Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier:          ejpz34cKOqPmpZiWZzX+gKR9mM98Clsu9bdJTeoxrkE=
Subject key identifier:   C0:AF:80:F8:57:F0:9E:8F:82:83:60:3F:5F:2C:A7:B5:27:B6:2B:24
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer:       /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial:       0330
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number:          032D
Signing time:             Thu 18 Sep 2025 03:37:11 +0000
Manifest this update:     Thu 18 Sep 2025 03:37:10 +0000
Manifest next update:     Sat 20 Sep 2025 03:37:10 +0000
Files and hashes:         1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: 6b9BbKjd8D1AZ+MVkMCy5IuO0Tds3l8AGgXvsTiMBgM=)
                          2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
                          3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
                          4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Validity
            Not Before: Sep 18 03:37:10 2025 GMT
            Not After : Sep 20 03:37:10 2025 GMT
        Subject: CN=68cb7e67-4488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:de:19:25:bf:ed:93:9b:17:8b:29:bc:db:
                    8d:70:c9:ef:f6:d4:13:14:46:39:93:c0:d7:ed:cb:
                    dc:5e:5d:56:78:8d:7f:7f:1b:12:bb:49:22:11:f7:
                    43:1c:0f:39:84:81:47:8b:85:3f:ea:62:1d:86:7e:
                    ff:33:ce:6e:d3:6f:2f:ab:88:37:20:0f:80:2d:ef:
                    9d:86:7a:45:f8:2a:d1:1d:28:09:a7:1c:fe:ee:1d:
                    9a:02:cc:fa:25:0e:f8:8e:41:8a:5e:02:cf:2c:5b:
                    62:5a:d5:16:25:50:82:70:c5:8b:eb:fd:ae:88:1d:
                    31:b8:b4:20:28:5f:d9:23:0d:d6:80:78:d2:e7:81:
                    4e:7c:72:20:38:d8:32:bd:29:f5:b3:e1:fd:4a:0b:
                    b5:74:4b:ba:84:bf:d2:df:48:43:5d:c4:96:26:0f:
                    1a:94:15:12:0e:2b:c8:7a:a6:72:4c:68:91:db:48:
                    ef:02:a5:06:ad:9f:09:d2:25:0b:27:3f:15:6e:48:
                    5e:24:e2:cc:52:62:37:07:5f:a2:2a:f7:55:b7:96:
                    15:15:30:f4:d6:88:98:64:86:98:bb:91:9c:6d:46:
                    d9:da:05:9b:cc:bc:9a:29:bc:63:dc:7b:01:1e:7f:
                    0d:41:87:eb:f2:9e:88:53:36:aa:0a:a4:60:f2:75:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AF:80:F8:57:F0:9E:8F:82:83:60:3F:5F:2C:A7:B5:27:B6:2B:24
            X509v3 Authority Key Identifier:
                keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d0:88:a2:b7:1c:f8:ac:4f:a4:8f:d1:ab:4e:00:85:4f:40:
         90:7b:22:e9:88:5c:01:43:9f:da:9e:99:6d:34:4e:ba:f8:80:
         8c:92:b2:46:69:e1:e4:33:bc:6e:a9:7b:55:9c:92:0d:27:7c:
         2b:fc:f0:c5:88:c7:8c:54:5a:f4:2a:54:8c:84:6a:98:60:5e:
         6a:44:66:f0:f9:fd:4b:f4:a7:49:89:c1:93:84:98:4f:50:9b:
         5a:74:4b:6e:37:d2:c3:09:cd:17:d4:af:e7:c2:50:a9:72:20:
         db:e7:5f:ae:18:bc:8c:80:1b:94:8d:f3:51:5f:ae:2b:e8:b1:
         b4:60:86:d3:59:84:af:94:83:37:6f:dc:04:7f:ca:32:69:cb:
         a0:87:51:6c:dd:87:53:71:a5:2f:f0:ee:17:3e:b6:6e:5b:02:
         bb:ed:55:5b:e4:98:fc:24:c8:50:3c:bc:42:b4:7b:c2:29:a2:
         e8:db:62:ef:12:42:77:99:14:c2:3c:32:11:e7:b7:ee:ee:be:
         0f:13:b8:ed:69:bf:64:ba:bc:30:98:43:ea:fa:75:06:99:28:
         6d:81:1c:0e:6b:ac:e6:b0:64:64:8d:a5:f4:44:27:b4:6f:50:
         b9:c2:19:2a:d0:e3:dd:df:c2:86:4d:f5:96:bc:8c:5a:da:2c:
         01:48:1b:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjM5NTRBRjExMC8GA1UEBRMoRERFNDA1QTNCOUUzMkNCRDE5OTA4NzU5N0Q2RjI5
MEI2QzM0MUJDRDAeFw0yNTA5MTgwMzM3MTBaFw0yNTA5MjAwMzM3MTBaMBgxFjAU
BgNVBAMTDTY4Y2I3ZTY3LTQ0ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrJt4ZJb/tk5sXiym8241wye/21BMURjmTwNfty9xeXVZ4jX9/GxK7SSIR
90McDzmEgUeLhT/qYh2Gfv8zzm7Tby+riDcgD4At752GekX4KtEdKAmnHP7uHZoC
zPolDviOQYpeAs8sW2Ja1RYlUIJwxYvr/a6IHTG4tCAoX9kjDdaAeNLngU58ciA4
2DK9KfWz4f1KC7V0S7qEv9LfSENdxJYmDxqUFRIOK8h6pnJMaJHbSO8CpQatnwnS
JQsnPxVuSF4k4sxSYjcHX6Iq91W3lhUVMPTWiJhkhpi7kZxtRtnaBZvMvJopvGPc
ewEefw1Bh+vynohTNqoKpGDydQ9pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwK+A
+Ffwno+Cg2A/XyyntSe2KyQwHwYDVR0jBBgwFoAU3eQFo7njLL0ZkIdZfW8pC2w0
G80wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYzOTU0L0IyRkRFNEEyMkEyNjExRUU4NjREQ0E0ODRBRDlFNkZDLzNlUUZv
N25qTEwwWmtJZFpmVzhwQzJ3MEc4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNlUUZvN25qTEwwWmtJZFpmVzhwQzJ3MEc4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjM5NTQvQjJGREU0QTIyQTI2MTFFRTg2NERDQTQ4NEFE
OUU2RkMvM2VRRm83bmpMTDBaa0lkWmZXOHBDMncwRzgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/0Iiitxz4rE+kj9GrTgCFT0CQeyLp
iFwBQ5/anpltNE66+ICMkrJGaeHkM7xuqXtVnJINJ3wr/PDFiMeMVFr0KlSMhGqY
YF5qRGbw+f1L9KdJicGThJhPUJtadEtuN9LDCc0X1K/nwlCpciDb51+uGLyMgBuU
jfNRX64r6LG0YIbTWYSvlIM3b9wEf8oyacugh1Fs3YdTcaUv8O4XPrZuWwK77VVb
5Jj8JMhQPLxCtHvCKaLo22LvEkJ3mRTCPDIR57fu7r4PE7jtab9kurwwmEPq+nUG
mShtgRwOa6zmsGRkjaX0RCe0b1C5whkq0OPd38KGTfWWvIxa2iwBSBsz
-----END CERTIFICATE-----
Generated at Thu Sep 18 13:39:22 2025 by rpki-client