Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
File:                     AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft (raw, json)
Hash identifier:          t68Pv8SxIlKmLem3g8kUdMs1dcdlZagePnZACH3RLTA=
Subject key identifier:   50:3C:D4:B8:BF:DC:45:0C:09:BB:A7:EA:75:3B:02:6E:3A:06:5F:40
Authority key identifier: 01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
Certificate issuer:       /CN=F367278DAF/serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
Certificate serial:       02B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
Manifest number:          02B3
Signing time:             Thu 18 Sep 2025 03:52:50 +0000
Manifest this update:     Thu 18 Sep 2025 03:52:49 +0000
Manifest next update:     Sat 20 Sep 2025 03:52:49 +0000
Files and hashes:         1: AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl (hash: o5Hd7KXVz03ommYya4qQdixSS3QWcLq6HulgdMIGHKs=)
                          2: C450DAB0852B11EEA03755784AD9E6FC.roa (hash: +41zmHN4DGC6b99Vfy5ZDUkMkjOSaYpSIq26rSH1w4E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367278DAF, serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
        Validity
            Not Before: Sep 18 03:52:49 2025 GMT
            Not After : Sep 20 03:52:49 2025 GMT
        Subject: CN=68cb8212-a5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:ca:6a:f2:fc:35:21:73:89:f5:b4:30:82:
                    7d:f3:41:4f:7b:28:e1:98:fd:3b:56:69:53:d5:6e:
                    e1:96:63:d7:c2:e2:ba:a7:1d:56:47:5c:13:be:56:
                    18:33:61:c8:72:fc:14:6b:f4:de:e1:e0:b9:08:ca:
                    43:aa:74:42:1d:fa:2f:69:57:32:a0:f9:b8:cd:6f:
                    a0:bc:63:3c:7f:73:1c:39:ed:07:80:7c:19:8f:bb:
                    bb:4a:dd:ef:f0:17:b6:27:ff:44:a4:02:83:63:ce:
                    2c:9a:b6:0f:22:62:0b:42:72:2a:00:de:ce:f4:1c:
                    fe:90:13:cb:4e:c5:cb:e4:96:bf:83:09:8a:6c:ac:
                    0d:84:e2:7b:fb:f3:bb:8a:b5:f7:ab:33:3a:a6:b4:
                    c6:be:0b:1d:de:c3:f2:58:52:21:0a:aa:ed:23:6f:
                    45:d9:82:75:4c:2a:77:49:4f:dc:ef:6c:6d:02:60:
                    d8:fb:15:34:a6:a4:f6:1d:3f:8e:31:8b:ff:0b:cb:
                    11:eb:d2:15:82:e5:b5:71:39:8d:97:30:06:5f:4d:
                    c2:58:49:01:25:52:68:43:3d:e7:29:b9:8a:21:07:
                    0a:1c:9e:ff:44:0f:5d:bc:03:5a:4a:fa:9e:78:c0:
                    22:57:16:0a:06:5f:c4:43:b7:d6:a4:92:21:05:d0:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3C:D4:B8:BF:DC:45:0C:09:BB:A7:EA:75:3B:02:6E:3A:06:5F:40
            X509v3 Authority Key Identifier:
                keyid:01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:52:aa:8a:5f:8c:5c:9c:e3:55:dd:40:e4:93:c9:0c:07:80:
         ba:9b:86:8a:df:d3:95:8e:c3:88:be:ec:49:61:7a:36:be:72:
         1b:9b:52:d6:27:83:17:68:86:27:0e:08:1e:9d:08:37:0f:1c:
         c3:79:16:0e:30:a4:11:c4:8b:a8:eb:57:15:3e:f4:b5:d7:62:
         b8:51:ee:e7:42:ae:7c:c6:25:b5:a5:bd:fc:32:d7:5a:b4:33:
         89:91:b0:56:d0:b1:1b:0f:9e:26:58:f0:d4:9c:39:b7:8a:02:
         c4:0f:11:e6:74:68:f8:7c:d1:b5:94:06:4b:f9:73:65:8e:69:
         2c:c8:fd:83:9a:60:30:da:dd:d9:3d:70:08:ad:84:63:38:5a:
         5e:ae:50:9a:fc:30:4a:df:6f:92:3e:57:16:ea:1f:76:fb:b4:
         9b:6f:df:99:be:82:71:fd:22:7a:02:53:00:7e:f1:fd:6b:9d:
         5e:e8:0e:63:3c:08:cd:4b:09:89:b3:86:27:dd:41:98:33:96:
         5f:72:f7:48:5d:9d:c8:19:6b:d9:13:10:62:e8:71:2a:71:6f:
         09:00:63:84:b7:64:65:cf:21:90:dd:93:7d:4a:c9:c6:90:95:
         06:54:a4:f8:78:de:91:04:94:0c:8d:c3:11:ae:e5:be:40:ac:
         8c:c0:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:54:00 2025 by rpki-client