Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
File:                     04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft (raw, json)
Hash identifier:          oO/respoiEyRTRNxb6NUMzV3tQeUYH0Zhxz4L0grj/s=
Subject key identifier:   B7:40:C5:D5:ED:15:4B:8D:C1:BD:74:8B:34:81:23:34:17:15:BD:9B
Authority key identifier: D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
Certificate issuer:       /CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Certificate serial:       05D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
Manifest number:          05D0
Signing time:             Wed 17 Sep 2025 02:27:54 +0000
Manifest this update:     Wed 17 Sep 2025 02:27:53 +0000
Manifest next update:     Fri 19 Sep 2025 02:27:53 +0000
Files and hashes:         1: 04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl (hash: GHfFXgNQtCrsZ4zQkPJ5Xw3HJhSA9OILvmEdM2s99V8=)
                          2: F801051021E111ECA44DE462D8A014CE.roa (hash: nTH9YXhLp/XAxSwNODnbgqpCA63kmWCLMXXncguLAuk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669277AF, serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
        Validity
            Not Before: Sep 17 02:27:53 2025 GMT
            Not After : Sep 19 02:27:53 2025 GMT
        Subject: CN=68ca1ca9-7eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:44:5a:de:0b:ed:15:fe:f4:ee:a4:39:9a:1a:
                    ce:78:83:77:70:08:e7:89:ef:9c:e2:a5:59:83:ae:
                    b8:cb:a1:ad:b8:1d:e1:97:44:a1:b4:a3:8b:5e:09:
                    03:bd:3e:13:01:eb:ac:20:94:c8:59:f6:12:60:5a:
                    70:bf:dc:5d:62:c0:b9:4f:46:b0:e3:ea:b9:ac:ab:
                    9a:55:16:c7:cf:0d:02:44:15:f6:16:ab:96:92:35:
                    25:8f:bd:ce:48:8b:8d:3b:07:95:31:4c:2e:fc:45:
                    df:df:86:33:e7:e8:b5:29:3a:d8:6e:17:25:fa:d9:
                    62:70:7d:fb:47:33:4b:bc:fb:9e:99:26:c3:52:9e:
                    f3:ba:68:ad:95:62:7e:00:63:c8:45:01:b5:05:6e:
                    0b:0a:0b:93:10:ad:9b:5a:d2:64:28:02:06:87:ed:
                    72:e8:64:19:da:4c:77:a2:c4:52:05:77:60:60:3d:
                    66:8d:b4:88:00:a2:e8:d7:bc:60:a6:51:4c:a8:3e:
                    40:4b:cc:02:d2:c4:a9:e2:89:bb:8f:c5:fd:98:38:
                    9f:46:7e:ab:4c:9b:06:e4:0e:ba:c7:1e:20:ca:0d:
                    2f:a2:1b:32:32:f5:5b:d4:d5:d5:df:56:d2:eb:88:
                    1f:e3:dd:7f:92:68:02:bf:93:8d:00:77:70:44:4c:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:40:C5:D5:ED:15:4B:8D:C1:BD:74:8B:34:81:23:34:17:15:BD:9B
            X509v3 Authority Key Identifier:
