Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          8VuL9lnACTzeXGIU8xknbNRsd6eJzsd6udDwJjdNHbs=
Subject key identifier:   E6:C9:8F:25:97:B4:8E:0D:CA:09:2A:23:B7:FF:8E:3B:0B:A2:4D:08
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       08FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          08F9
Signing time:             Thu 31 Jul 2025 01:36:07 +0000
Manifest this update:     Thu 31 Jul 2025 01:36:06 +0000
Manifest next update:     Sat 02 Aug 2025 01:36:06 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: 53G4ToSb78IRvG7qA0GJt6OPqYa51MMdygimJ7zb8bo=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2301 (0x8fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Jul 31 01:36:06 2025 GMT
            Not After : Aug  2 01:36:06 2025 GMT
        Subject: CN=688ac886-95eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:8b:a7:cd:58:f7:c3:7b:7f:07:03:54:bf:
                    c6:d2:89:e7:2f:51:5f:60:51:57:1f:64:1d:3b:e9:
                    e4:e9:9f:88:7b:3e:0d:8d:f9:f3:0a:ee:05:f8:92:
                    e7:48:44:73:98:d3:d9:f4:3a:61:c1:48:ba:25:17:
                    9f:d4:f9:31:08:52:65:51:a0:0a:99:19:74:66:59:
                    49:5d:a6:76:d4:01:c3:57:56:9d:46:27:df:74:94:
                    ec:83:c2:4e:b6:66:5d:39:9f:4f:8b:1e:77:b3:54:
                    64:35:2a:47:ec:df:d5:ca:90:27:ae:7a:c3:f0:0f:
                    8a:7f:c3:3b:74:3b:52:bc:d0:3e:81:b1:b3:92:63:
                    f3:af:c6:62:6f:22:16:49:44:63:02:34:01:b6:9e:
                    38:75:87:6e:97:aa:fe:ab:ff:25:5c:da:ff:47:d4:
                    d3:d1:e7:8e:61:e2:27:98:01:e0:05:3b:0d:2d:57:
                    90:56:25:b4:f4:9e:b9:18:a4:39:67:e3:ce:1f:7a:
                    37:15:79:4b:31:83:08:e0:3c:d3:db:3e:3d:23:ca:
                    2d:a4:e4:3f:28:af:e9:7f:fc:41:e3:1a:54:af:0f:
                    a2:70:85:c5:1d:d1:0a:a3:11:c2:98:a2:e8:0c:50:
                    58:02:e3:e7:e5:5f:f1:57:ee:cf:9d:ad:03:ea:6e:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C9:8F:25:97:B4:8E:0D:CA:09:2A:23:B7:FF:8E:3B:0B:A2:4D:08
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:ef:c4:cf:e0:0d:85:38:f8:17:3b:a8:d4:7c:5f:47:fe:
         3f:78:7a:5b:1c:72:65:17:ce:b0:46:6e:d0:3c:e2:00:f4:75:
         0f:e7:89:52:90:ef:89:17:c1:aa:10:28:a2:ed:f3:36:75:89:
         cb:df:a4:c9:7d:2f:8a:0d:e4:59:ed:8d:d1:c2:f3:14:e1:10:
         c0:af:43:ed:b1:a8:70:75:16:11:23:3a:a0:6f:ca:32:97:18:
         46:f6:46:6b:b2:55:15:f6:cd:ed:4a:a2:d2:f3:50:d2:29:14:
         2c:f4:6c:0f:db:3e:ff:2e:4b:5d:f8:8e:e4:1f:f0:0a:80:cd:
         60:a4:dc:9e:f8:89:df:c4:25:bc:ec:49:79:c3:be:b5:7d:c5:
         af:42:19:d0:f5:5a:bd:a1:bf:a8:f4:3b:d2:22:fd:a4:0d:be:
         dd:41:b0:7d:0c:29:a2:c5:93:45:3e:57:0a:28:a7:02:77:29:
         b2:d7:a6:32:de:3c:76:59:03:00:06:bc:6b:de:08:8b:c2:64:
         18:d3:23:80:11:17:a0:ff:b5:09:89:57:a2:81:ed:8e:fd:75:
         68:9e:be:24:22:94:97:93:3c:2a:80:cd:a1:e4:a6:68:10:6e:
         e2:f9:36:56:07:46:be:f6:d4:2f:75:5e:6a:6d:46:39:87:3d:
         08:04:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:14:00 2025 by rpki-client