Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          nnZbrn1fakqZjjkEmmSYloVOcYpHEFF3Hi6Jfq51+/o=
Subject key identifier:   27:F6:F9:05:FD:0E:46:E1:64:D2:63:A0:D9:32:30:8A:57:96:1E:25
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       03CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          03C7
Signing time:             Sun 27 Jul 2025 03:23:34 +0000
Manifest this update:     Sun 27 Jul 2025 03:23:34 +0000
Manifest next update:     Tue 29 Jul 2025 03:23:33 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: MiiHsRXCqoauUf4ELfvidpAey1xE5zelzSue3TEcCXI=)
                          2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
                          3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Jul 27 03:23:34 2025 GMT
            Not After : Jul 29 03:23:33 2025 GMT
        Subject: CN=68859bb6-a137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:d5:85:01:87:87:0d:6c:fc:79:44:6f:9f:
                    74:77:39:95:2e:3b:a6:bb:78:e8:72:a5:b7:b5:e0:
                    95:db:1c:1b:62:b2:6c:0e:a2:1b:95:ea:e0:90:37:
                    df:00:da:e6:e2:c8:dd:d6:cf:ad:b9:3f:0f:07:e5:
                    15:61:8d:77:49:e1:fa:b9:43:0a:4e:16:72:76:d7:
                    ea:d0:a4:ac:c8:53:d8:13:05:b5:5c:29:32:58:3b:
                    79:51:50:32:11:01:b3:88:54:df:e5:c6:b1:50:0e:
                    0a:9c:66:7c:2a:6f:36:41:36:62:4c:c0:b9:39:1f:
                    67:22:8e:68:d3:c0:d9:33:72:1b:fa:fc:ca:0c:b2:
                    52:82:98:59:3c:ff:2a:32:e7:07:0f:b9:4d:17:0e:
                    a6:a5:e3:77:ee:7b:6c:c1:85:31:b3:9a:f5:0e:52:
                    36:9b:68:e6:f3:a9:a3:26:06:38:fa:1a:65:a5:da:
                    70:73:75:87:84:31:82:bd:de:2d:16:43:c5:77:59:
                    e4:2b:76:2b:8a:65:87:72:0b:da:a0:87:00:f6:74:
                    88:65:91:3b:17:ec:d8:e1:67:fc:ff:24:9b:90:46:
                    db:30:cb:e4:c5:76:1a:71:40:f1:18:4f:b7:ba:d4:
                    ab:90:08:4d:89:17:dc:93:08:da:e2:21:cc:e9:1d:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F6:F9:05:FD:0E:46:E1:64:D2:63:A0:D9:32:30:8A:57:96:1E:25
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:c2:35:e7:7b:2b:90:48:74:7e:d8:18:8a:56:28:83:51:
         17:45:00:e8:02:6e:a8:a8:2b:bc:9e:6e:98:56:2d:8a:b4:4d:
         43:67:65:05:db:57:49:99:4b:dd:d1:83:7a:8c:63:49:39:4b:
         0f:c1:08:46:d5:2f:24:e7:d0:3f:69:32:aa:07:9a:c8:0e:bc:
         1a:2b:45:42:a6:71:c6:7b:38:be:19:99:65:a2:61:e6:18:25:
         4b:b0:4c:73:71:a9:0c:24:7e:46:d0:7b:aa:2b:28:8e:bd:17:
         cc:ad:17:c6:7f:c4:0a:9b:a3:40:e9:c3:ee:0f:fa:39:0a:41:
         69:25:93:ac:3a:b9:de:fb:ed:1d:cc:bf:c8:17:28:2e:0e:17:
         15:49:4f:b7:a6:d3:88:c5:52:88:9e:70:ab:d1:a7:29:64:e0:
         86:7b:49:2f:f0:6d:25:1c:94:c4:83:e4:a6:51:5b:ee:2e:e9:
         0b:8c:99:33:35:d9:39:27:2a:fc:23:1c:2d:e3:32:ff:81:dd:
         52:fc:f2:18:65:23:17:c4:47:49:85:0b:a4:5f:81:d2:e1:ef:
         53:b2:40:b6:96:14:22:f2:f1:2f:30:90:cb:b8:e0:67:6e:7f:
         f3:02:47:a3:c0:6c:12:65:6b:f4:0b:16:e7:4a:2a:ad:4b:ac:
         cc:0b:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:02:57 2025 by rpki-client