Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
File:                     XriN9L-QidcEmh--gAXmIequhis.mft (raw, json)
Hash identifier:          wXj43DuSjl13kLaMdZ/zfEnWW6ONjAIvZ+dd+I/I70k=
Subject key identifier:   89:08:3F:B1:85:04:55:37:D9:32:8A:0B:34:E8:BD:F0:97:76:0C:FB
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Certificate issuer:       /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial:       0861
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
Manifest number:          084A
Signing time:             Tue 16 Sep 2025 01:42:33 +0000
Manifest this update:     Tue 16 Sep 2025 01:42:32 +0000
Manifest next update:     Thu 18 Sep 2025 01:42:32 +0000
Files and hashes:         1: XriN9L-QidcEmh--gAXmIequhis.crl (hash: AeDX7pfuHQOFy32a59UeDcZUrp/cQnKGH4QK6HZJMS8=)
                          2: 6E72E470BB7711EA81C17268F8AEA228.roa (hash: COX4w/jxxz6FilKDwda77AXXF6hQ4KkSqj9A8makL9E=)
                          3: 4240206CB6A811EAB1BB832FF8AEA228.roa (hash: iCq6/gFL3W7WK6Z6bjLnYmu6Mw0Dp25G63lqs3EndEM=)
                          4: C63C8128B69711EA97FF0A1FF8AEA228.roa (hash: bIk7dIWbWl/XKAWXBSykBpufOHSJfKEIhHA3UnMJ3FA=)
                          5: ACEC39FEAF0111EABB62A281F8AEA228.roa (hash: Rvipb3RZAvyR06O0oS0eT7H0auR1Anu2PCQQtZz6wt4=)
                          6: 1E44EE7CB6A811EAA1B84B2FF8AEA228.roa (hash: zEtnwOQxp1tgJgoUqxYeV/ZfUYlwTe3GM5ZvpJND5Xo=)
                          7: CB0FA5F6F2BB11EC8A4DDD82F1222468.roa (hash: lxEMymTJPboRJ7EWX4tzQoZnRdc9Q6NShyvK1e1Jd3w=)
                          8: 9ABA216AF2BB11EC81733F82F1222468.roa (hash: 6FiCP8b3kWEY92TY9AhpbuVK5DAe1gKHF9Zfm6ybL6Q=)
                          9: 65660562B69811EAAC26BF1FF8AEA228.roa (hash: VIH+Uyp2iRMbrGnCMTVkoGZ68i3KOd6ztZgLPY+SoCA=)
                          10: 84EB4824B6A811EA9608C52FF8AEA228.roa (hash: sbZkg63w3bwQ28mfw2+1rFKNpRezwNvC/sHtAA39z5o=)
                          11: 0C030AA8C75311EF963E0590762E951A.roa (hash: bNMA6PZ1v1d52Zo3rBQ17thuGGh+4io0kA8gWh05KQo=)
                          12: 61A57F42B6A811EA8F77A82FF8AEA228.roa (hash: Vv24BsCUqeaHub4gOsUG210bOUJYooPQGDyZsC9Xk6w=)
                          13: 9FEAD93C759E11EF89A6AD67762E951A.roa (hash: ivnmKqYJqB476OpSS3/VFXK0kDuTC5Zwz92WOyZCMeU=)
                          14: 19804272F4B911EDB9B23E4B4AD9E6FC.roa (hash: TWFrU0yfEzXK68AK6K9dPpBTBdlS/QVZnYBhV0AEQDo=)
                          15: 577AF7EE169A11EFAF5B8016017001B1.roa (hash: ebHFPBVFI6FEnS8auwZ3hkJ3n12esrKQ6jhZHxu6AUo=)
                          16: 2F5F631AB69711EABAA2731EF8AEA228.roa (hash: IqUUMgldL8ngf2evOYR523Esg7wYavO99U4lFQ/hYmM=)
