:ce:09:18:d1:
                    b2:90:15:49:fe:7c:a3:b5:ba:d6:fe:01:fd:e4:46:
                    65:7e:ee:1a:32:b8:a3:65:ac:e0:43:c8:ea:b4:ef:
                    ec:19:ff:03:7b:fe:df:a5:5e:f2:20:d4:ac:a6:30:
                    78:5b:7e:50:27:30:86:63:3d:db:73:89:a5:b1:10:
                    f2:d5:3f:dc:de:ad:0d:29:d9:cb:4e:93:4c:13:01:
                    12:2a:7e:77:78:2e:d0:0b:1d:e4:b3:ac:e3:24:66:
                    04:ea:98:df:18:01:4f:5f:b5:7c:2a:7e:ec:56:78:
                    04:59:1d:ed:ba:24:8d:14:36:59:b3:8d:c2:a4:16:
                    9a:c0:ff:64:c7:6a:7e:22:d4:c0:7b:9a:8a:67:b3:
                    2c:21:31:4b:f4:09:18:79:99:3b:9a:9a:17:1a:24:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:71:E1:6E:CB:10:8E:A0:84:A2:42:3A:58:98:44:81:BE:0C:A5
            X509v3 Authority Key Identifier:
                keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3b:e9:5b:a0:82:f2:9c:93:65:f9:7e:97:52:23:87:dc:6e:
         04:6d:12:d5:5a:5b:e4:41:d8:4b:47:b6:8d:f5:e8:ad:e2:41:
         ec:e0:0d:68:8f:53:af:33:ab:87:fe:02:56:90:51:05:37:36:
         c1:bd:07:e1:73:69:c9:65:d2:e1:9f:43:48:e7:ff:3b:89:b0:
         c2:71:76:98:01:b5:e4:52:3c:8d:78:e0:de:1b:c8:43:70:18:
         02:3a:51:8c:9e:5b:de:41:fe:c3:34:27:8d:7f:46:7a:d1:5f:
         57:0b:57:ef:71:e5:8c:62:2d:b6:1f:7b:f2:fd:32:e4:de:cc:
         51:90:98:7e:5b:7e:7d:57:97:a6:dc:65:ba:f9:16:c2:e4:15:
         64:0e:41:92:ca:4f:20:5b:4c:ae:6b:5e:a8:38:8b:c2:78:55:
         45:41:a3:79:a5:80:1e:22:9f:58:eb:f3:9f:46:a5:e7:b8:b0:
         df:0b:c3:23:0c:fa:64:36:0e:6f:88:9e:26:66:43:d3:57:04:
         8d:2b:03:8e:69:7f:36:6a:db:d2:f0:ae:32:14:4e:09:00:a5:
         11:7c:2d:60:9f:5f:c3:57:c4:55:04:e0:e7:80:d5:6f:b1:53:
         96:64:f3:5d:5c:0b:df:57:7e:24:a0:2e:c5:39:61:0d:7c:9f:
         12:12:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:03:38 2025 by rpki-client