                keyid:D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:de:0b:8f:e8:5e:61:d5:e3:a2:bf:93:9c:2a:56:fa:12:
         37:5e:df:02:a4:7c:c2:31:3c:98:4f:e6:10:84:0d:39:b5:2e:
         61:f4:fd:fd:9e:fb:95:88:ef:61:d6:13:78:d1:91:fd:d6:de:
         c1:04:64:33:dc:3a:09:84:e1:07:28:f3:c0:63:2a:3a:b7:03:
         0b:a2:90:7a:fa:8d:71:b8:70:0c:ad:76:7e:25:7b:38:33:08:
         1c:dc:bd:12:08:a5:f9:88:bf:d8:66:c1:f3:80:6c:4e:4b:fa:
         01:5d:48:ca:c2:7d:d4:77:30:0a:35:ff:8d:39:9d:f4:49:6e:
         c6:62:9c:89:30:de:0a:c3:02:5d:a2:80:27:9b:64:6e:87:12:
         8c:48:f6:8d:5b:68:0c:d1:bc:d7:aa:c0:25:ae:9d:0d:6a:83:
         52:49:36:b8:79:7b:32:e0:a7:24:47:7b:c1:be:17:9c:61:d2:
         51:38:b5:f6:d2:7c:12:d3:7d:bf:b0:3a:16:b3:99:2a:b8:b1:
         22:d7:c5:09:e2:72:9e:5d:e8:b7:60:14:3a:70:d5:d8:a8:fc:
         0c:f1:08:6a:df:7d:f0:c9:3d:79:dc:da:f6:07:49:cf:28:93:
         b2:78:56:04:80:92:a0:0b:c9:d1:26:0f:6e:7b:e0:9b:82:3f:
         f5:61:40:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjkyNzdBRjExMC8GA1UEBRMoRDM4QTg1NzEwRkVGRTZGQTZCQjVBQzIyMDgwMkE4
RTQ5QUFDNkJFNDAeFw0yNTA5MTcwMjI3NTNaFw0yNTA5MTkwMjI3NTNaMBgxFjAU
BgNVBAMTDTY4Y2ExY2E5LTdlZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD3RFreC+0V/vTupDmaGs54g3dwCOeJ75zipVmDrrjLoa24HeGXRKG0o4te
CQO9PhMB66wglMhZ9hJgWnC/3F1iwLlPRrDj6rmsq5pVFsfPDQJEFfYWq5aSNSWP
vc5Ii407B5UxTC78Rd/fhjPn6LUpOthuFyX62WJwfftHM0u8+56ZJsNSnvO6aK2V
Yn4AY8hFAbUFbgsKC5MQrZta0mQoAgaH7XLoZBnaTHeixFIFd2BgPWaNtIgAoujX
vGCmUUyoPkBLzALSxKniibuPxf2YOJ9GfqtMmwbkDrrHHiDKDS+iGzIy9VvU1dXf
VtLriB/j3X+SaAK/k40Ad3BETPSZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUt0DF
1e0VS43BvXSLNIEjNBcVvZswHwYDVR0jBBgwFoAU04qFcQ/v5vprtawiCAKo5Jqs
a+QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5Mjc3LzVFMjQ1MDgyMjFFMTExRUNCRkQxMEE2MkQ4QTAxNENFLzA0cUZj
UV92NXZwcnRhd2lDQUtvNUpxc2EtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzA0cUZjUV92NXZwcnRhd2lDQUtvNUpxc2EtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjkyNzcvNUUyNDUwODIyMUUxMTFFQ0JGRDEwQTYyRDhB
MDE0Q0UvMDRxRmNRX3Y1dnBydGF3aUNBS281SnFzYS1RLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCq0d4Lj+heYdXjor+TnCpW+hI3Xt8C
pHzCMTyYT+YQhA05tS5h9P39nvuViO9h1hN40ZH91t7BBGQz3DoJhOEHKPPAYyo6
twMLopB6+o1xuHAMrXZ+JXs4Mwgc3L0SCKX5iL/YZsHzgGxOS/oBXUjKwn3UdzAK
Nf+NOZ30SW7GYpyJMN4KwwJdooAnm2RuhxKMSPaNW2gM0bzXqsAlrp0NaoNSSTa4
eXsy4KckR3vBvhecYdJROLX20nwS032/sDoWs5kquLEi18UJ4nKeXei3YBQ6cNXY
qPwM8Qhq333wyT153Nr2B0nPKJOyeFYEgJKgC8nRJg9ue+Cbgj/1YUBL
-----END CERTIFICATE-----
Generated at Thu Sep 18 01:07:44 2025 by rpki-client