Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          tBnxA4eKY/ALchKEAg4YnaryTxv6L75eZ7+LNpRofnA=
Subject key identifier:   C8:1E:D0:AD:0E:35:C2:E5:26:B1:A8:7D:46:56:34:D0:9C:D9:A0:9B
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       0148
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          0147
Signing time:             Thu 18 Sep 2025 04:41:02 +0000
Manifest this update:     Thu 18 Sep 2025 04:41:01 +0000
Manifest next update:     Sat 20 Sep 2025 04:41:01 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: t7DNo7jdZ85l93eQ8MRjDkMoT4911rGZoJ62h+7pw0M=)
                          2: 06EE82A89B9E11EFA256DA5A762E951A.roa (hash: 2jh2P8eMrHu4GkQNFQFJgeOA87Bp3duiKWGcRIfCjWE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Sep 18 04:41:01 2025 GMT
            Not After : Sep 20 04:41:01 2025 GMT
        Subject: CN=68cb8d5e-89d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:11:cb:46:ff:5b:3b:35:a0:e3:08:0b:90:
                    77:02:1f:cf:ba:93:5b:ec:8b:d3:b6:6e:d1:0f:b5:
                    ec:2c:d3:1a:ea:44:bf:3a:0d:5c:9a:d5:0b:62:f9:
                    fa:91:81:40:63:9e:51:db:99:4f:30:fe:6d:bb:cc:
                    a7:88:31:8c:f3:50:64:b0:62:3a:10:0e:ba:0d:04:
                    60:7c:7f:86:ad:b2:e3:7e:c2:d9:1c:d3:e5:b4:9f:
                    83:90:ae:ff:b0:f8:81:74:c5:28:ff:52:cd:f7:02:
                    0c:a4:fd:2a:dc:80:0c:b7:dc:20:8b:07:e2:f7:ab:
                    93:77:5a:f3:63:66:b3:b2:3c:cd:6c:ac:68:f5:63:
                    d1:62:69:cb:af:50:98:10:c1:17:e9:3a:03:82:c4:
                    c4:40:38:4c:8a:35:c3:60:42:6d:25:11:47:e0:e1:
                    56:01:13:18:bb:67:12:31:f6:fd:44:b3:c7:1b:44:
                    2c:d2:c7:c9:10:41:00:22:7a:d8:c7:52:ad:ae:4d:
                    a5:9c:ae:b6:47:71:42:0e:00:4b:65:8f:90:cd:ad:
                    df:16:20:72:73:17:4f:78:99:ef:6c:d2:e0:18:39:
                    08:b5:30:07:a5:da:c8:0f:cc:30:32:07:3b:cd:a0:
                    bc:c9:ad:cd:fc:11:fa:99:db:7e:68:32:c9:f7:20:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:D0:AD:0E:35:C2:E5:26:B1:A8:7D:46:56:34:D0:9C:D9:A0:9B
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:31:3f:d2:64:29:14:62:24:e1:48:4b:32:62:39:1c:37:
         d0:63:b3:e0:37:e3:fd:19:3d:a7:cc:0e:63:ab:2d:a9:a6:0f:
         83:de:3a:fc:b7:d4:4a:5b:08:43:d6:f6:6d:36:69:c2:f4:82:
         5b:80:16:7b:f4:75:1d:38:d3:37:1d:f2:70:e9:94:89:11:34:
         52:df:00:ef:25:75:e8:11:54:c9:52:5c:8a:17:bb:a7:8c:4c:
         3f:82:28:a6:b1:35:b8:a6:32:66:01:af:bc:16:87:f8:c0:14:
         08:76:08:e3:9c:2f:46:21:41:b1:f5:73:97:01:2f:da:e0:52:
         e2:69:4a:1b:7d:45:47:75:50:09:fa:51:fd:eb:8f:bf:5e:0c:
         1b:42:22:91:7e:bf:cc:13:8f:a5:ef:8b:5e:6c:80:b2:df:7d:
         ff:bb:be:06:ad:5a:ca:a4:50:c7:ef:da:47:39:e9:48:ef:5f:
         28:f9:b2:71:5a:fe:07:02:fe:10:56:2f:79:85:23:e2:d0:34:
         a6:dd:7a:54:ec:ee:a5:eb:31:b7:46:78:b4:d6:69:ee:e0:de:
         7a:58:74:2e:41:78:00:3d:72:81:e2:d0:86:3c:cd:b6:76:9b:
         ce:8c:5b:fa:cc:9c:d4:a8:15:89:54:b9:3a:10:3b:39:d8:7f:
         2c:0a:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:09:08 2025 by rpki-client