Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File:                     KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier:          Fzgp3kuoTwk2iT3yyqwL8dNwBFzgaXw4SGdPBp2gGgM=
Subject key identifier:   41:81:88:FE:99:1A:14:3E:BA:2C:7C:97:47:EF:C0:86:1D:6F:31:85
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer:       /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial:       016A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number:          0169
Signing time:             Fri 06 Jun 2025 04:36:56 +0000
Manifest this update:     Fri 06 Jun 2025 04:36:55 +0000
Manifest next update:     Sun 08 Jun 2025 04:36:55 +0000
Files and hashes:         1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: 0npkWRxpr+jns94MJLRLxgCkKZnJ5UqINnz06cf91+8=)
                          2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 04:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
        Validity
            Not Before: Jun  6 04:36:55 2025 GMT
            Not After : Jun  8 04:36:55 2025 GMT
        Subject: CN=68427067-7abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:a3:2c:79:f4:64:7d:55:8c:13:7f:9e:b7:
                    56:a2:a6:c5:b8:4f:45:dd:85:16:d4:53:f0:40:8a:
                    68:dc:5f:2f:3a:ad:9f:5d:15:8e:e3:0a:be:04:3d:
                    54:bd:07:08:d5:79:7b:d7:a6:d5:fa:ae:2d:fc:8b:
                    42:67:10:36:10:76:37:51:41:5c:f2:fc:98:38:6c:
                    7d:f2:dc:cd:f4:7c:e3:85:9e:76:b1:bc:03:d5:6f:
                    9f:53:54:50:e7:d5:6c:d6:05:45:b1:16:aa:6b:48:
                    94:4d:2f:63:f1:b2:d5:64:21:b6:03:b1:e7:36:7a:
                    8b:31:4a:a9:71:3e:8f:15:5d:2c:b8:09:db:fd:2e:
                    72:69:37:6c:1d:1a:79:e6:03:e5:09:34:a9:f7:32:
                    f2:2a:33:0a:e4:b3:b3:17:69:4e:44:78:2b:40:c7:
                    6a:20:d3:b6:03:b4:45:92:0e:52:2e:8a:f3:7f:80:
                    53:a2:e0:a1:38:3b:f1:2e:64:84:4c:c4:76:13:9c:
                    24:03:63:31:41:09:85:36:91:09:53:54:6f:a5:03:
                    a6:ff:97:f6:19:5e:c1:bc:da:f1:3d:83:a0:fa:cf:
                    9d:3a:b1:54:a1:fc:20:ff:0b:4d:f5:f8:84:0e:49:
                    ad:54:d7:96:8b:47:2f:bd:2b:7d:c6:f2:fb:64:a5:
                    f9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:88:FE:99:1A:14:3E:BA:2C:7C:97:47:EF:C0:86:1D:6F:31:85
            X509v3 Authority Key Identifier:
                keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:61:c7:bc:74:49:1c:41:5c:17:16:1e:96:48:01:4d:a8:d5:
         dd:1c:27:7b:68:2d:b8:bd:d2:79:69:b1:5e:51:12:e3:ec:2a:
         62:53:be:5c:01:1e:2b:63:9c:dc:4d:85:f1:d5:fa:78:ac:d2:
         b4:09:ee:ca:ed:fc:93:19:7b:28:e7:78:48:52:d4:8e:6e:96:
         62:b7:09:40:84:4a:27:65:7d:f3:a5:f9:5d:b3:af:55:2b:c3:
         17:cd:83:ad:0d:6d:3a:22:7c:98:48:33:1e:78:6e:fe:f9:fb:
         e5:56:33:04:af:a3:bd:ad:c6:d8:50:5c:c3:88:b7:b9:6c:d7:
         db:81:f8:fb:3a:4f:c7:4a:41:c0:ca:4e:a9:71:39:0c:43:b4:
         d8:65:22:43:c0:32:c1:f9:58:e0:18:26:52:63:f7:c4:be:f8:
         c4:20:09:05:d6:d6:13:0b:b8:53:d1:cb:a9:a9:9b:a5:1c:42:
         db:93:3a:a8:22:46:cc:59:4e:4c:b4:fc:23:f5:35:ad:ca:a7:
         6d:7b:fb:3f:6e:b1:dc:ba:71:f5:16:7e:62:cc:23:18:f8:cb:
         45:4a:db:43:d6:85:a7:0f:96:dc:bf:63:3e:e4:2c:43:82:20:
         53:25:4c:c2:cf:99:24:e0:e7:75:59:f4:69:63:c1:ae:5e:3c:
         a7:de:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:13 2025 by rpki-client