Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
File:                     GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft (raw, json)
Hash identifier:          Wofq0k8/dj3HVwjMOnQV9oNHcYOvqQsKeohJECtuuhc=
Subject key identifier:   F2:21:97:44:18:0A:E8:BE:52:0E:B5:16:70:C9:97:D0:39:E1:30:A2
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Certificate issuer:       /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial:       05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
Manifest number:          05
Signing time:             Sat 26 Jul 2025 05:31:45 +0000
Manifest this update:     Sat 26 Jul 2025 05:31:44 +0000
Manifest next update:     Mon 28 Jul 2025 05:31:44 +0000
Files and hashes:         1: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl (hash: d5wWrVCN7tFRc3nTa7ZXolnj2KVHu2W5re/NH70dJVw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Jul 2025 05:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
        Validity
            Not Before: Jul 26 05:31:44 2025 GMT
            Not After : Jul 28 05:31:44 2025 GMT
        Subject: CN=68846841-4370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:52:fc:d3:97:95:4d:ac:64:c1:e8:6e:b7:
                    c6:8a:02:74:cf:81:da:c3:55:f7:d6:e5:d0:ca:f9:
                    74:a9:7e:5d:0e:e0:a6:45:05:ef:b7:d4:4c:4a:c4:
                    f5:e4:06:2b:53:1e:fa:f6:5f:f6:90:67:78:ff:dc:
                    be:3d:c0:3a:97:7b:30:3b:8b:71:ec:c5:ef:a0:cc:
                    ea:f0:cb:4c:f7:16:3a:b4:0c:22:3b:b7:bc:8f:ed:
                    b1:10:ca:28:31:62:21:90:22:57:47:fa:ab:af:7d:
                    d3:fe:59:87:a7:fc:ed:19:63:b8:64:95:c1:8b:a8:
                    32:fc:e0:ca:e3:dc:e1:0c:69:0b:3f:a0:7b:76:2d:
                    e1:6b:13:77:76:53:86:eb:70:ae:dd:c4:87:66:54:
                    b3:ea:ac:1a:63:b4:e9:29:77:e4:92:80:4f:cf:38:
                    fa:4b:cc:51:a3:0a:ce:e2:c0:51:b9:1a:68:86:2e:
                    cb:0f:02:a7:c3:c7:3d:78:9f:3a:7a:30:9d:f9:b3:
                    db:9b:95:b9:bc:5d:55:14:ce:30:5c:12:0e:a5:ce:
                    59:c6:52:8d:d9:bb:7d:ef:56:ce:33:6e:4c:a9:b5:
                    3a:5e:7e:4b:f4:8b:fd:ff:c5:1e:6e:c2:4e:2a:bb:
                    39:81:03:e2:8e:4f:b4:08:bd:9b:2c:a8:d9:49:63:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:97:44:18:0A:E8:BE:52:0E:B5:16:70:C9:97:D0:39:E1:30:A2
            X509v3 Authority Key Identifier:
                keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7f:d8:9a:29:d5:f6:71:52:e2:fb:a7:49:5d:b4:a7:a2:e4:
         aa:40:d2:a3:b7:44:0e:7e:3b:3b:eb:29:5f:9d:1f:24:d9:4b:
         d7:cf:d4:2a:ae:a5:65:60:9f:30:bf:22:02:15:12:be:76:27:
         ad:a8:73:c2:8d:69:49:52:6d:d8:40:fb:19:b0:8e:5e:2a:36:
         e7:3a:0d:ae:64:0d:df:cc:22:e4:3e:b8:a9:f9:08:24:0b:e4:
         33:56:ce:5d:65:72:51:be:b9:b7:89:7f:c0:df:2e:1f:ba:22:
         2b:fd:4a:47:84:6c:6e:ec:63:e2:19:56:db:be:8a:3a:df:03:
         eb:cc:44:49:03:97:2c:8d:53:c9:5d:4e:55:36:c2:b4:2f:9d:
         9f:53:55:0b:70:99:b2:72:aa:12:4e:fc:4a:c9:1d:ff:5a:0a:
         03:e4:53:4f:14:34:62:0d:5e:c3:8e:67:f8:86:72:35:df:3f:
         c6:2f:7a:30:56:6e:23:47:05:8e:e1:8e:fb:d9:b3:fe:ff:87:
         bf:43:f3:e4:d9:be:1f:c8:ff:34:3b:30:a1:7a:3a:1d:18:53:
         90:86:3c:9e:9f:63:ef:c0:4a:f9:5e:2f:cb:49:29:6b:d3:9e:
         19:fa:68:e9:e9:cf:d2:a7:f3:2e:bb:3c:27:07:18:19:da:cb:
         c5:0f:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:13:11 2025 by rpki-client