Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
File:                     7KUu1usrGLOvGbp5LPM-AO_td-o.mft (raw, json)
Hash identifier:          9CdLijAcpx9jlzhdMTxGynQHLRt9SbrDUco/N9zJ6a4=
Subject key identifier:   EF:34:0E:AF:B1:22:4A:BF:3B:AA:2B:74:C9:B9:3E:C4:1F:85:3F:4C
Authority key identifier: EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
Certificate issuer:       /CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Certificate serial:       087D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
Manifest number:          087B
Signing time:             Tue 16 Sep 2025 01:40:07 +0000
Manifest this update:     Tue 16 Sep 2025 01:40:06 +0000
Manifest next update:     Thu 18 Sep 2025 01:40:06 +0000
Files and hashes:         1: 7KUu1usrGLOvGbp5LPM-AO_td-o.crl (hash: 6kqcs6LXL3uKXzxqgqQ7EXtD7LzgbPGt5yYi99YtXQ8=)
                          2: 72E4BD0412B111EA9EACDA3AF8AEA228.roa (hash: lEGlEyNpK2D28OfWSczq5nyD+T86uHXMrbx63t8Ft0s=)
                          3: 5142A9C212B111EAAF53AF3AF8AEA228.roa (hash: xG/mwLzjMt/AD4VCyWzSqQgk/KYhEOItbq9UQDh1nvU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678D2DAF, serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
        Validity
            Not Before: Sep 16 01:40:06 2025 GMT
            Not After : Sep 18 01:40:06 2025 GMT
        Subject: CN=68c8bff6-06a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:73:c3:ed:0f:83:c5:6f:58:f5:98:0a:ce:
                    fb:3b:4b:81:bb:76:be:2c:98:f2:13:09:60:09:e6:
                    1c:f1:c4:23:9e:65:19:66:2a:d8:20:3f:6f:67:d2:
                    a4:42:20:cd:da:b9:73:d0:11:24:f2:cd:76:57:c2:
                    89:b3:79:35:e1:64:36:6b:df:70:ff:67:d7:88:ec:
                    ad:6d:ea:ad:cb:54:f5:6d:77:68:01:a0:03:43:94:
                    47:e8:d1:df:c5:67:32:69:73:63:fb:83:a5:67:50:
                    f5:93:d6:91:8b:c0:02:2b:5d:37:ae:21:cf:24:8f:
                    c2:15:75:e7:ee:cc:33:61:ff:20:28:28:d7:a2:a9:
                    dd:cb:f4:e4:21:bd:91:79:6b:0a:53:31:52:0b:e6:
                    9c:7c:a7:e9:8d:7f:af:d3:a0:a8:a0:e5:7a:a0:82:
                    d3:97:81:2f:d7:01:db:27:30:ad:71:c4:ca:08:82:
                    af:8b:7f:d8:c1:59:fa:2b:b9:4e:4f:e2:83:26:93:
                    23:55:a9:22:fc:ef:14:50:98:1a:df:64:5d:8a:87:
                    4d:ba:b4:da:b6:c9:b4:4c:7a:7e:0c:fe:7b:5f:01:
                    05:2a:21:63:32:bd:fb:88:19:9b:bd:a3:be:cc:57:
                    50:ff:23:94:dd:7d:12:35:37:91:43:87:ca:17:17:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:34:0E:AF:B1:22:4A:BF:3B:AA:2B:74:C9:B9:3E:C4:1F:85:3F:4C
            X509v3 Authority Key Identifier:
                keyid:EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:d2:8b:b1:e2:ef:28:78:1b:c4:a3:ae:39:16:a2:ae:b8:
         12:15:56:db:44:9f:07:e7:8d:76:29:bb:40:77:96:56:0c:41:
         ab:f7:97:92:2d:c5:fc:2f:4a:25:0d:bd:5c:bb:5e:32:8f:9d:
         4e:56:32:67:2d:f0:50:13:3d:e7:63:02:a6:3a:fb:be:f1:e2:
         e5:c5:cf:99:7e:e1:a3:c8:28:20:5f:14:40:43:c8:74:0d:61:
         ae:ce:67:00:1e:0a:ed:95:12:a2:d2:6c:49:d9:40:87:fb:ce:
         01:52:d3:b5:a7:5d:1a:75:ec:4b:a9:c8:e8:18:2f:8a:92:44:
         21:44:d0:69:54:41:de:4c:8f:8d:ea:d9:19:41:ac:13:6e:7a:
         6a:97:97:49:5a:53:38:c2:ba:65:3e:c7:2e:b5:ea:cf:ba:b8:
         a7:0c:fe:1d:58:9f:8b:0e:33:41:68:91:f3:f6:26:c6:ef:59:
         14:55:18:89:68:9e:df:52:8e:e4:53:69:52:ed:06:b0:97:26:
         5a:43:bd:db:7f:c0:cb:87:b6:ac:f8:9f:17:19:2f:87:5b:c7:
         d2:bc:0a:ca:1d:3e:42:e6:58:e2:ac:3b:94:a8:23:06:5c:b4:
         bf:08:4e:de:e9:e4:22:3f:7f:ff:81:a6:d1:b9:cc:90:fe:68:
         9a:54:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:41:13 2025 by rpki-client