Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
File:                     SJIyUipHGpLr60FtxMHfpUo9NAA.mft (raw, json)
Hash identifier:          70smVMCiEWRwyTCWUflzE7ZTnQqRNCBao3hjyK5GJvM=
Subject key identifier:   69:7F:CB:A5:DA:66:E8:68:CA:15:35:F0:FF:2A:DA:BF:DB:0E:15:30
Authority key identifier: 48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00
Certificate issuer:       /CN=F368F7EAAF/serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
Certificate serial:       44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
Manifest number:          43
Signing time:             Wed 17 Sep 2025 05:05:46 +0000
Manifest this update:     Wed 17 Sep 2025 05:05:45 +0000
Manifest next update:     Fri 19 Sep 2025 05:05:45 +0000
Files and hashes:         1: SJIyUipHGpLr60FtxMHfpUo9NAA.crl (hash: eqM7KvPCVxrlDO58YKNh12zbtP91Oi8dEY16EseA9C8=)
                          2: 3D3E113460A111F0BC66BDB5DAE4EC9C.roa (hash: Yz2LgMo8/maeZeqiFDXEgU1Kho0yd40MGr9r17BWqfM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F7EAAF, serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
        Validity
            Not Before: Sep 17 05:05:45 2025 GMT
            Not After : Sep 19 05:05:45 2025 GMT
        Subject: CN=68ca41a9-ddfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:3e:9b:b9:62:d3:fb:b8:f5:87:8a:61:11:
                    dd:b6:08:83:77:21:37:ef:1f:2f:94:82:74:b1:0b:
                    3e:a1:b2:62:d6:dc:12:66:03:e9:c5:dd:c2:ae:54:
                    cc:57:f3:61:3e:f9:29:d5:0f:90:9d:9a:88:d5:a9:
                    58:cc:27:26:a2:08:51:f9:a0:15:d7:75:e4:4a:dc:
                    02:eb:cc:44:97:3d:fb:55:5a:43:ab:e1:96:4c:54:
                    fd:05:20:59:4e:54:d6:92:8e:3b:e7:21:b5:5c:e3:
                    ad:12:c1:a1:e4:5a:87:b7:a7:e7:ba:13:8f:07:2f:
                    ea:6e:08:12:92:67:b4:dd:c8:24:01:ff:87:04:21:
                    0c:d2:24:a5:5c:d9:3e:83:ef:b4:77:ef:1c:51:08:
                    aa:b6:4a:ec:27:f9:9a:a6:d5:21:d9:28:db:2d:ba:
                    81:3a:b4:b2:0c:6e:4e:76:43:4f:e4:2e:dc:3e:83:
                    e2:13:ac:1b:8b:38:18:fd:0f:6b:8c:9b:ba:fe:ac:
                    61:5a:19:96:6b:fd:2f:b5:3b:6f:04:6f:97:c3:90:
                    68:76:94:c0:af:2f:49:e3:83:e0:ab:5b:5e:e5:2b:
                    20:ea:7b:1e:b0:96:96:79:e4:a0:9b:a2:27:2c:06:
                    fa:57:c7:d2:2f:e7:4f:90:d9:2e:d6:0b:af:86:e8:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:CB:A5:DA:66:E8:68:CA:15:35:F0:FF:2A:DA:BF:DB:0E:15:30
            X509v3 Authority Key Identifier:
