Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File:                     gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier:          vnFTEAxrA9VXscEF67d9C8UdIav2nbn/jkIh7KcSxf8=
Subject key identifier:   2D:2B:A4:1D:66:B6:84:BA:E2:54:2E:DE:7D:7C:5D:14:33:59:CF:78
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer:       /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial:       FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number:          FB
Signing time:             Sun 27 Jul 2025 05:07:48 +0000
Manifest this update:     Sun 27 Jul 2025 05:07:47 +0000
Manifest next update:     Tue 29 Jul 2025 05:07:47 +0000
Files and hashes:         1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: 2CJAE8N6j+wxp6ql64LuRBdIdPaLRijQPUc/O7UBldg=)
                          2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
        Validity
            Not Before: Jul 27 05:07:47 2025 GMT
            Not After : Jul 29 05:07:47 2025 GMT
        Subject: CN=6885b424-78d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:37:67:ec:f3:1c:81:bc:aa:25:19:c7:13:
                    a5:6d:6c:4c:c3:c0:9d:f1:d7:63:d5:5f:60:92:1b:
                    33:7f:7e:85:34:db:66:07:1a:9b:6f:c9:a4:3e:75:
                    8b:4a:ef:22:4e:8e:06:46:de:08:7a:94:d4:2c:30:
                    f8:63:90:31:23:df:06:38:89:b3:f9:6a:fd:86:4c:
                    80:a3:5c:d2:53:01:3b:f3:64:e8:c5:62:eb:e9:fa:
                    27:8a:e3:12:0b:3e:1c:f8:80:fe:b9:5e:52:3d:36:
                    e5:51:40:15:78:17:28:87:8b:19:dd:ca:40:19:1b:
                    9d:7f:0b:59:da:f1:e4:40:d8:2c:96:f2:ea:63:8d:
                    af:2e:ad:a0:6b:f4:56:4c:d9:33:f8:83:51:8f:5e:
                    42:ee:5e:90:4b:3f:36:7e:44:40:62:8d:00:73:78:
                    07:93:fa:93:4f:61:b2:9a:ec:70:80:05:4d:84:40:
                    39:88:08:36:04:7a:94:f8:bd:5e:a0:26:87:19:4a:
                    8d:54:9f:bd:5d:02:10:25:31:cc:9f:0d:55:29:93:
                    0e:57:be:32:a1:c1:17:da:d7:f6:2e:29:73:0b:44:
                    c7:d4:92:9f:b7:a7:3a:33:51:bd:9c:0f:ab:0a:9f:
                    3e:a2:7e:91:cf:1d:0c:3d:02:28:61:e3:58:4a:79:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2B:A4:1D:66:B6:84:BA:E2:54:2E:DE:7D:7C:5D:14:33:59:CF:78
            X509v3 Authority Key Identifier:
                keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b8:1e:df:90:c1:de:0e:5d:c6:2c:26:3b:11:c3:23:32:7d:
         2a:88:97:73:13:31:0f:81:66:48:53:38:04:2f:6f:12:9c:ce:
         6d:e8:9d:4e:ed:d6:45:56:9e:8d:3b:3d:33:fb:25:a8:6f:2c:
         73:dc:f6:bb:8d:05:57:41:a6:4b:e9:b0:0b:58:f8:38:d8:f8:
         04:cd:88:b3:3a:20:c1:ae:14:b4:5d:31:dd:32:4e:7f:24:c4:
         03:51:84:1c:2a:41:c6:ef:15:d5:52:4d:3b:e0:29:84:c0:2f:
         88:60:1c:51:d6:27:3a:be:76:5a:3e:aa:1a:69:33:00:93:58:
         94:3f:18:86:37:d5:6d:ea:9f:90:96:19:9d:ad:36:0f:ea:38:
         06:ca:cc:8b:b2:b4:ce:e8:96:0c:29:83:7d:21:ea:14:ac:cc:
         49:52:fa:9d:cc:23:55:a0:11:90:78:5f:49:76:15:83:7d:bb:
         36:66:5f:c6:b9:8a:8c:2a:13:b1:f9:34:2c:e9:29:4b:f6:89:
         a1:cf:21:34:19:cf:70:4c:7e:a9:02:76:73:33:0d:c6:68:ae:
         24:aa:db:ac:78:b1:68:98:c1:70:3a:c6:8b:cb:b1:e1:20:8a:
         b6:69:20:35:30:31:e8:20:02:b1:1b:92:14:64:ce:3e:d5:91:
         b6:01:35:f6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTMxQzVBRjExMC8GA1UEBRMoODEyNzc0NERBNEVFMDAzQjI5REUxMTAzNEY3MkRF
QjhERkVDMjhGRDAeFw0yNTA3MjcwNTA3NDdaFw0yNTA3MjkwNTA3NDdaMBgxFjAU
BgNVBAMTDTY4ODViNDI0LTc4ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyyDdn7PMcgbyqJRnHE6VtbEzDwJ3x12PVX2CSGzN/foU022YHGptvyaQ+
dYtK7yJOjgZG3gh6lNQsMPhjkDEj3wY4ibP5av2GTICjXNJTATvzZOjFYuvp+ieK
4xILPhz4gP65XlI9NuVRQBV4FyiHixndykAZG51/C1na8eRA2CyW8upjja8uraBr
9FZM2TP4g1GPXkLuXpBLPzZ+REBijQBzeAeT+pNPYbKa7HCABU2EQDmICDYEepT4
vV6gJocZSo1Un71dAhAlMcyfDVUpkw5XvjKhwRfa1/YuKXMLRMfUkp+3pzozUb2c
D6sKnz6ifpHPHQw9Aihh41hKec75AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULSuk
HWa2hLriVC7efXxdFDNZz3gwHwYDVR0jBBgwFoAUgSd0TaTuADsp3hEDT3LeuN/s
KP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzMUM1LzZGOTA2MThBQUQ3RjExRUZBNTQ5ODY5Nzc2MkU5NTFBL2dTZDBU
YVR1QURzcDNoRURUM0xldU5fc0tQMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dTZDBUYVR1QURzcDNoRURUM0xldU5fc0tQMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTMxQzUvNkY5MDYxOEFBRDdGMTFFRkE1NDk4Njk3NzYy
RTk1MUEvZ1NkMFRhVHVBRHNwM2hFRFQzTGV1Tl9zS1AwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0uB7fkMHeDl3GLCY7EcMjMn0qiJdz
EzEPgWZIUzgEL28SnM5t6J1O7dZFVp6NOz0z+yWobyxz3Pa7jQVXQaZL6bALWPg4
2PgEzYizOiDBrhS0XTHdMk5/JMQDUYQcKkHG7xXVUk074CmEwC+IYBxR1ic6vnZa
PqoaaTMAk1iUPxiGN9Vt6p+QlhmdrTYP6jgGysyLsrTO6JYMKYN9IeoUrMxJUvqd
zCNVoBGQeF9JdhWDfbs2Zl/GuYqMKhOx+TQs6SlL9omhzyE0Gc9wTH6pAnZzMw3G
aK4kqtuseLFomMFwOsaLy7HhIIq2aSA1MDHoIAKxG5IUZM4+1ZG2ATX2
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:11 2025 by rpki-client