Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          EgVCn5XcrwBqH2y+v2K/742yFtJTeLED0LsnR6vl5jI=
Subject key identifier:   3C:98:79:A2:55:59:01:9B:20:5E:46:35:FC:15:BA:86:3E:2C:B3:C3
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       054C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          054A
Signing time:             Tue 09 Sep 2025 02:37:47 +0000
Manifest this update:     Tue 09 Sep 2025 02:37:46 +0000
Manifest next update:     Thu 11 Sep 2025 02:37:46 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: PmG42qcDLZMkacOJOcE9PM3F0ygBCupM1KIJJSqd9+U=)
                          2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
                          3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Sep 2025 00:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: Sep  9 02:37:46 2025 GMT
            Not After : Sep 11 02:37:46 2025 GMT
        Subject: CN=68bf92fb-9ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:89:76:a1:de:e8:2d:50:80:a9:4e:f6:ce:
                    07:31:35:21:52:0f:e5:cd:16:63:59:6e:a5:ee:65:
                    52:3c:0d:79:c9:ab:fe:cd:9e:b6:23:7f:1f:6b:54:
                    fa:9b:59:06:7d:5f:99:0d:58:d9:62:0e:26:b0:13:
                    a0:62:a8:e2:a3:fd:52:b8:1b:1e:eb:a4:dd:41:01:
                    55:8e:e7:ea:d7:cf:e9:ab:2d:f0:e8:6d:1e:43:c0:
                    5d:50:9c:ad:e0:62:11:56:68:23:24:a1:fa:cb:e0:
                    49:d7:b4:16:bf:b1:1a:b7:f2:02:87:4a:01:7c:67:
                    40:2b:f7:0c:2f:2d:fa:21:df:2f:2d:51:4a:3b:96:
                    f3:27:a6:3f:e0:60:99:1c:87:c4:b7:58:c3:9e:09:
                    bb:c4:a3:69:a9:f9:d6:3c:ef:2b:0b:aa:77:fa:1f:
                    ca:55:dd:1a:ed:95:79:f9:8d:5a:bf:2f:2f:f4:65:
                    3a:0f:d8:82:b5:27:c2:0d:bb:d4:ae:5f:6c:54:d5:
                    1e:f9:b2:07:b9:e6:71:45:ae:d7:95:a6:e1:4b:d7:
                    e1:3f:26:f5:27:09:db:96:66:ec:b2:32:67:b6:28:
                    0b:7e:37:6e:b4:1f:9b:8e:4d:2d:03:ad:cc:5b:aa:
                    dd:e6:18:77:42:c2:e1:8d:14:c5:e3:82:c1:5b:16:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:79:A2:55:59:01:9B:20:5E:46:35:FC:15:BA:86:3E:2C:B3:C3
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:35:33:a6:ed:a3:35:5b:9a:1f:26:43:fc:f0:79:7c:47:
         92:fb:70:ff:00:d5:e8:fe:ec:95:d8:ed:d4:8f:04:25:52:a8:
         82:31:a1:ce:de:ce:82:c4:bb:5b:e9:16:05:99:a6:49:24:24:
         52:af:07:a5:dd:74:35:66:25:b1:98:d6:6a:8c:c5:b9:f2:eb:
         fd:d9:2d:36:85:03:34:19:a5:d9:1f:28:a0:55:77:85:ca:e5:
         04:e9:f6:26:c5:af:93:34:9d:c8:76:8c:47:32:e0:21:1c:41:
         56:de:b9:94:5f:87:2c:b2:65:7b:c2:41:59:a6:e7:23:a7:e9:
         7a:da:56:4a:30:cb:49:2a:7e:ba:a6:9f:86:79:1e:08:24:b1:
         13:a2:89:79:40:16:c4:95:ad:1e:b4:c0:ee:d0:c6:f4:ec:f5:
         cc:b9:72:d8:c2:8c:80:99:4b:3b:28:a1:ba:37:cf:83:db:d0:
         4c:c1:23:63:01:09:3a:2c:bd:5b:83:0c:19:4e:00:9a:5b:79:
         90:ee:de:3b:a7:87:a9:08:8a:4a:92:4f:08:2e:db:d9:63:82:
         53:1e:a3:77:9d:1d:5f:77:8a:37:79:d8:56:e0:6a:ac:c3:87:
         61:3c:a7:4b:b7:20:6a:2c:d3:e3:fb:39:3a:42:5f:80:e0:04:
         74:14:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:52:35 2025 by rpki-client