Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
File:                     9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft (raw, json)
Hash identifier:          KmPzX7cBoJFF1ceEqp0Pm3i/lZYNc77ijDEyOU218IM=
Subject key identifier:   5F:6D:6F:E9:03:64:72:5F:E1:A9:21:0E:A6:54:0F:90:D1:FB:01:36
Authority key identifier: F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Certificate issuer:       /CN=F36848BCAF/serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Certificate serial:       27
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
Manifest number:          26
Signing time:             Fri 06 Jun 2025 05:17:50 +0000
Manifest this update:     Fri 06 Jun 2025 05:17:49 +0000
Manifest next update:     Sun 08 Jun 2025 05:17:49 +0000
Files and hashes:         1: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl (hash: g8VxnLIWDQ7ZwH1mcFby4cwELQzJoB77kt6mW4mayuI=)
                          2: 09A34FAA26D211F0B6739EA6DAE4EC9C.roa (hash: ODLXD+AAWaNDLl7uFGo30OyjOAfDKyZb34POXL/jqq0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 05:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
        Validity
            Not Before: Jun  6 05:17:49 2025 GMT
            Not After : Jun  8 05:17:49 2025 GMT
        Subject: CN=684279fe-8322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:a6:8f:f3:e0:e4:91:90:20:c4:ce:58:16:
                    22:b3:3b:b8:fc:54:4f:9c:e7:15:96:9b:5d:cc:a4:
                    4e:96:2f:0a:c9:af:e4:f2:18:91:b5:d8:ef:34:43:
                    21:b7:f9:a7:8f:62:c0:e4:3f:c0:3e:20:0b:cb:18:
                    81:c0:35:54:91:16:bd:6c:41:e1:79:6d:73:d3:c7:
                    13:3c:36:66:e0:48:72:43:eb:9a:af:ef:25:8f:21:
                    91:3e:cf:7f:7c:f3:eb:31:b0:9a:a4:19:d3:02:0d:
                    10:03:3e:e9:39:0c:ff:fb:09:c7:2c:2a:e3:4d:60:
                    9c:99:23:da:44:d6:00:3a:79:51:d2:1c:15:7a:a1:
                    61:5d:df:2a:73:e6:99:22:15:21:8b:e8:50:1e:ea:
                    55:c3:fc:69:bc:7a:4f:c5:5d:c4:f2:15:7e:e0:e8:
                    fe:ef:2f:9f:8a:ad:00:4f:f2:09:dd:76:f9:fb:09:
                    ae:ea:6e:c9:28:05:50:42:b3:55:4b:fc:1d:7d:da:
                    e4:be:6a:16:76:d5:41:4a:e2:d3:27:74:2a:a1:92:
                    5d:44:36:d1:92:f5:64:09:d0:e9:bb:d1:d6:7d:2f:
                    28:74:06:7b:7f:28:a8:45:8c:99:06:3c:e7:f0:ea:
                    3e:5b:81:d8:44:77:65:32:fc:7e:fa:ea:81:9f:a7:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6D:6F:E9:03:64:72:5F:E1:A9:21:0E:A6:54:0F:90:D1:FB:01:36
            X509v3 Authority Key Identifier:
                keyid:F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:6c:c8:78:9c:3b:be:31:00:06:4b:e4:7c:ed:c7:88:30:
         8c:a5:47:2d:39:fc:d9:c7:d8:39:da:63:51:5c:2a:b4:57:89:
         4c:40:2c:81:5c:44:64:ad:85:bb:aa:27:c9:53:09:ec:61:ec:
         b9:65:90:a8:40:10:70:3b:0a:c1:1c:70:b0:94:cb:4b:f9:2c:
         da:98:d3:0a:35:69:18:97:da:67:3e:2f:e9:82:47:31:cc:10:
         a9:0c:22:fe:93:2f:1d:44:f4:05:82:d2:7b:90:52:aa:34:40:
         17:e1:44:6b:a2:fc:4f:49:d7:56:b6:af:7f:00:e4:64:5f:61:
         21:56:07:a8:f7:b0:5f:14:a5:1b:f3:76:11:4a:12:77:59:07:
         c6:01:be:47:80:85:14:d2:80:0a:d8:d8:79:28:be:6c:4b:b0:
         7e:eb:28:76:59:36:c0:65:b4:38:26:3b:81:ae:c9:e3:45:a3:
         7d:aa:05:6f:88:f6:1d:2b:03:82:3b:80:3d:4d:23:39:17:1e:
         06:e2:4f:41:5a:12:9d:61:db:39:c6:6e:ff:a3:1e:27:f1:4f:
         a5:24:ad:53:d6:e0:75:34:79:66:54:dd:b6:1a:4a:8e:8f:f6:
         7f:e9:3d:90:7f:67:b0:be:92:13:ae:35:ea:74:fe:b5:df:2b:
         a9:d8:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:25:21 2025 by rpki-client