Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          xmKvX8tJ3BRTBoSyr+xrDLTfrTZ2xmkWaSLee1fgQ8E=
Subject key identifier:   04:45:B0:EA:43:54:AB:03:93:59:21:75:E5:86:6E:F6:C1:F1:A5:2C
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       08F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          08F4
Signing time:             Thu 31 Jul 2025 01:36:34 +0000
Manifest this update:     Thu 31 Jul 2025 01:36:33 +0000
Manifest next update:     Sat 02 Aug 2025 01:36:33 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: nByil2F4lMdZv1DBbshyuyY+ESPTtlAPXg3Awf35vyk=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF, serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Jul 31 01:36:33 2025 GMT
            Not After : Aug  2 01:36:33 2025 GMT
        Subject: CN=688ac8a2-1831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:45:22:62:74:2f:dd:0e:6a:b6:09:fe:56:
                    be:31:6b:2a:c1:1f:0d:b8:db:28:9c:b1:00:86:85:
                    16:ce:50:d3:46:49:da:ca:54:73:f3:05:eb:bf:66:
                    b9:be:fe:fb:5c:51:7b:4e:8c:f8:db:89:04:05:c6:
                    ad:c8:8f:f8:e0:4d:3d:35:0f:73:c8:c0:83:fe:c9:
                    61:4c:6c:15:20:a9:65:a4:45:d5:4b:c1:c9:85:12:
                    0c:13:d3:d7:83:29:f2:30:a6:3b:35:b5:f1:91:b5:
                    ff:91:7c:60:ca:2d:f9:fa:70:e0:6b:d3:05:83:8c:
                    d0:a5:e3:1b:82:b0:81:e4:0d:55:24:52:43:82:e1:
                    91:5b:cc:0b:c7:88:a0:1e:de:d2:0a:66:07:b4:bf:
                    3c:01:e0:1a:4e:a5:11:9e:5b:b3:7f:09:3f:b2:0d:
                    98:af:83:3d:bf:91:59:87:c2:60:27:05:a0:11:0b:
                    d9:b5:51:44:c5:42:ae:0f:58:65:98:05:dd:3b:17:
                    c7:21:d6:a9:ad:b4:b4:95:cf:4e:f9:3c:17:b0:48:
                    76:72:de:de:a9:e3:bb:0e:86:53:04:0f:53:fa:ab:
                    77:17:26:62:53:38:12:d4:cc:e7:d2:a9:be:25:2e:
                    c4:7d:a8:da:d4:29:86:b9:09:29:3f:ec:9d:d2:52:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:45:B0:EA:43:54:AB:03:93:59:21:75:E5:86:6E:F6:C1:F1:A5:2C
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:0c:f1:4a:57:98:65:f4:93:30:33:15:25:0e:5c:f8:bf:
         72:d5:4d:fe:4d:a0:26:49:11:71:1d:40:47:f9:48:c4:75:1c:
         d3:9f:48:b0:31:33:4e:2c:db:34:cf:f0:2b:3e:cf:10:04:ed:
         3d:59:7d:c7:fd:d8:ad:b5:e2:9f:0a:8d:81:66:79:ae:62:e6:
         4b:4b:07:75:19:09:a5:f0:ff:02:26:27:1b:73:60:e7:a7:f3:
         ed:3a:78:47:3a:6f:79:ba:4c:39:64:34:4c:35:c9:0b:35:98:
         3b:34:ee:e1:7e:40:b4:eb:f2:8e:93:7d:46:cb:68:a7:ff:89:
         2a:52:b3:2b:14:5f:fe:60:71:6d:b2:05:b7:56:51:c9:70:81:
         b2:a4:ca:c0:3f:96:11:a7:2f:af:52:d7:f3:4f:10:cf:6c:8c:
         15:18:1b:02:4a:e4:ca:56:e7:0a:21:dc:c4:50:08:6f:02:76:
         02:36:d1:ea:68:00:4b:44:3b:b2:af:21:c3:0a:83:af:f0:65:
         78:6f:a4:b9:20:7b:a8:4a:3a:ec:10:55:8c:47:bd:11:66:7d:
         4b:36:d1:c5:44:91:8f:e9:b5:8e:05:38:8d:12:94:e9:fe:7c:
         c6:40:59:c8:e4:3c:69:7b:7b:4e:2b:a7:93:b3:5c:38:a3:60:
         99:3a:d1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:23:21 2025 by rpki-client