Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
File:                     _p4BMgoOlVJFOamGqPA_ketPwy0.mft (raw, json)
Hash identifier:          lBzwxooigXiuIaZIOswyi0lGKcorhT52xx3ssye/ggw=
Subject key identifier:   76:09:E7:4C:D0:A5:28:5F:B7:16:2A:87:4A:46:8C:CF:A9:CC:83:54
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Certificate issuer:       /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial:       0256
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
Manifest number:          0254
Signing time:             Wed 17 Sep 2025 04:05:35 +0000
Manifest this update:     Wed 17 Sep 2025 04:05:34 +0000
Manifest next update:     Fri 19 Sep 2025 04:05:34 +0000
Files and hashes:         1: _p4BMgoOlVJFOamGqPA_ketPwy0.crl (hash: 6YHAUTm3MESywwYY1vdxJtXDGjy0V6r/cZ30M54R6k4=)
                          2: 311C4904CA4B11EEB1A20B86775412E6.roa (hash: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=)
                          3: DC6D06E4CBEB11EEA9655CAB775412E6.roa (hash: rI3Z0thMS8kcuZHwZrlMXa6Fqk3EKGjdiGllXF+/6As=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
        Validity
            Not Before: Sep 17 04:05:34 2025 GMT
            Not After : Sep 19 04:05:34 2025 GMT
        Subject: CN=68ca338e-f6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:c3:35:8a:43:4f:03:3c:a1:a6:6f:db:2f:
                    3a:1e:c5:cb:28:e3:0b:62:df:e2:a8:b2:ed:07:58:
                    e7:10:68:3d:d7:d5:df:fd:67:25:3a:b5:a1:04:b5:
                    b1:bf:95:14:91:ca:67:30:6d:e9:28:b6:5a:af:b9:
                    13:d2:12:89:4c:12:c0:41:5d:57:3c:8b:5b:cd:b4:
                    c4:c5:ba:fa:8c:1d:0d:ff:52:ff:9b:9b:6c:ae:26:
                    54:83:f1:72:ea:3c:a5:ad:83:8e:dd:da:c0:f8:38:
                    6f:04:94:55:6b:9c:e9:63:d5:0c:c1:29:c2:39:20:
                    3c:ae:ce:3e:72:95:6e:2f:41:f6:00:d9:b5:b0:35:
                    30:bb:ae:62:0e:f0:17:f2:38:05:15:b8:6b:5f:41:
                    76:2c:99:79:b9:86:3c:51:6b:9e:5c:ab:8a:1e:de:
                    6e:ff:b8:00:ae:c1:29:31:79:bb:30:eb:bf:5e:ef:
                    5c:fe:3e:27:4f:6a:f8:58:d4:e0:f4:01:1d:f0:9f:
                    4d:d3:d1:e0:c3:66:72:0b:31:3c:bf:06:63:26:91:
                    3e:f9:5b:cd:0a:45:75:1c:92:82:a9:99:60:0c:9f:
                    29:26:72:5b:ae:c2:9b:5b:6d:e7:68:cd:98:d5:13:
                    27:76:d0:05:50:bd:17:06:bd:c7:b6:9f:eb:f6:ef:
                    dc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:E7:4C:D0:A5:28:5F:B7:16:2A:87:4A:46:8C:CF:A9:CC:83:54
            X509v3 Authority Key Identifier:
                keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:e0:60:e8:36:8f:c7:7a:1b:7f:96:21:55:f8:df:58:27:
         bc:47:01:a7:66:74:36:5b:71:14:56:20:60:9b:b6:ee:6e:04:
         9f:be:e1:a6:c7:11:25:6f:9f:5c:a9:f1:69:64:fa:d8:8d:bd:
         e8:77:48:19:19:d7:89:ae:77:03:ab:b4:ed:26:fe:9b:0f:4b:
         18:62:f7:71:3e:d2:b7:87:90:bb:3a:97:5f:54:3c:f6:f7:a7:
         37:3d:79:6c:88:8d:39:47:8f:6d:2a:1a:fb:5c:be:6f:fe:cf:
         38:4f:e9:38:1d:54:c5:57:ee:65:04:5f:54:6a:54:34:a3:af:
         a1:15:8d:b8:34:79:5a:e8:9e:bc:5f:e1:93:55:7d:b2:ec:5a:
         fc:c3:a6:09:25:74:28:5e:63:89:53:61:59:5c:3c:9d:a5:55:
         92:4d:bf:be:e6:3c:4b:f8:e7:aa:00:c4:3d:d1:b4:22:28:03:
         5b:f9:9c:8a:fb:f4:3a:b9:b5:94:0f:70:41:b3:a3:7e:f3:02:
         a7:ac:a2:81:0d:f8:69:dc:62:8b:16:a5:a6:e3:d7:73:82:a1:
         a1:14:7d:a9:7b:77:74:6c:00:bd:38:b0:b8:0e:55:3c:cf:d0:
         f3:0f:22:26:87:de:31:c5:12:11:c5:80:47:b2:dc:4b:38:88:
         59:47:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:39:09 2025 by rpki-client