Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
File:                     SmfXXBQJ0u538xkN5zXsl-9jDVg.mft (raw, json)
Hash identifier:          xd+15YNwLmqLT7eqqecHlKDI4gPVxuURurCR8ekVhhs=
Subject key identifier:   8F:38:D1:4B:B6:60:B5:45:72:F1:FC:EF:A6:76:7A:EC:F6:C6:5C:C0
Authority key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58
Certificate issuer:       /CN=F36700DBAF/serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
Certificate serial:       0609
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
Manifest number:          0609
Signing time:             Wed 17 Sep 2025 02:20:50 +0000
Manifest this update:     Wed 17 Sep 2025 02:20:49 +0000
Manifest next update:     Fri 19 Sep 2025 02:20:49 +0000
Files and hashes:         1: SmfXXBQJ0u538xkN5zXsl-9jDVg.crl (hash: IhxyErXhiwzJYk3uS6g21A+e4+6GwDqfPuF2sIOZwBs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
        Validity
            Not Before: Sep 17 02:20:49 2025 GMT
            Not After : Sep 19 02:20:49 2025 GMT
        Subject: CN=68ca1b02-edb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:e9:12:49:c8:b3:bb:98:ab:78:14:42:bb:
                    13:ec:f1:14:60:40:47:be:39:c1:45:5e:5b:7b:34:
                    60:61:54:06:fd:33:73:09:74:bb:12:ec:a1:23:16:
                    36:6b:23:81:c9:55:a2:96:5a:2a:eb:df:6a:26:e8:
                    fb:8b:64:50:10:85:32:a7:b9:89:29:0b:b9:4a:a6:
                    2a:2a:13:d3:58:82:f3:f2:9e:2d:b2:27:05:a3:0b:
                    6b:9c:d9:a1:fb:da:c5:90:52:33:42:19:9e:23:e3:
                    8d:9a:d0:ca:dc:8e:92:a1:8d:45:31:56:24:8d:e7:
                    d6:60:1c:fa:df:d9:68:2a:aa:a9:6a:27:6d:a5:d6:
                    e4:94:38:02:7b:a6:92:4d:56:c7:a9:2c:36:48:04:
                    5e:7b:8a:65:19:18:00:56:eb:15:b3:eb:2e:f8:85:
                    93:d5:e6:2f:38:c7:94:0e:a8:ae:fb:f6:80:5d:4b:
                    5b:29:94:83:21:69:89:08:8c:3e:17:52:82:5e:7e:
                    e6:18:37:0f:4d:5a:b3:a6:6c:1e:6c:5d:f1:50:dd:
                    a2:69:91:4b:5a:9f:6e:78:03:07:a6:31:94:f8:fc:
                    c7:48:52:a6:89:c7:73:6f:4e:6c:de:1a:2f:38:44:
                    a3:9c:4c:28:4a:91:92:6b:b6:d7:73:a5:a9:07:7a:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:38:D1:4B:B6:60:B5:45:72:F1:FC:EF:A6:76:7A:EC:F6:C6:5C:C0
            X509v3 Authority Key Identifier:
                keyid:4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7b:33:2e:b8:db:6d:16:a5:cd:a5:fe:17:d3:5d:21:c0:19:
         21:48:fc:bd:c4:9c:a7:46:d7:dd:a6:87:63:10:94:34:8e:6e:
         29:2d:94:e6:26:d2:8b:31:e8:f3:8d:ee:65:94:b3:c8:02:27:
         d4:ad:0e:2b:83:cb:a3:0b:4f:2b:7c:dc:5c:87:e9:99:14:31:
         4f:a2:23:d9:a0:ba:7a:9d:35:cb:eb:a0:01:57:82:46:4a:0e:
         e1:3d:05:4a:e3:3f:19:50:b8:a0:c9:e3:ad:b8:ae:12:83:15:
         10:26:70:2e:2a:91:4e:77:fb:81:aa:24:8d:4e:8d:dc:04:99:
         56:9e:c6:8b:c7:f1:83:be:00:5a:21:f5:98:25:67:e5:e7:ed:
         bd:d2:48:44:ce:b7:64:d0:b3:f7:b4:cc:f8:6d:6a:52:1d:9d:
         74:ca:a2:b8:fc:bd:e6:d2:95:04:9f:1f:da:0e:24:70:88:08:
         9e:28:84:54:e5:ee:b7:a9:b3:67:de:e1:56:1a:42:9e:ea:da:
         0d:8d:33:33:cc:e7:5d:80:05:14:5e:a1:23:d9:78:99:0a:4e:
         1b:75:41:02:4f:68:04:63:21:98:4b:fb:62:f9:45:d7:09:fb:
         43:45:7d:ef:59:3a:d9:55:d1:9e:8d:9d:1e:41:d4:6f:99:18:
         a1:d7:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:19:36 2025 by rpki-client