Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
File:                     On6mEjuyi5myrc0qWftjiY7momU.mft (raw, json)
Hash identifier:          +9uHYOGUj3YU/6gScbSKIYHJY1W0dGrQx4ub0ZnEJrk=
Subject key identifier:   91:43:A3:CC:0F:E1:FB:9F:51:BB:8F:CE:75:37:4E:C1:99:1F:7E:50
Authority key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Certificate issuer:       /CN=F36A0B3BAF/serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
Certificate serial:       BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
Manifest number:          B9
Signing time:             Thu 31 Jul 2025 05:20:53 +0000
Manifest this update:     Thu 31 Jul 2025 05:20:51 +0000
Manifest next update:     Sat 02 Aug 2025 05:20:51 +0000
Files and hashes:         1: On6mEjuyi5myrc0qWftjiY7momU.crl (hash: nvXWbDIqV82qybPvAP/Y+H6D0XMSUYr1K8BbfkOwbY8=)
                          2: 8500AAA4DFA511EFA4A0995A762E951A.roa (hash: vzRjRuX2GZhGU/X4T8gnBdvjxS1YirPqGZKLuKJg1+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0B3BAF, serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
        Validity
            Not Before: Jul 31 05:20:51 2025 GMT
            Not After : Aug  2 05:20:51 2025 GMT
        Subject: CN=688afd34-aa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:91:ca:8f:b8:6e:d3:7c:71:5e:5c:67:b7:
                    6c:f1:43:1a:1b:b4:cb:17:ed:d7:94:fb:42:6f:e4:
                    10:fe:49:24:93:7f:31:13:9e:7c:3b:10:d3:ee:f1:
                    c4:18:d1:2c:ea:d6:6f:2f:cf:bf:7e:b5:08:93:6e:
                    14:f4:6d:7c:c9:9a:bf:38:c9:89:8e:4f:cd:06:ee:
                    f9:f2:78:28:ea:e5:a0:ff:51:ac:99:26:be:2e:c0:
                    51:53:20:42:6a:56:6b:05:69:af:d6:7d:a9:e8:68:
                    43:93:38:d1:99:f9:6f:c7:73:4e:e8:91:8c:0e:41:
                    1c:a4:5b:9c:29:1c:69:23:b7:f7:37:f5:b3:a1:9b:
                    61:a4:60:d4:3f:eb:0c:86:31:d7:f3:9a:db:13:19:
                    5d:4f:f1:4a:1a:e6:b9:8d:66:0a:5c:10:28:98:bf:
                    43:fe:14:e8:33:d8:05:7c:58:6e:8c:bf:02:71:a1:
                    cf:c2:88:aa:ce:56:92:eb:0b:75:09:eb:1f:49:4c:
                    62:a0:a4:b1:ca:f7:16:21:da:64:11:7b:2f:d6:73:
                    14:0f:00:8e:b4:73:cf:25:57:a7:ef:49:37:26:12:
                    00:37:ac:34:93:fe:e2:73:6b:d9:ae:8c:ac:f0:05:
                    23:51:0f:bb:9a:d5:2f:34:57:43:62:de:2c:94:92:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:43:A3:CC:0F:E1:FB:9F:51:BB:8F:CE:75:37:4E:C1:99:1F:7E:50
            X509v3 Authority Key Identifier:
