Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          kx6b9nH1jA2gcb7dlnKeXRTIQ+X/BjS+ASDdNnmA07E=
Subject key identifier:   EF:B6:9C:23:6D:6D:6E:33:81:A8:CA:2D:07:31:A1:6A:C3:80:8F:70
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       0155
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          0154
Signing time:             Wed 17 Sep 2025 04:40:35 +0000
Manifest this update:     Wed 17 Sep 2025 04:40:34 +0000
Manifest next update:     Fri 19 Sep 2025 04:40:34 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: 4D8Mj5zTxc1MAhqfUVK63zOsxSwDN0oH3Nm8jD2E4vA=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF, serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Sep 17 04:40:34 2025 GMT
            Not After : Sep 19 04:40:34 2025 GMT
        Subject: CN=68ca3bc3-cf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:64:9d:6f:d9:33:59:34:76:eb:59:9b:74:
                    14:a9:67:4a:f1:b9:4a:82:90:b1:00:7b:3a:b2:0b:
                    a7:a5:72:21:de:da:45:52:aa:ec:c4:e3:1a:8e:da:
                    2f:37:3e:0a:6b:64:60:fb:8d:0f:19:d4:1a:20:61:
                    78:f1:d8:20:94:3d:5e:56:15:a0:7d:4f:99:9c:55:
                    12:67:d9:71:6b:6f:52:cf:e3:14:74:22:7c:81:50:
                    9f:ba:1e:0e:5b:e7:d0:f7:73:ba:8a:6a:6c:a2:69:
                    d1:ba:75:72:40:16:54:e2:da:80:4d:71:79:d4:3e:
                    11:c4:a0:f1:11:2f:ed:49:dd:8d:16:bf:b6:f5:b5:
                    fe:19:7e:6d:55:4c:89:a2:8f:a8:20:82:2e:e9:9e:
                    6e:da:c1:9f:68:80:bb:ba:79:e3:ff:01:56:a5:17:
                    c9:e1:15:d2:c3:e2:40:97:a4:08:32:3f:a7:86:aa:
                    4c:21:0d:b9:53:f0:c2:a4:9b:be:eb:65:86:b2:91:
                    f4:b1:ea:75:d2:64:76:74:8e:06:93:20:c9:e9:b2:
                    e7:14:58:7e:a1:9f:8b:03:cd:98:ad:d0:f0:7c:49:
                    bb:f5:ca:98:04:a8:ab:24:29:57:e5:37:3c:88:80:
                    62:f7:23:f6:99:13:7f:4a:73:59:0d:55:2c:17:f2:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B6:9C:23:6D:6D:6E:33:81:A8:CA:2D:07:31:A1:6A:C3:80:8F:70
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:fb:1d:e9:4f:df:62:08:10:14:62:f8:4f:eb:54:ed:bd:
         c7:6d:d0:e4:8f:28:3c:16:33:43:d4:02:5b:38:52:0a:16:ae:
         3d:42:20:e1:c8:e2:fb:c2:bb:12:f0:97:e6:c2:f9:1e:82:e0:
         44:fd:34:72:65:09:0b:c7:e0:88:23:9e:76:37:77:af:8d:c1:
         d9:da:35:24:93:fa:b5:07:59:7d:75:2f:35:c7:85:0e:00:ba:
         64:73:06:3c:07:78:7b:41:d0:58:f4:cc:7a:63:a4:e6:5a:bd:
         59:cd:52:5d:8a:4e:4a:d5:f7:23:84:0f:7c:9a:37:fc:db:b7:
         50:2b:bf:41:a0:c6:43:14:15:c0:f9:bc:43:dc:2c:09:42:90:
         64:0b:74:33:f7:d2:50:d5:be:29:28:97:ec:4b:c3:74:55:cd:
         a7:af:fe:d6:ca:27:fb:6c:dc:1f:c8:16:0d:84:7d:86:aa:2d:
         d0:95:64:02:59:d2:bd:b4:a7:f6:9b:5d:be:fb:16:b2:56:46:
         ba:b7:bf:41:37:29:93:62:1d:97:66:cd:aa:34:64:ae:ac:3d:
         39:5c:54:60:08:da:bc:b6:53:0c:b1:6b:80:9d:56:17:02:82:
         92:36:ed:4d:2c:23:e5:26:40:87:c8:0e:f6:7d:53:b3:0a:4f:
         ec:86:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:27:29 2025 by rpki-client