Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          JYytOiJKKyRT4ZJuNxBFGr6AneO4xwWgl5Lh5QRgv94=
Subject key identifier:   D2:F3:B0:95:4B:68:C4:D0:7E:14:72:F7:7F:16:1F:E9:74:FD:3A:9C
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       0284
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          0281
Signing time:             Sun 27 Jul 2025 04:12:32 +0000
Manifest this update:     Sun 27 Jul 2025 04:12:31 +0000
Manifest next update:     Tue 29 Jul 2025 04:12:31 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: ULMyMHaYJaLkNc9+9jKvnKHKLb7T0xeU9TG/wIjz09s=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
        Validity
            Not Before: Jul 27 04:12:31 2025 GMT
            Not After : Jul 29 04:12:31 2025 GMT
        Subject: CN=6885a72f-f753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:63:09:44:59:9a:a4:85:3b:9f:a0:1a:87:
                    a6:4d:c2:44:27:e9:38:6f:27:ec:1c:9a:ff:2c:d4:
                    1c:49:4c:4f:24:df:36:c9:39:00:ab:b8:1c:b8:c5:
                    5a:2a:3d:c5:dc:2e:cc:96:22:ad:48:e0:a9:df:8e:
                    09:57:49:46:65:63:2f:d9:a2:fa:60:ab:ad:86:24:
                    ef:66:4f:8a:f6:bb:56:49:fe:38:25:e5:88:46:1d:
                    70:7f:b3:fe:5b:52:05:21:dc:0c:9b:03:3d:64:6f:
                    c6:50:3a:5f:ae:9b:87:ad:97:ba:19:6c:45:9e:25:
                    1d:6d:11:7f:ab:3f:d2:a9:ba:a3:4c:23:3c:8c:14:
                    eb:4f:12:07:56:82:da:31:79:a1:06:05:7a:3c:72:
                    e9:70:88:80:79:6d:d4:ec:7e:37:ea:3f:a9:16:0f:
                    b3:55:ff:f8:33:d6:61:64:d6:fb:c1:9e:c7:66:0a:
                    50:65:1a:66:48:f0:64:da:51:d0:85:b5:ce:c9:91:
                    3a:12:52:21:6f:ab:85:98:b3:83:b3:0f:51:ae:f2:
                    e2:7a:95:d3:36:1c:a2:f9:9e:5f:a1:49:ea:31:4c:
                    c6:90:81:66:dd:7d:2e:1a:fd:23:d0:66:10:da:a4:
                    07:aa:ac:ae:3f:d5:97:86:e9:9f:20:9e:dc:4f:cc:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F3:B0:95:4B:68:C4:D0:7E:14:72:F7:7F:16:1F:E9:74:FD:3A:9C
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:30:02:1b:a3:29:9b:27:99:40:b9:f6:8c:b1:8d:5e:51:f7:
         f5:ad:5a:b8:62:cb:3c:85:07:71:93:bc:b8:c0:ea:cb:cc:b2:
         18:20:28:ca:e4:60:7b:8c:20:aa:76:64:da:c9:11:3b:9f:2f:
         5a:e6:76:43:54:a8:0b:12:c1:c8:cd:5e:62:ec:06:0d:5f:2e:
         73:69:60:ac:9f:a2:ed:c2:e1:f2:3f:b9:48:fa:59:d9:f5:c2:
         55:2b:0e:82:94:33:a8:02:3c:a9:d7:40:e8:04:dd:ff:09:db:
         c1:cc:f9:e5:0e:9c:61:ea:1c:86:38:fa:e3:49:f4:02:93:8b:
         29:66:4d:95:53:84:7a:55:3c:85:9c:3a:5f:8e:11:34:a5:2d:
         04:b6:4e:e5:3e:d3:1a:fb:a1:01:2e:bf:d6:94:44:b3:2e:ab:
         d5:78:77:37:46:27:f8:28:cb:9f:93:7f:78:77:2a:7f:ee:85:
         a2:25:7f:73:a2:11:3e:ce:7a:58:b6:41:15:9e:d5:d8:df:3d:
         23:88:69:cd:d7:04:87:61:91:24:97:57:a8:dd:08:44:92:51:
         fa:41:f0:a3:dc:8f:1d:9e:4e:49:e7:bc:cc:82:9c:50:3c:29:
         e0:d6:22:18:2b:e7:f7:58:6d:da:55:38:b9:98:cf:13:ad:11:
         42:f8:9c:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzYyOUJBRjExMC8GA1UEBRMoQzdEMzQ2NjY4MkM1MTYwRTIyQjYyNTQ4RTk3RTIx
MEZFNEExRTM4NjAeFw0yNTA3MjcwNDEyMzFaFw0yNTA3MjkwNDEyMzFaMBgxFjAU
BgNVBAMTDTY4ODVhNzJmLWY3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2DWMJRFmapIU7n6Aah6ZNwkQn6ThvJ+wcmv8s1BxJTE8k3zbJOQCruBy4
xVoqPcXcLsyWIq1I4KnfjglXSUZlYy/Zovpgq62GJO9mT4r2u1ZJ/jgl5YhGHXB/
s/5bUgUh3AybAz1kb8ZQOl+um4etl7oZbEWeJR1tEX+rP9KpuqNMIzyMFOtPEgdW
gtoxeaEGBXo8culwiIB5bdTsfjfqP6kWD7NV//gz1mFk1vvBnsdmClBlGmZI8GTa
UdCFtc7JkToSUiFvq4WYs4OzD1Gu8uJ6ldM2HKL5nl+hSeoxTMaQgWbdfS4a/SPQ
ZhDapAeqrK4/1ZeG6Z8gntxPzNDLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0vOw
lUtoxNB+FHL3fxYf6XT9OpwwHwYDVR0jBBgwFoAUx9NGZoLFFg4itiVI6X4hD+Sh
44YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2MjlCL0UwOTM2NkMwODQ3QzExRUU5MEIwNDQ0NjRBRDlFNkZDL3g5Tkda
b0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3g5Tkdab0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzYyOUIvRTA5MzY2QzA4NDdDMTFFRTkwQjA0NDQ2NEFE
OUU2RkMveDlOR1pvTEZGZzRpdGlWSTZYNGhELVNoNDRZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhMAIboymbJ5lAufaMsY1eUff1rVq4
Yss8hQdxk7y4wOrLzLIYICjK5GB7jCCqdmTayRE7ny9a5nZDVKgLEsHIzV5i7AYN
Xy5zaWCsn6LtwuHyP7lI+lnZ9cJVKw6ClDOoAjyp10DoBN3/CdvBzPnlDpxh6hyG
OPrjSfQCk4spZk2VU4R6VTyFnDpfjhE0pS0Etk7lPtMa+6EBLr/WlESzLqvVeHc3
Rif4KMufk394dyp/7oWiJX9zohE+znpYtkEVntXY3z0jiGnN1wSHYZEkl1eo3QhE
klH6QfCj3I8dnk5J57zMgpxQPCng1iIYK+f3WG3aVTi5mM8TrRFC+Jxf
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:31:09 2025 by rpki-client