                keyid:48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:71:ad:a0:dd:44:81:d5:de:e0:f3:a2:56:e3:7c:d0:0d:e5:
         51:01:54:87:60:0c:83:26:5c:d9:fb:95:d3:eb:f1:42:42:6e:
         2b:77:a8:5e:82:63:93:9f:90:be:93:18:cf:97:fd:04:e3:80:
         7e:83:b1:a2:3f:68:d3:54:03:92:28:d8:31:51:f2:90:ae:3d:
         77:7a:97:63:28:08:04:d0:29:53:be:d5:ad:25:27:14:5f:ef:
         7b:d9:01:93:db:c1:d0:b3:03:7a:fb:6c:5c:44:ae:00:a2:84:
         11:d1:a4:61:74:ec:2f:ba:ef:9f:ec:e5:4b:14:20:6c:a7:41:
         6c:ed:c5:d0:52:46:5a:c7:1f:33:b5:9b:ff:a3:24:06:5f:86:
         3c:a3:5d:65:c4:eb:fc:dd:de:a6:ff:af:d3:1b:9b:81:55:9e:
         a2:ea:7c:93:6b:09:a0:d7:3c:31:fd:63:ff:b9:92:67:8d:f9:
         ea:75:35:09:b7:7a:a1:96:e9:f2:ea:57:90:67:06:26:dc:e3:
         82:a0:56:96:a3:df:5f:5c:c3:8d:29:1d:59:21:4a:be:7b:66:
         e0:ce:cf:e8:eb:27:a9:d9:ad:10:2c:2e:2e:2b:11:bc:de:f4:
         bc:0b:97:c4:5c:01:36:19:c7:8e:62:8c:a1:06:c9:cd:55:06:
         0e:54:95:99
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBRDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
RjdFQUFGMTEwLwYDVQQFEyg0ODkyMzI1MjJBNDcxQTkyRUJFQjQxNkRDNEMxREZB
NTRBM0QzNDAwMB4XDTI1MDkxNzA1MDU0NVoXDTI1MDkxOTA1MDU0NVowGDEWMBQG
A1UEAxMNNjhjYTQxYTktZGRmYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANvAPpu5YtP7uPWHimER3bYIg3chN+8fL5SCdLELPqGyYtbcEmYD6cXdwq5U
zFfzYT75KdUPkJ2aiNWpWMwnJqIIUfmgFdd15ErcAuvMRJc9+1VaQ6vhlkxU/QUg
WU5U1pKOO+chtVzjrRLBoeRah7en57oTjwcv6m4IEpJntN3IJAH/hwQhDNIkpVzZ
PoPvtHfvHFEIqrZK7Cf5mqbVIdko2y26gTq0sgxuTnZDT+Qu3D6D4hOsG4s4GP0P
a4ybuv6sYVoZlmv9L7U7bwRvl8OQaHaUwK8vSeOD4KtbXuUrIOp7HrCWlnnkoJui
JywG+lfH0i/nT5DZLtYLr4boIdkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRpf8ul
2mboaMoVNfD/Ktq/2w4VMDAfBgNVHSMEGDAWgBRIkjJSKkcakuvrQW3Ewd+lSj00
ADAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OEY3RUEvRjNGQjc3ODg2MDlGMTFGMDk0MUIxMEFEREFFNEVDOUMvU0pJeVVp
cEhHcExyNjBGdHhNSGZwVW85TkFBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvU0pJeVVpcEhHcExyNjBGdHhNSGZwVW85TkFBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjdFQS9GM0ZCNzc4ODYwOUYxMUYwOTQxQjEwQUREQUU0
RUM5Qy9TSkl5VWlwSEdwTHI2MEZ0eE1IZnBVbzlOQUEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAMVxraDdRIHV3uDzolbjfNAN5VEBVIdg
DIMmXNn7ldPr8UJCbit3qF6CY5OfkL6TGM+X/QTjgH6DsaI/aNNUA5Io2DFR8pCu
PXd6l2MoCATQKVO+1a0lJxRf73vZAZPbwdCzA3r7bFxErgCihBHRpGF07C+675/s
5UsUIGynQWztxdBSRlrHHzO1m/+jJAZfhjyjXWXE6/zd3qb/r9Mbm4FVnqLqfJNr
CaDXPDH9Y/+5kmeN+ep1NQm3eqGW6fLqV5BnBibc44KgVpaj319cw40pHVkhSr57
ZuDOz+jrJ6nZrRAsLi4rEbze9LwLl8RcATYZx45ijKEGyc1VBg5UlZk=
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:36:42 2025 by rpki-client