Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
File:                     agXQ7beSVTGJRs3ZHy36Wnh__xM.mft (raw, json)
Hash identifier:          XZ5az4eFcfvyFu+Wqvadh8soP0WRFytrGQft2W696tQ=
Subject key identifier:   91:04:24:4C:07:D4:04:CB:C4:ED:C4:88:65:E7:22:1A:36:8F:C0:EC
Authority key identifier: 6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13
Certificate issuer:       /CN=F3658AF9AF/serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
Manifest number:          25
Signing time:             Wed 17 Sep 2025 05:11:12 +0000
Manifest this update:     Wed 17 Sep 2025 05:11:11 +0000
Manifest next update:     Fri 19 Sep 2025 05:11:11 +0000
Files and hashes:         1: agXQ7beSVTGJRs3ZHy36Wnh__xM.crl (hash: ys6MS35DbJSlrFXcm8HdOghWJT/cJftzbpTjyHalmY0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AF, serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
        Validity
            Not Before: Sep 17 05:11:11 2025 GMT
            Not After : Sep 19 05:11:11 2025 GMT
        Subject: CN=68ca42f0-196c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:9f:9c:4b:d2:4b:1f:51:c4:54:c6:e9:3d:
                    f7:d3:e8:0a:d4:b3:e1:d0:ea:46:52:f7:93:66:02:
                    64:37:bb:e2:a5:7e:83:d2:63:83:d1:65:e5:e1:32:
                    16:d6:23:d6:87:86:b0:e3:17:de:fe:45:17:d0:e8:
                    e6:49:e8:e2:60:78:e0:fa:eb:fc:f0:0c:ee:5a:bc:
                    c3:8a:8b:4e:b1:99:02:ed:f1:be:8b:b5:1c:f6:c9:
                    dc:6b:65:50:d8:66:a2:fa:6b:21:2f:40:c4:c7:88:
                    76:cd:c0:97:c2:50:47:af:7f:ab:ab:a5:2c:7a:8f:
                    57:30:8a:4f:d7:e2:15:d3:eb:66:00:ee:d7:c6:41:
                    1c:38:d5:db:9f:43:49:d2:31:40:e7:94:71:2c:48:
                    13:ff:54:51:ba:b8:8f:8f:1f:68:ac:ea:8f:6a:1f:
                    e7:f8:f5:2c:7f:72:83:ce:2e:07:f2:10:3c:9f:f2:
                    97:e8:20:75:4c:40:08:6a:f4:b2:80:9e:c2:70:33:
                    75:34:a1:a0:e5:da:af:5c:46:8f:4c:00:70:c3:c5:
                    48:46:89:df:8d:15:ad:a6:45:03:cf:46:80:a0:b3:
                    6d:12:3a:8e:b1:96:e7:4c:da:05:96:21:58:ae:11:
                    d4:60:87:ae:88:f2:ba:49:eb:56:26:69:8b:c0:bf:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:04:24:4C:07:D4:04:CB:C4:ED:C4:88:65:E7:22:1A:36:8F:C0:EC
            X509v3 Authority Key Identifier:
                keyid:6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:75:96:52:fa:31:10:5c:72:5d:81:d5:af:c9:98:62:51:3e:
         c7:b4:35:76:6d:6f:5e:92:ca:c0:fd:70:63:6d:33:83:4b:d2:
         ce:c5:0b:ec:ad:2e:26:da:60:7f:d6:f8:68:63:c4:b3:7c:43:
         45:4b:85:5f:4d:4e:10:ae:8f:a2:7e:d1:f7:67:23:d7:ba:1c:
         71:2f:d4:f6:54:6a:3a:4f:d7:a2:70:06:87:cc:9b:79:53:86:
         fe:6e:e7:47:4b:27:71:bc:16:92:e3:bf:a4:99:45:c3:0e:79:
         b7:3c:7b:2c:4c:4f:ec:b3:cd:e8:e3:5f:b7:c7:8d:0b:92:e0:
         4c:89:66:4e:5f:ce:6f:c4:67:77:18:03:84:fc:29:87:e8:aa:
         05:a0:1e:4a:ed:f2:c4:6a:ab:30:e4:83:10:48:6a:51:cd:67:
         3c:2d:28:e3:85:31:d9:d1:2d:57:3f:95:01:d0:60:cf:bb:69:
         2c:a8:c9:7f:f8:c0:31:d5:b1:4a:77:f0:59:ec:cc:cb:09:30:
         48:ea:17:5d:67:88:6b:fb:ab:c7:d5:12:4c:37:0c:71:c2:d1:
         3f:66:19:c0:76:e0:55:cc:0c:e0:bf:81:e4:a0:31:ce:4d:1b:
         97:1e:f8:ec:0c:c5:a6:78:66:76:af:ff:3b:36:1e:fe:4e:6b:
         41:59:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:47:04 2025 by rpki-client