Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          Ys8AECpnL06bXnQDejEcHYgl2WFZEZ4qaAcUPsVA39o=
Subject key identifier:   76:0F:48:F1:E7:BA:C8:58:32:C6:52:F0:64:0B:CA:78:3F:C0:A1:CC
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       01AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          01A9
Signing time:             Sun 27 Jul 2025 04:38:28 +0000
Manifest this update:     Sun 27 Jul 2025 04:38:28 +0000
Manifest next update:     Tue 29 Jul 2025 04:38:28 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: 8G1ZaPJbn04GeXRKlkIoJpnd43F5qTo/8vp8iaRtDEo=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Jul 27 04:38:28 2025 GMT
            Not After : Jul 29 04:38:28 2025 GMT
        Subject: CN=6885ad44-07db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:61:13:a4:a1:73:96:8d:39:ae:8c:34:d3:
                    7e:7e:4d:ef:55:72:26:f2:a9:9f:dd:10:aa:e6:16:
                    e6:e8:91:6c:e9:d1:01:16:72:29:ee:10:f4:0f:b0:
                    09:2c:8c:f5:27:12:88:93:ee:d2:d5:0e:c2:25:de:
                    e4:45:69:57:ed:09:b8:d2:25:8c:a1:32:24:f1:3c:
                    28:01:a5:18:fc:eb:a7:aa:29:16:92:cd:5b:ff:88:
                    16:6a:ea:96:e2:40:ef:b0:5c:c9:9c:fe:55:af:ab:
                    76:6e:05:cf:36:aa:27:7c:0e:5a:d9:6d:16:c4:74:
                    8b:33:f7:eb:6b:ae:6b:3a:32:fc:d8:82:66:9b:85:
                    8c:cd:08:b8:d5:13:97:4e:7a:83:bb:56:dd:75:6b:
                    f7:a2:f6:1e:12:a5:6d:4d:10:24:fd:a9:83:51:ed:
                    a3:45:58:33:e1:40:db:9b:54:04:e6:5f:bb:ea:a6:
                    b9:5a:e9:d0:84:ef:7c:57:d0:76:3f:0b:70:cc:03:
                    06:88:01:43:43:dd:3e:a3:f6:1b:35:69:80:95:97:
                    23:02:b2:f0:3f:23:4a:9b:4c:46:b6:fe:3b:f6:a1:
                    65:d1:87:8d:43:fb:d5:c5:b7:41:fc:96:ab:de:3c:
                    a1:d5:b2:10:1a:ae:a9:03:48:8a:8e:27:06:7d:20:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0F:48:F1:E7:BA:C8:58:32:C6:52:F0:64:0B:CA:78:3F:C0:A1:CC
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:82:ca:c8:22:1e:95:d8:32:7f:7e:95:09:7e:2d:b4:2c:06:
         3b:2d:c7:f3:c3:0b:3c:dd:d6:b6:91:91:b2:11:5e:f9:e2:18:
         dd:9b:0f:e9:60:80:16:7d:ac:9c:39:7f:5a:2a:f8:98:2d:78:
         26:c3:b7:91:2b:7b:bc:fd:5c:ac:e5:c8:f3:d6:fb:81:85:25:
         fd:2b:9f:1c:14:ab:d3:84:18:8b:03:94:df:5d:c7:d8:81:4b:
         d6:41:71:0b:b3:df:75:60:37:3e:2a:ae:7a:af:15:4b:9c:8e:
         a8:e1:19:a6:e6:25:9c:cb:d7:cf:d5:43:de:75:1b:77:ca:9e:
         ab:b6:1f:4d:83:16:0a:7b:8f:e6:7d:7c:44:8b:1f:ec:f6:94:
         c9:aa:d0:96:95:a4:e9:80:b4:9e:85:cc:53:1b:ec:c1:61:df:
         d2:b5:d3:1c:dd:78:49:68:55:6f:ad:aa:8d:cc:bc:02:ac:0c:
         0f:5c:32:3d:c0:9f:2a:68:f4:45:94:a9:60:44:fb:5d:75:8d:
         02:5d:eb:9d:3e:e1:d1:e2:4b:5f:93:b6:d9:cd:01:01:d0:83:
         0f:a4:f2:1e:3e:fa:4f:a9:93:21:59:c3:e8:6d:a8:51:44:ba:
         b8:da:91:cf:a9:24:7e:bb:54:d0:ed:4a:ae:c9:7d:86:21:7a:
         3a:0b:65:7d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAaswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjJEMDlBRjExMC8GA1UEBRMoMTI4NUU5RjVBRTg5MEQwOUVCNkExRDlDMTUyNjk4
RDgyNTY5NDE3MzAeFw0yNTA3MjcwNDM4MjhaFw0yNTA3MjkwNDM4MjhaMBgxFjAU
BgNVBAMTDTY4ODVhZDQ0LTA3ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2oWETpKFzlo05row0035+Te9VcibyqZ/dEKrmFubokWzp0QEWcinuEPQP
sAksjPUnEoiT7tLVDsIl3uRFaVftCbjSJYyhMiTxPCgBpRj866eqKRaSzVv/iBZq
6pbiQO+wXMmc/lWvq3ZuBc82qid8DlrZbRbEdIsz9+trrms6MvzYgmabhYzNCLjV
E5dOeoO7Vt11a/ei9h4SpW1NECT9qYNR7aNFWDPhQNubVATmX7vqprla6dCE73xX
0HY/C3DMAwaIAUND3T6j9hs1aYCVlyMCsvA/I0qbTEa2/jv2oWXRh41D+9XFt0H8
lqvePKHVshAarqkDSIqOJwZ9IA/PAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdg9I
8ee6yFgyxlLwZAvKeD/AocwwHwYDVR0jBBgwFoAUEoXp9a6JDQnrah2cFSaY2CVp
QXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIyRDA5LzA4NDFFRDk4MjdFNTExRUZBNUNGQTQxMzdEREMyNEMyL0VvWHA5
YTZKRFFucmFoMmNGU2FZMkNWcFFYTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VvWHA5YTZKRFFucmFoMmNGU2FZMkNWcFFYTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjJEMDkvMDg0MUVEOTgyN0U1MTFFRkE1Q0ZBNDEzN0RE
QzI0QzIvRW9YcDlhNkpEUW5yYWgyY0ZTYVkyQ1ZwUVhNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAygsrIIh6V2DJ/fpUJfi20LAY7Lcfz
wws83da2kZGyEV754hjdmw/pYIAWfaycOX9aKviYLXgmw7eRK3u8/Vys5cjz1vuB
hSX9K58cFKvThBiLA5TfXcfYgUvWQXELs991YDc+Kq56rxVLnI6o4Rmm5iWcy9fP
1UPedRt3yp6rth9NgxYKe4/mfXxEix/s9pTJqtCWlaTpgLSehcxTG+zBYd/StdMc
3XhJaFVvraqNzLwCrAwPXDI9wJ8qaPRFlKlgRPtddY0CXeudPuHR4ktfk7bZzQEB
0IMPpPIePvpPqZMhWcPobahRRLq42pHPqSR+u1TQ7UquyX2GIXo6C2V9
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:46:59 2025 by rpki-client