Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
File:                     i-QDW-vJyDQotaJ76Fuslm125cs.mft (raw, json)
Hash identifier:          aTQZQdJHlqwzR01xvTlNJjIoo0YD1fUEecZqJ8tvgqE=
Subject key identifier:   9D:B3:24:E4:CB:AF:C2:67:A0:C0:EB:DC:F7:C6:88:EC:2D:CA:B9:DD
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Certificate issuer:       /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial:       0368
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
Manifest number:          0362
Signing time:             Fri 06 Jun 2025 03:31:08 +0000
Manifest this update:     Fri 06 Jun 2025 03:31:07 +0000
Manifest next update:     Sun 08 Jun 2025 03:31:07 +0000
Files and hashes:         1: i-QDW-vJyDQotaJ76Fuslm125cs.crl (hash: /4wIc6MKHcSeYrIOzYhd/0gl3GVVy4r8MDSuH0frs/4=)
                          2: 557725A0B21511EF88D2448C762E951A.roa (hash: opZztqXESofrVmYo2p5Jk1wm+34HapZU5YnopzpKiHA=)
                          3: 9394FD62B21511EFBC825D8E762E951A.roa (hash: lu1oced98iyT24G4vw7hwl0wpa8JR56UCd+rbr6ylXY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A854FAF, serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
        Validity
            Not Before: Jun  6 03:31:07 2025 GMT
            Not After : Jun  8 03:31:07 2025 GMT
        Subject: CN=684260fc-b5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:b9:84:95:d1:35:39:5a:63:b6:67:50:7d:
                    50:85:62:60:99:22:d2:03:fd:6e:b7:5c:c4:9c:9e:
                    c4:b5:0e:35:1d:52:0f:40:2b:28:40:40:9c:a5:6d:
                    8c:21:84:82:00:df:e2:ce:dd:4e:95:22:da:1c:90:
                    d8:9f:a9:fd:fb:4a:ab:46:b7:cc:a6:81:3d:45:0e:
                    0d:80:2f:c1:c6:01:ef:2c:88:e4:10:d7:78:3f:ee:
                    e6:09:4e:ef:54:f2:81:35:24:d4:9e:b1:cc:64:e9:
                    c1:72:4b:4e:e9:b8:31:f7:d6:c9:1f:03:4e:58:59:
                    57:d8:fa:22:6a:2a:66:7c:de:17:e7:d8:45:25:1c:
                    1d:46:a7:60:62:c5:36:cf:70:86:ef:f9:a2:fa:ef:
                    f6:4f:d6:29:4c:d2:62:e5:05:9e:37:29:2d:db:e3:
                    6a:5b:9f:4c:e0:ef:28:52:55:42:89:1f:8d:a1:df:
                    11:6d:76:7d:e2:a7:3b:b1:9c:04:56:29:52:d4:c9:
                    46:ef:24:58:75:9b:14:fe:25:4c:aa:d2:50:be:50:
                    32:83:36:81:9e:78:15:e6:0e:b4:b6:b7:c2:d7:45:
                    96:0a:ec:f1:42:a3:89:ed:bf:01:79:44:97:5b:00:
                    b7:20:2a:f7:22:56:1c:38:bc:38:8d:8e:37:8b:81:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B3:24:E4:CB:AF:C2:67:A0:C0:EB:DC:F7:C6:88:EC:2D:CA:B9:DD
            X509v3 Authority Key Identifier:
                keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d1:02:24:5d:86:03:0d:ec:91:34:57:a7:21:95:8a:c8:ad:
         b0:b1:f8:6b:9c:3a:8e:fe:7f:71:58:08:cc:6c:ff:cc:be:c1:
         a9:80:cf:f7:8e:b6:40:ff:36:e6:ab:4d:13:63:71:fc:07:c8:
         e4:a8:03:12:6c:91:ba:aa:f5:23:f2:8e:6c:19:21:6d:5d:4d:
         7b:44:d7:53:f0:e7:5a:42:c7:42:4c:b9:8f:22:df:e7:e5:0c:
         dd:d0:9d:0d:dc:14:51:8d:6b:b9:bf:6a:49:fc:2b:43:76:bb:
         79:41:db:e0:3b:a3:ae:e3:92:2c:db:d9:ad:d0:ee:4e:fe:7a:
         69:94:c7:c5:be:44:20:ce:62:92:fd:ff:26:ba:b7:b9:85:3e:
         66:a8:f3:b5:e5:b5:92:3a:6c:0e:95:c9:b8:28:b6:b8:b9:9b:
         28:aa:c8:47:33:a6:e7:64:e9:f6:07:51:87:25:37:98:bb:28:
         ba:d0:d4:fe:db:11:2e:52:43:61:11:27:a6:63:eb:6c:5b:0b:
         3f:e6:89:35:19:64:f8:5f:03:cb:c9:d8:16:cb:c1:e5:7e:16:
         a2:98:01:09:34:e9:43:87:00:cb:c4:0e:38:9c:5c:be:19:68:
         64:0c:72:40:e1:cd:08:12:51:ab:f5:9b:15:b6:ca:b8:40:cd:
         37:2a:70:26
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTg1NEZBRjExMC8GA1UEBRMoOEJFNDAzNUJFQkM5QzgzNDI4QjVBMjdCRTg1QkFD
OTY2RDc2RTVDQjAeFw0yNTA2MDYwMzMxMDdaFw0yNTA2MDgwMzMxMDdaMBgxFjAU
BgNVBAMTDTY4NDI2MGZjLWI1ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIHbmEldE1OVpjtmdQfVCFYmCZItID/W63XMScnsS1DjUdUg9AKyhAQJyl
bYwhhIIA3+LO3U6VItockNifqf37SqtGt8ymgT1FDg2AL8HGAe8siOQQ13g/7uYJ
Tu9U8oE1JNSescxk6cFyS07puDH31skfA05YWVfY+iJqKmZ83hfn2EUlHB1Gp2Bi
xTbPcIbv+aL67/ZP1ilM0mLlBZ43KS3b42pbn0zg7yhSVUKJH42h3xFtdn3ipzux
nARWKVLUyUbvJFh1mxT+JUyq0lC+UDKDNoGeeBXmDrS2t8LXRZYK7PFCo4ntvwF5
RJdbALcgKvciVhw4vDiNjjeLgSKtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnbMk
5MuvwmegwOvc98aI7C3Kud0wHwYDVR0jBBgwFoAUi+QDW+vJyDQotaJ76Fuslm12
5cswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE4NTRGLzVFODdDMDQyQjczNDExRURBOEQ0Q0NBNEYxMjIyNDY4L2ktUURX
LXZKeURRb3RhSjc2RnVzbG0xMjVjcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ktUURXLXZKeURRb3RhSjc2RnVzbG0xMjVjcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTg1NEYvNUU4N0MwNDJCNzM0MTFFREE4RDRDQ0E0RjEy
MjI0NjgvaS1RRFctdkp5RFFvdGFKNzZGdXNsbTEyNWNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBe0QIkXYYDDeyRNFenIZWKyK2wsfhr
nDqO/n9xWAjMbP/MvsGpgM/3jrZA/zbmq00TY3H8B8jkqAMSbJG6qvUj8o5sGSFt
XU17RNdT8OdaQsdCTLmPIt/n5Qzd0J0N3BRRjWu5v2pJ/CtDdrt5QdvgO6Ou45Is
29mt0O5O/npplMfFvkQgzmKS/f8mure5hT5mqPO15bWSOmwOlcm4KLa4uZsoqshH
M6bnZOn2B1GHJTeYuyi60NT+2xEuUkNhESemY+tsWws/5ok1GWT4XwPLydgWy8Hl
fhaimAEJNOlDhwDLxA44nFy+GWhkDHJA4c0IElGr9ZsVtsq4QM03KnAm
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:29:09 2025 by rpki-client