                keyid:3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b0:35:77:6c:8a:3e:e1:5f:d7:30:bc:9a:c7:aa:49:74:99:
         5d:2f:bf:f9:47:e4:d5:2f:de:c5:96:ca:09:b7:3a:95:f0:77:
         36:3a:4c:72:70:e2:c3:27:2c:27:9f:47:74:8d:e6:83:34:e7:
         09:ed:7d:28:12:4f:be:68:56:48:36:ff:5c:e1:7b:dc:79:c3:
         1f:59:d6:ab:f7:ff:a1:92:98:b7:24:ff:ae:0a:19:4c:1a:78:
         1f:ba:1a:07:95:ae:cf:85:5f:d3:07:38:ca:73:26:73:d2:d1:
         bb:93:40:88:5d:95:19:4e:0a:38:82:c7:d1:35:ea:91:25:d7:
         11:31:f1:23:a5:85:2a:da:24:05:02:d4:3c:44:9f:a0:17:68:
         57:fd:49:4b:f2:42:cb:f3:88:fb:ac:ef:3b:5a:01:24:94:58:
         04:9d:17:1e:3c:e4:d8:3a:c3:6d:f3:7d:e4:e9:ec:ad:64:3d:
         77:bf:ac:48:12:56:b8:99:6a:c1:03:9f:c3:db:31:80:84:07:
         08:9b:5d:7e:ef:00:e0:1a:26:ca:6b:98:98:9b:9a:76:37:f3:
         5d:52:c4:59:2a:ce:2a:b7:ea:3e:42:1c:3e:c2:97:d7:aa:24:
         a2:5a:ba:e6:8f:43:4e:cf:97:21:d9:96:ab:12:28:20:da:97:
         59:94:ca:9b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICALowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTBCM0JBRjExMC8GA1UEBRMoM0E3RUE2MTIzQkIyOEI5OUIyQURDRDJBNTlGQjYz
ODk4RUU2QTI2NTAeFw0yNTA3MzEwNTIwNTFaFw0yNTA4MDIwNTIwNTFaMBgxFjAU
BgNVBAMTDTY4OGFmZDM0LWFhNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+h5HKj7hu03xxXlxnt2zxQxobtMsX7deU+0Jv5BD+SSSTfzETnnw7ENPu
8cQY0Szq1m8vz79+tQiTbhT0bXzJmr84yYmOT80G7vnyeCjq5aD/UayZJr4uwFFT
IEJqVmsFaa/WfanoaEOTONGZ+W/Hc07okYwOQRykW5wpHGkjt/c39bOhm2GkYNQ/
6wyGMdfzmtsTGV1P8Uoa5rmNZgpcECiYv0P+FOgz2AV8WG6MvwJxoc/CiKrOVpLr
C3UJ6x9JTGKgpLHK9xYh2mQRey/WcxQPAI60c88lV6fvSTcmEgA3rDST/uJza9mu
jKzwBSNRD7ua1S80V0Ni3iyUkhDxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkUOj
zA/h+59Ru4/OdTdOwZkfflAwHwYDVR0jBBgwFoAUOn6mEjuyi5myrc0qWftjiY7m
omUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEwQjNCL0VDNjkyODEyREZBMzExRUZBN0E5MEM0RTc2MkU5NTFBL09uNm1F
anV5aTVteXJjMHFXZnRqaVk3bW9tVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09uNm1FanV5aTVteXJjMHFXZnRqaVk3bW9tVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTBCM0IvRUM2OTI4MTJERkEzMTFFRkE3QTkwQzRFNzYy
RTk1MUEvT242bUVqdXlpNW15cmMwcVdmdGppWTdtb21VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAsDV3bIo+4V/XMLyax6pJdJldL7/5
R+TVL97FlsoJtzqV8Hc2OkxycOLDJywnn0d0jeaDNOcJ7X0oEk++aFZINv9c4Xvc
ecMfWdar9/+hkpi3JP+uChlMGngfuhoHla7PhV/TBzjKcyZz0tG7k0CIXZUZTgo4
gsfRNeqRJdcRMfEjpYUq2iQFAtQ8RJ+gF2hX/UlL8kLL84j7rO87WgEklFgEnRce
POTYOsNt833k6eytZD13v6xIEla4mWrBA5/D2zGAhAcIm11+7wDgGibKa5iYm5p2
N/NdUsRZKs4qt+o+Qhw+wpfXqiSiWrrmj0NOz5ch2ZarEigg2pdZlMqb
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:24:21 2025 by rpki-client