Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
File:                     s14-lHqUdaFnx9_wp9CQLIZFgy0.mft (raw, json)
Hash identifier:          7QTHjwQv51pmSK6bVxwIvtG1ApVOI6NbdfAqjnhkE78=
Subject key identifier:   82:81:F5:72:E6:CF:1F:11:1F:F1:43:AB:A6:D9:C1:DF:67:9D:95:F7
Authority key identifier: B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
Certificate issuer:       /CN=F36B6ED4AF/serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
Manifest number:          29
Signing time:             Tue 16 Sep 2025 05:07:26 +0000
Manifest this update:     Tue 16 Sep 2025 05:07:25 +0000
Manifest next update:     Thu 18 Sep 2025 05:07:25 +0000
Files and hashes:         1: s14-lHqUdaFnx9_wp9CQLIZFgy0.crl (hash: YFFuaCWY8fSh3+HtrwqHZAwCiMHOWu4qf0MFAvXmz8g=)
                          2: D5444EA2746611F08A8CC88BDAE4EC9C.roa (hash: lJFUngrc56wM/Kip8FysGoRhSuXW31fT25yScECZzg0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6ED4AF, serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
        Validity
            Not Before: Sep 16 05:07:25 2025 GMT
            Not After : Sep 18 05:07:25 2025 GMT
        Subject: CN=68c8f08d-13f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:c5:28:93:08:32:1e:f4:f8:e0:20:f3:2a:
                    12:cb:9b:3e:2b:20:49:79:28:aa:25:86:11:c3:2a:
                    f7:7a:cd:04:5b:41:38:ad:8f:7d:1f:83:7e:3d:2f:
                    76:6e:34:52:27:ba:96:92:6b:eb:c4:75:70:89:20:
                    9e:b0:94:61:26:34:84:c6:90:07:40:16:e0:97:26:
                    00:c8:54:15:b4:fb:2b:4b:57:81:99:de:92:b1:7e:
                    9a:52:4e:dd:d0:b8:b9:e1:ce:4e:62:0b:6b:7b:3f:
                    42:4c:d0:67:fb:02:ae:b5:07:47:40:b6:3c:ba:04:
                    96:a7:21:b2:bd:e5:62:aa:94:ce:82:83:af:ba:31:
                    3f:b1:85:3b:79:ea:b4:79:41:05:72:eb:da:73:da:
                    72:e6:4d:40:80:74:7d:43:a3:55:68:30:00:c0:f5:
                    c7:e3:06:40:2b:d6:bf:8a:27:1e:bb:92:9c:e9:fd:
                    5c:2d:2b:8c:cb:b8:db:08:6a:aa:ab:47:81:25:1b:
                    86:d6:fb:52:17:ea:c5:fa:bc:bd:75:d3:c0:88:82:
                    25:c1:23:01:fe:4a:d1:23:5e:90:18:dc:b3:ad:5a:
                    92:17:72:51:6b:1a:2b:3f:11:e4:93:76:ee:f5:23:
                    78:63:d0:2c:34:4f:47:b8:dc:f9:2e:1e:31:bd:f6:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:F5:72:E6:CF:1F:11:1F:F1:43:AB:A6:D9:C1:DF:67:9D:95:F7
            X509v3 Authority Key Identifier:
                keyid:B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e6:e6:b9:28:1a:77:17:c3:e2:08:f4:61:3c:da:7a:7b:7a:
         d2:7c:57:8c:9e:0c:3d:5f:9c:97:eb:be:5d:4b:d7:5e:f7:a8:
         18:57:9a:c6:bd:4b:cf:11:90:b8:90:1d:9f:f1:ad:e6:50:eb:
         53:d0:12:30:c4:3d:3e:77:67:d7:af:84:c7:de:d4:a6:cd:83:
         7f:85:64:3a:0a:cd:35:05:b7:2c:dc:16:be:ab:63:25:d6:08:
         bd:c1:b0:d0:1f:15:65:95:0c:ac:ad:eb:bd:db:aa:81:48:99:
         ed:e2:5e:eb:45:c4:9d:91:50:36:bc:fc:56:04:2b:b0:c2:5b:
         0a:c7:40:36:a7:e9:cc:f9:6f:8f:46:63:2f:4c:2a:3b:87:68:
         15:ee:24:a1:35:59:48:c7:56:4c:3d:09:a1:45:a5:a3:4a:7b:
         c3:f2:3e:c1:9e:f4:89:b5:27:91:11:b6:c9:16:79:9e:51:74:
         e0:ba:36:53:27:f4:5f:d0:67:5c:fe:f2:b4:b1:83:ff:5e:38:
         51:23:67:b4:45:68:c9:9a:6e:74:4b:19:ab:98:fb:04:aa:03:
         46:f7:83:a4:92:26:39:90:4b:d4:f8:50:72:ee:8f:f7:21:c5:
         b3:ad:36:9c:30:f2:1e:3e:98:df:0f:b2:fb:31:d2:d1:f0:d3:
         0d:da:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 13:25:42 2025 by rpki-client