Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
File:                     AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft (raw, json)
Hash identifier:          F3tadGXrkd4uerEokjCo8maOp5BJITjdUGw4cV3Zens=
Subject key identifier:   21:09:8E:01:37:88:F5:D6:88:D3:05:72:7A:90:42:57:60:ED:D6:A0
Authority key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
Certificate issuer:       /CN=F3695947AF/serialNumber=006E0BE21090792D18356197510AD340EC042353
Certificate serial:       24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
Manifest number:          24
Signing time:             Wed 17 Sep 2025 05:11:48 +0000
Manifest this update:     Wed 17 Sep 2025 05:11:47 +0000
Manifest next update:     Fri 19 Sep 2025 05:11:47 +0000
Files and hashes:         1: AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl (hash: g6St51t6K5oyxFnY82LzjFo4LbWofu4/OSPQgRXNYKY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353
        Validity
            Not Before: Sep 17 05:11:47 2025 GMT
            Not After : Sep 19 05:11:47 2025 GMT
        Subject: CN=68ca4314-226a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:02:0b:74:8b:84:ac:d7:57:2d:1f:a4:c7:
                    89:d7:b7:b7:f8:f0:4f:51:8e:e2:a8:cd:00:49:99:
                    fe:72:7b:62:3b:31:46:4d:cb:16:d1:d3:6e:6a:e5:
                    a3:2f:95:ba:71:6c:2b:69:71:dd:2c:9a:39:34:29:
                    b8:4a:b6:7b:ef:5f:37:b6:75:7e:18:ae:aa:da:5d:
                    05:91:6c:f6:fc:ab:72:b6:34:e4:5d:09:8c:5f:ab:
                    d7:c0:95:d1:95:6e:45:b6:a3:28:80:a7:86:01:b0:
                    a7:d1:f6:53:0a:6d:10:32:f0:77:cc:29:43:65:16:
                    3c:6e:a3:50:fe:b9:a7:82:e1:ee:74:57:4e:d1:e1:
                    05:dd:76:cb:80:4b:b1:c1:dc:d2:ec:5b:84:bf:1c:
                    a1:3b:f2:04:c0:0d:6e:ca:cd:2e:ea:e0:eb:b4:d2:
                    9f:0e:e2:ca:7c:9a:30:55:2c:e5:e2:18:ca:37:a4:
                    fa:27:08:f9:8f:32:ca:8d:5b:dd:bc:92:b6:2b:6f:
                    97:9e:43:c3:1f:22:c9:ab:0d:ff:ed:9a:15:15:4b:
                    c4:7e:be:38:27:b7:ce:85:39:07:88:51:09:2a:4c:
                    cd:3d:e1:ec:42:a9:e3:7f:1b:00:ba:e8:61:e3:b6:
                    cc:93:05:14:25:b5:7e:d5:d2:75:95:cb:8a:a6:f3:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:09:8E:01:37:88:F5:D6:88:D3:05:72:7A:90:42:57:60:ED:D6:A0
            X509v3 Authority Key Identifier:
                keyid:00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:e1:16:44:a2:63:83:da:3c:7e:86:b5:7f:ec:b7:d1:bd:fd:
         e7:e6:a4:3b:7f:56:6d:3d:d7:5e:d5:c6:b1:de:5d:2e:72:2a:
         d5:6d:a2:ca:c1:d5:4b:cc:23:3b:df:1e:af:45:ed:3b:12:54:
         4f:60:2a:b7:d7:cf:e4:2b:93:75:05:b6:a8:03:a7:95:0c:09:
         68:23:56:87:8d:bb:03:fe:d3:5c:6b:e8:79:6d:af:63:ec:31:
         5f:7c:68:cd:b9:ab:77:c3:b2:f3:19:80:1c:98:fb:dd:58:65:
         dc:89:fc:2a:6f:71:a5:41:60:d6:c9:bf:c8:e3:ca:b4:84:ef:
         04:59:3c:92:aa:5f:ba:7a:c8:f7:23:7f:77:6c:a8:c4:e7:c6:
         db:ef:16:21:c1:3b:94:a5:4d:a0:7f:c3:76:ff:ff:3d:1c:50:
         f2:11:c4:13:7e:81:3d:59:ac:97:47:55:e0:be:b3:4b:00:a2:
         80:35:76:cd:6a:c5:27:40:fa:84:05:b7:cd:1b:cc:48:96:7e:
         61:8f:98:24:92:bb:91:82:2b:99:cf:a1:2f:0c:c0:bc:74:8b:
         6d:09:8b:73:fc:6a:cf:e3:7b:da:1e:fd:1f:03:51:44:40:72:
         f7:2e:d1:00:c1:fd:f8:c3:40:a4:0f:3c:46:52:46:2a:3b:2e:
         9d:d9:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:34:12 2025 by rpki-client