Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
File:                     boKROqUWafc7081vZoj2c3uOXTA.mft (raw, json)
Hash identifier:          DhYQMecLS09iIRvEoLBDRUKQZmb0+Msy0Wz06M51A+4=
Subject key identifier:   7D:27:47:1F:4E:AB:6B:7B:C8:4E:4F:48:65:3E:3D:73:6C:53:D0:4C
Authority key identifier: 6E:82:91:3A:A5:16:69:F7:3B:D3:CD:6F:66:88:F6:73:7B:8E:5D:30
Certificate issuer:       /CN=F366A4F1AF/serialNumber=6E82913AA51669F73BD3CD6F6688F6737B8E5D30
Certificate serial:       02D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/boKROqUWafc7081vZoj2c3uOXTA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
Manifest number:          02D7
Signing time:             Sun 27 Jul 2025 04:00:26 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:25 +0000
Manifest next update:     Tue 29 Jul 2025 04:00:25 +0000
Files and hashes:         1: boKROqUWafc7081vZoj2c3uOXTA.crl (hash: rLZtvmOL46qHBuYdSxQ6HMCCtU1UA8mPjFyeyTckLPM=)
                          2: B95E0AD440AB11EEA20CFB7A4AD9E6FC.roa (hash: Dc7Blsh1nTbhDdB+xxqAt7dASD2CCoKvRCA4opVblYM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/boKROqUWafc7081vZoj2c3uOXTA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A4F1AF, serialNumber=6E82913AA51669F73BD3CD6F6688F6737B8E5D30
        Validity
            Not Before: Jul 27 04:00:25 2025 GMT
            Not After : Jul 29 04:00:25 2025 GMT
        Subject: CN=6885a45a-dc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:a7:ea:4c:84:b4:c0:52:ec:15:68:c4:92:
                    7d:39:c4:93:2c:a5:19:99:7c:78:6a:15:ae:6b:5b:
                    23:63:13:ae:19:47:fd:e7:6a:f9:aa:7f:0c:44:9c:
                    6b:b6:08:9c:53:fc:d7:33:f9:0c:18:19:a8:35:3a:
                    e4:dc:30:f4:71:6f:30:30:c0:c7:87:05:33:1b:62:
                    89:5b:dc:1c:91:4d:e3:98:df:0f:fb:6d:1a:49:17:
                    5b:83:ae:cc:e5:dc:6f:ca:2b:a2:dd:1c:81:f7:f2:
                    1d:90:86:c8:5a:7a:41:d1:85:54:95:9f:36:ef:e8:
                    a5:ab:c0:f0:13:50:54:3c:cd:d4:df:53:e6:cf:08:
                    70:a2:ca:10:cc:19:8a:a3:58:42:94:65:3a:bb:b9:
                    1f:6b:df:3c:ef:7a:2d:68:3f:61:9b:4c:86:4e:7d:
                    52:09:39:6f:5a:f7:2f:4a:86:ab:97:e7:19:48:f6:
                    db:54:fa:cb:bd:1c:a9:a2:ac:63:32:e3:4e:a8:4f:
                    93:60:f6:aa:aa:10:d4:90:ca:fc:6f:86:07:c6:80:
                    b4:37:83:9f:0e:a8:a3:34:b1:d2:23:fd:dd:89:48:
                    22:57:60:91:d2:d6:61:61:27:8e:c4:f3:14:05:66:
                    a9:25:4f:f9:fd:13:2f:fd:5d:60:10:2f:d9:17:ed:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:27:47:1F:4E:AB:6B:7B:C8:4E:4F:48:65:3E:3D:73:6C:53:D0:4C
            X509v3 Authority Key Identifier:
                keyid:6E:82:91:3A:A5:16:69:F7:3B:D3:CD:6F:66:88:F6:73:7B:8E:5D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/boKROqUWafc7081vZoj2c3uOXTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:09:6c:d2:68:e2:64:20:71:c4:6e:82:d4:e8:ab:75:6f:65:
         ae:ab:56:cd:d7:fa:87:1b:c8:55:83:4e:69:81:6f:51:49:8e:
         4b:49:86:9b:af:58:3c:30:c0:84:94:09:fc:ee:50:87:dd:58:
         b4:68:d5:57:ae:2f:13:56:d6:1b:eb:cb:78:48:28:2b:dd:dc:
         16:41:34:c5:af:fa:61:a2:60:11:a8:00:fe:6a:50:82:91:15:
         ff:a9:5a:f3:bf:d2:9d:1d:fc:7d:ac:28:c4:5c:aa:4d:46:9b:
         a7:b5:bb:2e:43:08:f0:32:a6:5e:40:c6:4e:2a:3f:a1:b1:86:
         81:d2:7e:2e:27:65:86:c3:c3:41:1d:0d:3e:f6:b5:90:a4:5a:
         9f:8b:3e:0b:f1:86:c1:0d:61:d5:51:35:3e:8d:45:a6:b2:e9:
         0c:d4:11:8d:18:79:24:3f:1d:57:2b:31:ab:37:da:c6:72:0a:
         31:dc:d1:33:b6:a7:93:19:7b:2e:3d:26:0f:9f:00:ac:cb:ef:
         c2:7b:11:60:ab:91:55:88:08:ef:5e:dd:9b:e9:a7:90:f6:87:
         11:fb:85:9e:61:51:e1:69:40:24:80:63:78:e9:c6:78:cc:86:
         36:4a:b6:e0:20:d9:80:d8:65:05:95:e0:97:80:a4:44:60:52:
         10:70:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:10 2025 by rpki-client