                          17: 8A31DAE8B69711EA8CBAE61EF8AEA228.roa (hash: YU+Via1Ja0ARgovK6C4u9sVVn0Ra7GJCUZol0QFjLLQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AF, serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
        Validity
            Not Before: Sep 16 01:42:32 2025 GMT
            Not After : Sep 18 01:42:32 2025 GMT
        Subject: CN=68c8c089-0059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:90:3e:eb:98:eb:4a:7e:21:6a:89:41:f0:
                    f3:bd:5a:15:ce:3f:f9:2d:b5:7a:30:4d:45:79:90:
                    75:ad:99:8b:c5:d6:74:1b:02:5a:2f:93:35:e9:16:
                    03:c4:ba:bf:11:cf:4e:76:58:2a:b0:22:8a:71:18:
                    62:c2:43:51:4e:1a:26:7c:1a:b5:a9:c7:cb:45:50:
                    d5:24:7a:fc:39:c0:4a:51:5d:d1:c0:64:ae:a3:7f:
                    fd:de:3e:21:52:49:44:68:46:88:62:61:f1:cb:4f:
                    fb:28:6f:eb:4f:3a:f9:9d:7a:96:f4:22:17:3d:5d:
                    e0:16:07:d3:06:68:66:3f:25:d6:37:94:17:b7:a7:
                    77:0f:ec:5d:ea:a5:e8:2b:36:f5:b8:d4:a5:4a:9a:
                    49:eb:16:8d:a9:9d:c0:50:53:27:45:08:85:05:d0:
                    4c:15:c7:32:f7:b6:ea:a4:6b:8e:ed:ff:c9:ad:9b:
                    da:d6:20:08:ea:dd:47:07:24:8a:10:dc:50:12:da:
                    7f:ad:a7:22:6e:f3:a2:54:0e:2e:d1:04:19:3c:11:
                    57:4c:00:e9:39:01:70:20:32:1b:0e:3b:37:0d:b4:
                    56:3e:ca:60:48:89:64:c8:75:3f:dd:01:79:84:ce:
                    e0:da:fb:14:7b:5b:9f:dd:d2:a7:63:a5:61:f2:1b:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:08:3F:B1:85:04:55:37:D9:32:8A:0B:34:E8:BD:F0:97:76:0C:FB
            X509v3 Authority Key Identifier:
                keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:05:36:62:e3:c4:f5:db:d0:67:7e:86:cc:78:48:0b:ab:
         fd:df:c6:6c:77:9e:d5:48:5b:b4:34:98:d9:94:eb:0b:28:32:
         30:27:a7:05:89:11:a3:84:e2:11:af:5c:b9:77:49:49:d2:ea:
         06:ba:23:bc:de:b0:ae:e8:8d:c9:fd:b2:f8:7b:62:36:ea:e0:
         e8:3a:c6:ec:4d:23:16:3b:d5:8f:8a:73:34:43:0f:be:ef:23:
         03:85:2d:5a:88:a8:3b:1b:72:f9:39:41:5b:61:12:de:ba:ec:
         ef:f0:30:92:8b:97:1d:4f:8a:c1:46:87:b3:87:9d:0f:26:63:
         b2:0d:a5:19:fc:e3:ce:84:c5:d9:6b:7c:21:16:50:ec:55:20:
         29:59:80:e0:3c:e1:6d:fa:cb:a9:f1:95:63:3f:6c:1e:e4:74:
         fa:ae:42:81:04:e1:36:50:a5:0d:cc:07:58:9e:24:a6:a5:8a:
         60:7c:bb:d2:9d:47:32:ec:a5:62:a7:3a:57:0e:0d:62:1c:42:
         b6:18:8c:2a:ad:cd:22:26:b3:51:e1:ec:de:11:24:c2:0c:89:
         23:fe:52:f6:11:c8:12:33:98:f9:d5:3b:47:5b:c5:0c:8d:1d:
         f5:0c:ef:6a:58:40:86:17:3d:9a:57:77:c3:ff:8f:83:63:ca:
         de:d2:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:04:04 2025 by rpki-client