Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          3kwT5KeKCiyoTBHuVx4eztVbuwPW7ra7w4U4tlzn0xU=
Subject key identifier:   D3:7E:9A:5B:E0:FD:93:CA:8E:30:71:BD:B9:49:5A:82:A0:3C:A8:1F
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       0157
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          0156
Signing time:             Wed 17 Sep 2025 04:40:47 +0000
Manifest this update:     Wed 17 Sep 2025 04:40:46 +0000
Manifest next update:     Fri 19 Sep 2025 04:40:46 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: VT9pANBFWpg43FM4cmNle/EQqgu6VkwNDp4bMDKvHiE=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Sep 17 04:40:46 2025 GMT
            Not After : Sep 19 04:40:46 2025 GMT
        Subject: CN=68ca3bcf-ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:34:b4:a6:54:8a:c0:4d:42:71:c5:fb:28:
                    a3:7b:ba:ae:99:f3:59:73:00:c8:f2:84:3e:de:dc:
                    a5:c5:0c:32:a6:00:23:a1:64:89:2c:3b:01:b1:19:
                    1f:b1:23:86:4d:81:7f:66:b6:f6:9a:99:6b:37:0a:
                    ec:87:0b:04:ec:6a:62:00:19:7a:de:79:62:af:91:
                    d8:6d:a2:2e:24:b6:c8:ed:f2:65:84:b7:00:37:47:
                    87:69:05:3f:2a:50:63:77:ca:13:8e:b5:7a:a1:18:
                    c5:dc:9a:8d:76:b7:fd:dc:b9:c4:5a:5d:c7:7a:a2:
                    56:30:2c:3a:26:0d:87:13:3a:1d:2f:78:c9:df:23:
                    6c:e1:80:51:ac:8e:56:63:43:6a:49:fd:ed:21:14:
                    20:78:1b:92:43:ba:74:8c:6d:18:75:ae:8f:da:66:
                    8f:14:8b:03:d6:5c:65:ba:26:97:b5:87:fd:d0:f9:
                    ce:9e:12:06:a0:9b:89:0e:78:f8:ec:00:15:59:d1:
                    da:1e:0b:5c:50:5b:04:65:e4:6e:2a:cc:c7:0d:e5:
                    9e:ae:c9:a3:ee:31:44:97:8d:19:84:e2:38:2c:45:
                    81:93:51:01:bc:af:16:6b:b8:e9:14:c2:bd:25:0e:
                    06:af:ef:81:9a:7a:61:c4:7a:30:30:9e:d1:62:56:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7E:9A:5B:E0:FD:93:CA:8E:30:71:BD:B9:49:5A:82:A0:3C:A8:1F
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:9c:36:58:4b:44:53:46:dc:08:bc:88:e8:b0:5c:23:cf:
         58:d4:17:5f:61:11:6e:93:a2:3c:cb:0e:a0:08:a6:e9:6c:96:
         0d:52:07:6d:52:de:08:5b:1c:cc:30:22:af:8a:1c:78:39:be:
         6a:e2:c7:26:f1:b6:7c:07:ec:8f:9f:2e:ca:2b:9b:6e:e2:40:
         8f:8c:47:23:3d:29:ca:89:9f:64:6a:88:61:49:37:33:23:fe:
         bf:ea:6f:d9:58:9d:93:97:ed:13:92:37:92:25:40:c7:17:f7:
         40:4f:fb:37:ae:6c:6c:b3:c9:b8:86:5b:8a:43:20:e7:30:1b:
         6c:54:59:49:64:af:1b:9c:ec:65:53:7d:b5:61:38:48:4b:e7:
         8f:cc:b7:2f:81:24:ae:b0:81:c6:ad:1f:b1:d9:ed:c2:03:25:
         14:55:5b:ca:c9:09:ad:f0:e3:7d:c1:a8:da:2f:3a:bc:45:a2:
         b4:3b:38:ae:c8:0b:c3:7d:ae:af:9e:ec:49:d4:60:70:8f:c9:
         60:e5:f5:02:86:a7:4f:56:29:79:88:94:01:5b:4a:ed:86:93:
         a1:39:50:e6:87:ab:83:2e:ee:26:47:bd:32:5a:71:dd:5b:2a:
         8d:ca:e5:44:b9:19:12:a3:35:c4:59:07:fb:97:7d:82:b0:c4:
         f9:08:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:24:44 2025 by rpki-client