Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File:                     NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier:          QOmZlQiVoUZ+VLur6IXR7AXKk/Yncbubc6wiceLeDSE=
Subject key identifier:   7A:7B:44:47:B7:2F:24:F4:1B:50:93:58:08:75:75:9E:93:97:14:B1
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer:       /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial:       0535
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number:          0532
Signing time:             Wed 17 Sep 2025 02:39:52 +0000
Manifest this update:     Wed 17 Sep 2025 02:39:51 +0000
Manifest next update:     Fri 19 Sep 2025 02:39:51 +0000
Files and hashes:         1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: JNE17tTTcKSpYl/RIoEfWRP5HHkmz2phqGxiGzQKGew=)
                          2: 99A1984E57F311F086ED54DEDAE4EC9C.roa (hash: ZM8T8/0Cbu1okxArEtkbxlaS5j1+sO4e39kgIitch78=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
        Validity
            Not Before: Sep 17 02:39:51 2025 GMT
            Not After : Sep 19 02:39:51 2025 GMT
        Subject: CN=68ca1f77-b5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:40:5a:2f:2e:b1:60:87:49:80:41:bc:a2:
                    3d:fb:16:58:8b:d0:1d:87:8d:68:10:14:a3:1f:ad:
                    1e:22:47:a5:81:e9:7f:57:03:9e:a8:2b:18:f4:ef:
                    6b:5a:fe:ed:3b:2a:7b:26:a9:73:3d:3c:1a:5a:be:
                    6c:3d:9c:ee:6a:7f:36:48:8f:82:7c:97:51:08:bf:
                    73:2b:8a:a6:31:b6:ac:2c:42:56:8f:60:0a:25:36:
                    a1:f6:ef:c2:5e:2d:cf:91:9f:49:c7:00:fe:83:95:
                    21:3f:3b:14:b6:a4:cb:fb:93:88:56:d5:20:17:f4:
                    1c:e4:fa:6b:3c:1e:b2:bf:66:12:c3:a1:73:8b:0a:
                    72:91:c0:41:a3:2d:5e:8f:52:9c:66:44:6f:d0:11:
                    5d:3f:f2:d3:50:bc:ea:bb:33:d2:9e:6a:68:09:54:
                    44:9a:ff:db:75:16:51:90:41:6c:90:bb:6f:f0:4c:
                    42:aa:de:1f:94:29:51:54:b5:82:11:3c:7f:e9:39:
                    ff:d9:1a:ed:dc:0e:53:2a:2a:a3:07:27:ee:e1:8b:
                    a2:65:61:31:21:08:59:ab:d8:f1:7b:36:2e:39:56:
                    35:09:f3:3e:ba:cb:8a:fd:24:59:62:14:19:03:9f:
                    5c:1b:07:17:c4:8c:f2:90:64:1c:fa:70:63:36:26:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7B:44:47:B7:2F:24:F4:1B:50:93:58:08:75:75:9E:93:97:14:B1
            X509v3 Authority Key Identifier:
                keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:4f:45:9d:6b:79:46:9a:93:a6:35:a3:40:5b:3d:c7:6b:
         c2:58:fc:1d:8d:c7:cb:97:3b:4a:0c:5d:50:2d:c6:31:06:c7:
         bf:37:ad:87:54:e7:34:97:cf:44:ea:da:db:75:e3:03:3f:e6:
         90:ad:43:93:6d:d2:c2:55:4e:29:ce:6f:da:6e:1b:7e:66:95:
         ea:f2:a7:4d:25:ff:4c:7f:7f:f6:e2:5a:a4:73:f3:5e:d2:8e:
         62:21:4c:e7:02:fd:9d:3e:c8:37:e0:ff:bd:18:70:74:4c:b0:
         2b:b7:18:a7:d9:c5:13:07:d3:0d:2f:a3:81:6c:ff:75:0b:ea:
         bc:fb:fb:cc:5a:19:ab:18:bf:41:b9:a1:ac:30:36:75:ff:73:
         d1:d9:94:c2:d4:ba:bf:da:91:a4:17:06:31:c5:7e:e4:68:e7:
         cf:2a:17:7c:61:97:a8:d3:23:e4:9c:45:43:e2:a8:54:91:d2:
         c9:94:d9:da:a7:69:9e:3e:b1:2f:10:5b:ad:6e:65:fa:5e:a9:
         98:40:29:f2:30:a7:8c:52:a6:df:24:e9:66:c1:c7:ac:e6:1d:
         db:07:33:84:75:a3:5b:41:e6:cf:02:c5:4e:da:0a:b1:68:7c:
         ce:02:9f:72:88:dd:65:3c:b6:16:f4:cd:7f:c2:87:50:2f:30:
         d5:c0:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:39:06 2025 by rpki-client