Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
File:                     hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft (raw, json)
Hash identifier:          dvOGZSkaDwMFJWiF+V9C5Dwk3mVrPcAmO51wSm3QDpQ=
Subject key identifier:   2F:49:C5:34:4B:42:C5:B3:71:81:06:BF:6A:D2:09:7D:74:19:B2:2E
Authority key identifier: 87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
Certificate issuer:       /CN=F3682B3AAF/serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
Certificate serial:       034C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
Manifest number:          0349
Signing time:             Wed 17 Sep 2025 03:35:53 +0000
Manifest this update:     Wed 17 Sep 2025 03:35:52 +0000
Manifest next update:     Fri 19 Sep 2025 03:35:52 +0000
Files and hashes:         1: hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl (hash: L1vHkMcFoQK7qG37kFWWn8lcpWwbZXXC/7z4U9s7/9M=)
                          2: 55FD2498F36111EE8255797D775412E6.roa (hash: 5+TRgE4Za1lP1tBhZLXfEbMvFbNLglwsyfdbD3gRLSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B3AAF, serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
        Validity
            Not Before: Sep 17 03:35:52 2025 GMT
            Not After : Sep 19 03:35:52 2025 GMT
        Subject: CN=68ca2c99-980e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:f9:fd:51:5d:71:b4:57:24:0c:a9:3e:f6:
                    36:08:c6:07:d8:5a:36:cc:1a:ae:f0:df:55:95:d9:
                    08:cb:be:76:1c:48:6b:b2:74:17:bc:8e:8c:8c:e2:
                    df:25:71:fc:91:58:d2:4c:42:9a:4d:d1:d3:f8:64:
                    0f:84:21:4d:cd:70:53:da:2b:13:0d:75:45:38:b1:
                    c0:26:ce:62:dd:ca:ff:e5:0f:df:03:07:49:c7:c5:
                    d4:fb:89:40:86:b1:e2:56:8c:b5:58:7e:ad:28:0b:
                    e2:83:9b:20:4e:33:e0:99:f0:80:55:51:22:a2:0f:
                    c4:9e:d1:9f:d6:f0:82:e4:38:22:7f:a1:ba:d4:ac:
                    ac:f8:b1:17:46:43:21:1f:9a:ef:a4:f0:22:5e:01:
                    fe:9e:ff:01:ff:9b:2e:04:f3:1f:1d:68:ce:ec:85:
                    2d:b0:61:25:b8:bb:26:17:2f:db:00:a7:c1:96:bb:
                    e2:2e:ef:48:90:0b:fd:21:b3:bf:6b:85:ad:de:59:
                    65:c9:f4:cb:7d:ea:b6:97:1f:a5:96:a4:45:30:34:
                    2a:1e:2b:4a:53:c0:79:4c:79:0c:56:ff:1a:2b:36:
                    2b:ba:c8:51:ee:de:b3:d3:4b:7b:2b:68:7d:ab:50:
                    2e:ea:ec:6f:dd:4c:27:62:dc:e2:70:4a:74:4a:a3:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:C5:34:4B:42:C5:B3:71:81:06:BF:6A:D2:09:7D:74:19:B2:2E
            X509v3 Authority Key Identifier:
                keyid:87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:77:61:c8:65:c6:f9:aa:bc:a6:4b:26:58:0b:c9:4a:81:29:
         5e:e2:bc:ef:09:99:65:10:fa:0e:33:62:d7:0f:0c:af:53:fb:
         ba:c1:43:9c:13:82:3d:f6:19:f1:4b:af:46:74:d1:ad:2f:82:
         90:3f:a3:22:d0:56:49:ff:59:a1:64:35:16:a0:c2:70:bb:72:
         8c:40:7d:2e:ba:ff:c2:83:ce:e3:10:1d:13:0b:15:6a:ca:2c:
         d7:d3:10:6f:f4:2a:33:85:be:3e:53:a4:cc:e0:54:66:59:ac:
         6f:58:25:ba:68:e5:a7:0f:e0:8d:a3:7c:35:19:33:4e:de:de:
         18:c0:f2:b0:21:2a:12:eb:9d:fc:6d:fb:ca:b1:c5:5f:3d:e4:
         31:95:0e:7e:85:8d:ee:32:18:22:57:18:0e:af:89:65:ab:ed:
         ba:c0:fe:e2:bf:cd:c4:31:8c:72:5c:b0:d4:99:69:45:9e:a8:
         32:41:12:25:a9:53:57:d7:69:92:8b:17:2f:68:72:67:0e:44:
         47:f7:30:88:b5:5d:77:76:58:91:6e:9f:a8:44:cc:ac:4a:6f:
         eb:43:bd:c2:d8:b5:3c:d8:f0:2b:09:58:9d:4e:bd:64:ab:3e:
         c2:e3:94:b0:8f:e5:08:d6:0b:7b:5b:2b:d5:b1:cb:65:0e:c0:
         55:57:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:27:16 2025 by rpki-client