Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          YLy7fl+CihgUjgDSONRXWMqXIHP2R/Lb40BCWJQ94uc=
Subject key identifier:   0B:38:14:39:D5:62:ED:95:B4:DD:74:AC:F4:C9:C2:5E:3A:AA:2F:64
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       0489
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          0482
Signing time:             Wed 17 Sep 2025 02:57:58 +0000
Manifest this update:     Wed 17 Sep 2025 02:57:58 +0000
Manifest next update:     Fri 19 Sep 2025 02:57:58 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: +TTJ0b0szRHGvG6/9c3s96xba3A7dU78Szi6Ad64X7E=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Sep 17 02:57:58 2025 GMT
            Not After : Sep 19 02:57:58 2025 GMT
        Subject: CN=68ca23b6-a6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:3e:7a:ef:49:29:bc:6d:9d:97:80:a6:83:
                    fa:e7:2d:09:57:c8:5b:31:3f:4d:dc:1a:e0:50:80:
                    95:c9:d8:33:41:46:76:77:01:7a:34:0a:0a:53:98:
                    f8:29:f3:b3:2d:1d:e2:9c:d4:23:12:f1:29:0e:6d:
                    f7:00:bf:2d:8a:ef:c9:97:b5:6d:1f:76:cd:c3:54:
                    ef:9c:79:aa:f4:a0:67:f3:e1:05:f2:e3:52:f2:61:
                    94:dd:7e:60:d4:c4:45:e9:c0:7d:59:b4:97:ae:48:
                    63:36:bc:d6:71:57:f8:7a:d8:af:04:09:df:61:ac:
                    79:c7:45:bf:c7:1c:58:02:c0:0c:dc:ea:3d:c1:fa:
                    7c:b3:97:ad:2d:44:36:63:e9:3f:44:c8:8e:c2:89:
                    cd:fb:29:23:e3:fe:6d:6d:e6:c3:56:49:10:60:c5:
                    3d:3f:21:dc:23:28:ea:14:e9:2b:74:3b:77:f6:68:
                    7f:9b:0f:a2:7b:6c:32:0c:b2:42:c7:a6:41:f5:c5:
                    1e:77:a1:38:d1:de:2a:9e:b3:ff:25:42:c5:13:39:
                    ff:81:75:af:98:9d:5d:79:78:e8:bf:fb:3d:d2:26:
                    ff:91:f8:65:b1:9b:38:32:b8:ea:81:4e:dd:4e:bd:
                    7e:62:32:20:39:3c:fd:aa:0e:03:56:d0:38:83:b1:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:14:39:D5:62:ED:95:B4:DD:74:AC:F4:C9:C2:5E:3A:AA:2F:64
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:26:57:01:0f:c2:31:48:a3:6d:62:8e:20:39:d2:6c:67:04:
         9b:57:78:f0:75:99:6a:4b:78:60:01:47:9a:d4:f1:e6:f8:a6:
         0e:76:aa:60:e8:ce:e4:52:fc:ca:32:27:95:6d:d3:6a:45:e1:
         44:e7:37:c3:cc:1f:5c:bf:00:af:b6:ad:fe:83:33:77:da:62:
         61:4d:ed:b6:88:a7:0f:71:f5:f1:66:33:b7:f1:59:ce:39:1b:
         dd:6e:4c:a6:48:92:a0:b3:b9:da:6f:96:ee:10:35:0c:53:32:
         35:82:55:d4:3c:eb:e7:f8:78:31:f1:12:7a:c8:3d:c7:89:51:
         4b:81:81:1c:ab:8a:b3:c2:8c:30:52:df:70:4a:74:66:88:98:
         6b:83:23:1c:53:10:d6:f4:4f:56:8f:e8:ba:d4:c8:0d:43:86:
         61:f9:65:5e:0d:9b:c8:0a:9a:c5:6d:14:6e:99:94:7f:47:16:
         10:02:5e:4b:2e:bd:6d:1a:6c:e5:d6:6e:14:be:f1:a8:b7:96:
         da:65:57:63:9c:41:9c:75:70:a0:4d:b4:a3:cc:a9:1b:07:f7:
         6b:2e:6e:84:6f:f3:72:8c:74:29:46:ad:97:77:0c:8f:3e:ba:
         2f:d7:20:79:37:c1:d1:da:7c:dd:07:9c:c9:3d:5a:90:84:05:
         07:22:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:05:54 2025 by rpki-client