Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
File:                     xk60GwPUwTMps2P1p5PyzZy0LLc.mft (raw, json)
Hash identifier:          kfMuAfQ69ylEiOSiqD+2RSqLp0H8d5HefD5hfoOThAo=
Subject key identifier:   0D:C3:89:79:C0:47:07:E2:72:60:FE:71:CD:18:0B:4B:A5:B1:83:E9
Authority key identifier: C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
Certificate issuer:       /CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Certificate serial:       0642
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
Manifest number:          063F
Signing time:             Thu 31 Jul 2025 02:17:44 +0000
Manifest this update:     Thu 31 Jul 2025 02:17:44 +0000
Manifest next update:     Sat 02 Aug 2025 02:17:44 +0000
Files and hashes:         1: xk60GwPUwTMps2P1p5PyzZy0LLc.crl (hash: JWz3V76bB0Lk8/W03pIb6uPWsNdoS1O/wH4ghneAhpw=)
                          2: 4FDC1DC2F14D11EFBAC0E3A0762E951A.roa (hash: dOKqRkTfN9jocpe+O0SITKXIanbXliNmUMx3esYzAi8=)
                          3: 87E50DA6AA2B11EE9A64EA6D775412E6.roa (hash: XpYMXNR2CG5z3pCw7sOpke9QbTyJBxDxE9SukOPOH8g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5804AF, serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
        Validity
            Not Before: Jul 31 02:17:44 2025 GMT
            Not After : Aug  2 02:17:44 2025 GMT
        Subject: CN=688ad248-91ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:14:0e:12:20:d8:0e:87:47:30:56:f9:ad:
                    ac:b6:d0:35:11:30:4a:7c:8f:5f:fa:39:ee:14:7b:
                    ff:76:26:30:6b:16:28:44:55:1f:86:f4:fd:7c:bd:
                    e2:49:88:52:e8:ac:93:95:ec:e2:b7:bb:01:2e:ea:
                    12:c5:d2:5b:33:67:ce:ab:25:84:a6:e6:45:76:cf:
                    59:3f:0e:ad:ad:ae:6d:53:6a:4f:6d:d4:b3:43:4c:
                    bc:30:87:6f:6e:7b:1b:38:e6:2a:bf:ef:99:39:b7:
                    1f:61:a4:bf:6d:46:34:3b:96:57:71:b8:48:db:06:
                    ff:e1:29:15:35:b0:b4:63:1a:59:49:68:c8:96:50:
                    67:a6:50:cb:09:10:4d:ab:d6:6e:d7:49:ce:e3:76:
                    37:5f:c6:43:e0:07:63:72:f7:c3:87:3a:f4:01:92:
                    b1:ee:bb:eb:70:1d:ba:f4:94:a6:c0:99:2c:88:7c:
                    0e:1f:2f:7c:35:d2:11:1e:9e:09:b9:9d:db:97:14:
                    74:80:36:b9:38:c5:7b:67:1f:60:63:44:c5:c7:69:
                    87:38:53:0d:fe:0e:f7:81:6b:95:b4:75:2a:fd:f5:
                    50:97:51:6d:d0:80:7d:a0:b1:ef:f9:29:00:50:ee:
                    3c:7c:8d:84:45:e0:a4:a6:f2:ca:9e:dc:c6:3b:a5:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C3:89:79:C0:47:07:E2:72:60:FE:71:CD:18:0B:4B:A5:B1:83:E9
            X509v3 Authority Key Identifier:
                keyid:C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:51:cc:71:fb:e4:3c:63:0b:85:38:55:91:0a:50:f4:8a:
         6d:25:ef:13:ee:6f:60:75:ac:2d:7c:4e:97:3f:ff:68:3f:e3:
         00:0b:a0:2c:b5:09:46:6d:d5:ac:5a:b3:36:7e:df:54:d2:0e:
         47:79:2d:46:97:5a:3b:2b:40:9c:53:8f:bf:44:26:30:b8:73:
         00:0c:e0:12:e9:20:46:04:2d:d3:fe:ac:84:11:f1:56:01:05:
         ca:d6:56:e0:59:84:3a:16:37:8a:53:1a:88:c8:0c:b2:a2:82:
         6b:7c:f3:e7:7e:93:93:0c:a2:03:d1:aa:a2:69:42:6d:e7:8d:
         f6:a0:93:4d:e8:51:67:a3:66:76:d0:b4:f5:83:7d:9d:9c:76:
         ab:68:ec:71:b1:4e:22:fc:7c:b9:f7:01:ab:fe:a1:d7:fa:b6:
         dd:1d:49:de:b8:63:0e:d6:47:ab:99:e7:49:62:d1:be:03:38:
         b2:c1:22:98:ac:17:05:b3:83:2b:c5:96:67:e3:8b:fb:42:c8:
         36:8e:ca:55:2f:33:0f:70:86:0b:f8:5e:d1:b4:cc:fa:3d:36:
         1e:50:a4:39:b9:2e:c7:29:6c:1b:84:43:dc:d6:1b:50:57:bd:
         6c:cf:4f:65:72:7b:09:cd:17:f6:98:0b:7e:25:40:f5:ab:f0:
         63:a5:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:13 2025 by rpki-client