Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          v/Ben/mKY7WKR0HlmKRewuS8lwrM9tSodNJ4PyyF+iE=
Subject key identifier:   9A:F6:64:17:3A:BE:93:C9:EE:CF:AD:01:59:6F:CE:79:5D:F9:8C:EE
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0A8C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0A85
Signing time:             Thu 31 Jul 2025 01:13:51 +0000
Manifest this update:     Thu 31 Jul 2025 01:13:50 +0000
Manifest next update:     Sat 02 Aug 2025 01:13:50 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: o+HXq5UZTlD+WYY6s8klIWJoUdgqFrpgAXh6M1wl5yE=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700 (0xa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Jul 31 01:13:50 2025 GMT
            Not After : Aug  2 01:13:50 2025 GMT
        Subject: CN=688ac34f-aa71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:98:9e:67:a6:2a:b6:b2:a1:cc:4a:0b:94:
                    0e:00:84:60:5b:72:5e:6e:c7:b0:79:36:a8:9a:bb:
                    48:89:a3:4f:85:f8:27:41:cd:f4:35:95:08:b5:69:
                    14:61:b3:7b:bf:f4:49:92:24:4c:80:89:61:7a:55:
                    4d:b3:75:9f:1d:44:b3:11:91:71:39:cf:98:38:51:
                    cf:f7:39:8a:cc:5a:d3:46:c7:be:cd:04:ae:dd:d8:
                    2d:91:aa:c8:42:61:55:56:17:df:d5:8c:e5:e4:48:
                    02:bb:2f:6c:1f:d7:98:69:6e:28:ff:6e:48:2c:1d:
                    4f:ea:19:26:d8:9a:0a:c5:d9:e7:a7:46:e9:6e:42:
                    e3:8d:b1:d6:4a:4a:66:0c:91:a8:81:39:90:76:e3:
                    21:92:44:96:38:9c:96:df:ac:0b:32:71:9a:74:55:
                    90:68:8e:d3:6d:f1:2d:bd:ea:fd:eb:2b:6b:f2:58:
                    0c:0e:2b:38:a6:d0:a8:ed:01:04:4f:6d:12:bb:5f:
                    e8:d4:c7:2a:6a:cd:6f:42:f3:38:3b:ae:70:e4:36:
                    a8:03:b2:42:c0:25:43:c0:3e:0c:84:50:ea:72:75:
                    51:6e:c1:71:42:0f:93:32:47:bf:23:77:f1:61:11:
                    56:a5:99:f9:c9:11:6b:aa:c8:32:c4:aa:46:88:a1:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F6:64:17:3A:BE:93:C9:EE:CF:AD:01:59:6F:CE:79:5D:F9:8C:EE
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:f7:be:df:3e:ee:60:9e:e3:c9:19:98:78:02:a1:1e:46:
         4f:39:d5:de:72:e7:be:9b:74:66:89:ef:a3:b0:8a:0e:83:24:
         eb:aa:01:a3:5f:82:78:dc:50:8b:c7:12:60:cd:97:e4:cf:80:
         76:c5:ec:c5:2d:1a:eb:fe:13:91:3f:f1:29:30:3f:b7:9b:9d:
         64:8e:d5:00:82:77:5f:fb:a4:ad:8a:70:24:60:f3:37:95:d8:
         36:6c:1d:21:83:6b:2b:bc:93:74:8d:66:2b:8d:31:a3:fb:c3:
         d4:92:6f:bd:32:8b:3a:4e:b0:6e:d5:9e:be:fa:b1:0d:1f:b0:
         1e:6d:5a:59:1c:94:f4:06:10:37:31:7a:56:66:f5:08:51:e3:
         59:eb:6c:79:20:b2:e3:dd:6e:e0:f8:fd:06:d1:33:77:36:9a:
         61:ec:39:c3:21:a5:19:b3:09:46:44:5a:cb:b8:37:ce:23:af:
         6c:cc:2e:6b:49:61:01:4f:25:92:28:34:fc:5e:de:08:63:ff:
         d8:f1:72:2e:53:f5:22:45:b8:25:82:f7:83:0f:37:4f:40:b5:
         03:9d:dd:d3:1e:1f:c7:b1:c8:50:00:60:5e:f5:37:34:3c:30:
         7f:b0:57:0f:81:71:e6:be:6d:06:f8:af:f6:d9:8c:f5:9a:9e:
         bc:62:6b:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCowwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkZBRDNBRjExMC8GA1UEBRMoNkI5MEZFMzRBODY2OUE4ODM4RkQyMzhDQzY1QTEx
NTJDNDQxNjUwNTAeFw0yNTA3MzEwMTEzNTBaFw0yNTA4MDIwMTEzNTBaMBgxFjAU
BgNVBAMTDTY4OGFjMzRmLWFhNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG9pieZ6YqtrKhzEoLlA4AhGBbcl5ux7B5Nqiau0iJo0+F+CdBzfQ1lQi1
aRRhs3u/9EmSJEyAiWF6VU2zdZ8dRLMRkXE5z5g4Uc/3OYrMWtNGx77NBK7d2C2R
qshCYVVWF9/VjOXkSAK7L2wf15hpbij/bkgsHU/qGSbYmgrF2eenRuluQuONsdZK
SmYMkaiBOZB24yGSRJY4nJbfrAsycZp0VZBojtNt8S296v3rK2vyWAwOKzim0Kjt
AQRPbRK7X+jUxypqzW9C8zg7rnDkNqgDskLAJUPAPgyEUOpydVFuwXFCD5MyR78j
d/FhEValmfnJEWuqyDLEqkaIoS2bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmvZk
Fzq+k8nuz60BWW/OeV35jO4wHwYDVR0jBBgwFoAUa5D+NKhmmog4/SOMxloRUsRB
ZQUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGQUQzLzY2NkY5NjI0NjRERjExRThBRkU0NzYyN0Y4QUVBMjI4L2E1RC1O
S2htbW9nNF9TT014bG9SVXNSQlpRVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2E1RC1OS2htbW9nNF9TT014bG9SVXNSQlpRVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkZBRDMvNjY2Rjk2MjQ2NERGMTFFOEFGRTQ3NjI3RjhB
RUEyMjgvYTVELU5LaG1tb2c0X1NPTXhsb1JVc1JCWlFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAO0ve+3z7uYJ7jyRmYeAKhHkZPOdXe
cue+m3Rmie+jsIoOgyTrqgGjX4J43FCLxxJgzZfkz4B2xezFLRrr/hORP/EpMD+3
m51kjtUAgndf+6StinAkYPM3ldg2bB0hg2srvJN0jWYrjTGj+8PUkm+9Mos6TrBu
1Z6++rENH7AebVpZHJT0BhA3MXpWZvUIUeNZ62x5ILLj3W7g+P0G0TN3Npph7DnD
IaUZswlGRFrLuDfOI69szC5rSWEBTyWSKDT8Xt4IY//Y8XIuU/UiRbglgveDDzdP
QLUDnd3THh/HschQAGBe9Tc0PDB/sFcPgXHmvm0G+K/22Yz1mp68YmuP
-----END CERTIFICATE-----
Generated at Thu Jul 31 10:14:00 2025 by rpki-client