Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
File:                     BkapmNbNXVvutQ9MkpExVTb3xbQ.mft (raw, json)
Hash identifier:          4e9cJ+PMr/kOBce/6tQSwVRU8xTS1P7jKMP5difBvXQ=
Subject key identifier:   7D:9D:2D:F5:74:DD:72:A1:CC:F6:F4:4A:88:46:BE:1F:9D:20:3C:CB
Authority key identifier: 06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4
Certificate issuer:       /CN=F36CAE5AAF/serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
Certificate serial:       068C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
Manifest number:          068B
Signing time:             Mon 09 Jun 2025 02:06:34 +0000
Manifest this update:     Mon 09 Jun 2025 02:06:33 +0000
Manifest next update:     Wed 11 Jun 2025 02:06:33 +0000
Files and hashes:         1: BkapmNbNXVvutQ9MkpExVTb3xbQ.crl (hash: wz9Xr9XwsrjyS3m9ZS8Hlg74zgJ27++erTPMnPHE3AU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAE5AAF, serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
        Validity
            Not Before: Jun  9 02:06:33 2025 GMT
            Not After : Jun 11 02:06:33 2025 GMT
        Subject: CN=684641a9-90dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:76:71:c8:68:19:5e:c0:6d:fd:6d:e4:4e:
                    b9:3c:f2:a4:86:0f:a8:bb:39:bb:d1:c4:a3:8c:2e:
                    ed:d5:b9:2d:98:66:9b:ed:59:5c:2a:9e:9e:2c:c2:
                    d1:29:3a:41:a2:34:91:a2:93:e2:e7:df:4c:af:56:
                    b6:9a:b5:33:28:4f:10:d8:6d:c5:9d:eb:5f:7c:7a:
                    c9:35:fa:52:f5:1f:de:46:12:e5:9b:6f:f9:48:bc:
                    0e:46:5d:4f:12:2c:a7:dd:e6:43:09:bd:71:2b:00:
                    28:89:06:df:fc:7a:17:31:74:55:80:b5:71:c9:05:
                    33:a9:2b:ee:54:4b:e2:12:8d:96:51:db:d9:02:c5:
                    bb:ab:f9:d3:43:ca:89:ed:fb:37:99:d8:d2:50:88:
                    b1:43:12:76:72:b8:26:9b:f1:9b:fe:1c:46:14:18:
                    72:cc:e4:f6:7c:31:73:0e:12:31:3f:77:73:59:f7:
                    1d:4d:a0:4a:38:bb:27:65:70:20:55:b8:80:75:e5:
                    b2:00:0b:ce:a3:8d:d6:1e:71:02:82:d1:ce:5b:b2:
                    2e:ab:20:0e:d4:40:e8:55:59:24:00:ca:4c:2e:1d:
                    48:68:b6:27:57:21:84:25:71:76:3b:18:77:54:95:
                    19:d3:55:92:31:7c:94:43:6f:84:b2:00:59:b7:ba:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9D:2D:F5:74:DD:72:A1:CC:F6:F4:4A:88:46:BE:1F:9D:20:3C:CB
            X509v3 Authority Key Identifier:
                keyid:06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:41:0c:40:3b:9a:a5:4e:f7:20:92:9a:0c:44:5b:5c:e6:18:
         81:20:5e:cb:bf:70:1c:da:af:63:14:3c:7e:7a:db:4a:9c:93:
         1d:14:21:39:6c:69:80:de:06:2f:a5:68:cb:6d:77:c0:da:32:
         e2:a2:61:d1:1d:df:2c:30:6a:88:42:9c:8a:2d:c4:17:28:f2:
         e5:50:f3:08:5f:b1:24:14:b8:2f:f2:e2:d3:db:b6:96:c8:ba:
         60:eb:ae:c9:15:4e:16:c7:00:dd:71:41:17:b0:54:bf:b0:de:
         c8:2a:cb:47:8d:d5:f7:ae:fd:f2:9d:1e:13:d0:b3:eb:cf:ae:
         67:9d:59:f9:8e:49:b3:b4:54:c1:b1:88:a7:77:65:f2:c1:84:
         93:3c:b7:d4:b7:26:bc:70:91:78:63:02:11:04:11:b0:fc:b3:
         80:d1:42:de:f6:6d:85:f5:8e:21:7c:be:ae:58:0a:c0:16:ea:
         4a:85:da:90:97:96:1e:18:60:5e:c0:a8:16:1d:f8:86:3e:4c:
         70:c6:04:f0:01:a8:7f:27:cc:93:8c:28:11:a3:6c:a1:10:e2:
         77:bc:0b:7c:8d:cb:96:2b:a7:2f:96:c1:bb:61:2a:67:ec:b1:
         f2:c8:95:1e:2e:1a:b6:f5:b0:60:49:4f:b0:9b:47:95:4d:26:
         cb:3b:48:d9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBowwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FFNUFBRjExMC8GA1UEBRMoMDY0NkE5OThENkNENUQ1QkVFQjUwRjRDOTI5MTMx
NTUzNkY3QzVCNDAeFw0yNTA2MDkwMjA2MzNaFw0yNTA2MTEwMjA2MzNaMBgxFjAU
BgNVBAMTDTY4NDY0MWE5LTkwZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLQnZxyGgZXsBt/W3kTrk88qSGD6i7ObvRxKOMLu3VuS2YZpvtWVwqnp4s
wtEpOkGiNJGik+Ln30yvVraatTMoTxDYbcWd6198esk1+lL1H95GEuWbb/lIvA5G
XU8SLKfd5kMJvXErACiJBt/8ehcxdFWAtXHJBTOpK+5US+ISjZZR29kCxbur+dND
yont+zeZ2NJQiLFDEnZyuCab8Zv+HEYUGHLM5PZ8MXMOEjE/d3NZ9x1NoEo4uydl
cCBVuIB15bIAC86jjdYecQKC0c5bsi6rIA7UQOhVWSQAykwuHUhotidXIYQlcXY7
GHdUlRnTVZIxfJRDb4SyAFm3umMJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfZ0t
9XTdcqHM9vRKiEa+H50gPMswHwYDVR0jBBgwFoAUBkapmNbNXVvutQ9MkpExVTb3
xbQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRTVBLzkyODE5RkRFNDM5QzExRUJCODY0RDk0QUY4QUVBMjI4L0JrYXBt
TmJOWFZ2dXRROU1rcEV4VlRiM3hiUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JrYXBtTmJOWFZ2dXRROU1rcEV4VlRiM3hiUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FFNUEvOTI4MTlGREU0MzlDMTFFQkI4NjREOTRBRjhB
RUEyMjgvQmthcG1OYk5YVnZ1dFE5TWtwRXhWVGIzeGJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmQQxAO5qlTvcgkpoMRFtc5hiBIF7L
v3Ac2q9jFDx+ettKnJMdFCE5bGmA3gYvpWjLbXfA2jLiomHRHd8sMGqIQpyKLcQX
KPLlUPMIX7EkFLgv8uLT27aWyLpg667JFU4WxwDdcUEXsFS/sN7IKstHjdX3rv3y
nR4T0LPrz65nnVn5jkmztFTBsYind2XywYSTPLfUtya8cJF4YwIRBBGw/LOA0ULe
9m2F9Y4hfL6uWArAFupKhdqQl5YeGGBewKgWHfiGPkxwxgTwAah/J8yTjCgRo2yh
EOJ3vAt8jcuWK6cvlsG7YSpn7LHyyJUeLhq29bBgSU+wm0eVTSbLO0jZ
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:50:36 2025 by rpki-client