Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier:          Un7rBq/BW2IODbo+xeZu4izMIl52yCqw0C/P1wIC/xc=
Subject key identifier:   51:F2:98:20:4D:FC:3A:D5:5C:C1:CA:4C:41:22:F1:48:BF:A7:F0:F9
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer:       /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number:          5D
Signing time:             Wed 04 Jun 2025 05:15:04 +0000
Manifest this update:     Wed 04 Jun 2025 05:15:03 +0000
Manifest next update:     Fri 06 Jun 2025 05:15:03 +0000
Files and hashes:         1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: HCDhw6+SLrxKXJ+pRBn/73gSoHrDlUd1jOj2DVH6UVM=)
                          2: 51D56DFEFE6311EF8981AA93762E951A.roa (hash: v1iecGoXLrBsavXRX1kf0YmMMDAB2gV9RZnpPeiZxzU=)
                          3: 81829ED6FE6411EF86C6749A762E951A.roa (hash: p0zc+GDWSPngPzC4UqPmM1kDzoimJaQE4vWQrsCXryc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
        Validity
            Not Before: Jun  4 05:15:03 2025 GMT
            Not After : Jun  6 05:15:03 2025 GMT
        Subject: CN=683fd658-2511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:bb:0c:32:86:4b:1f:ac:c3:6a:01:8f:85:
                    dc:89:64:ae:dc:0f:82:74:4f:4c:7b:35:1f:90:b4:
                    60:34:b2:f0:7e:3c:0a:2e:3a:2d:0f:7c:25:09:d9:
                    d5:f0:2f:ff:de:1b:34:08:13:44:22:12:f4:c9:1f:
                    8e:28:3f:03:55:88:69:e1:0e:64:51:93:92:35:c9:
                    3c:af:a8:72:90:f9:c5:72:59:83:b1:5a:2c:83:4e:
                    36:b7:ca:66:73:be:7d:ce:42:36:a3:3b:9e:9b:c3:
                    8a:23:e7:ca:6a:69:84:b4:b9:54:ac:bf:b8:a7:26:
                    a3:07:86:fd:9c:d7:96:9d:8c:8d:1a:a4:0b:f9:33:
                    af:fa:91:37:d3:22:1b:11:d4:47:dd:2b:a4:44:3a:
                    7d:48:ba:2d:1f:86:01:f5:cf:9c:1e:07:4b:35:fb:
                    7a:83:63:07:ad:22:7f:c8:72:7b:7c:a6:a5:5c:44:
                    bd:39:cc:31:37:93:d1:09:97:40:98:d0:ed:59:89:
                    0e:cb:da:17:fe:d4:91:bd:93:10:eb:c2:9f:ba:b9:
                    a2:6e:e8:cc:b6:cd:e4:a7:ed:1b:77:b2:a0:13:4e:
                    45:49:68:8c:4a:c5:9b:9b:be:90:90:27:cb:21:08:
                    46:9e:89:4a:ac:cf:34:ea:9c:af:03:6c:92:48:e9:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:98:20:4D:FC:3A:D5:5C:C1:CA:4C:41:22:F1:48:BF:A7:F0:F9
            X509v3 Authority Key Identifier:
                keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:cb:f1:f5:63:59:9f:36:9c:a0:60:3a:ee:cd:e0:79:d0:
         5b:3a:e2:57:0c:71:a3:3d:25:cd:de:e9:30:3b:1a:45:b7:2a:
         17:58:2b:e7:d8:5e:11:a3:e9:86:9b:8b:50:f5:35:b6:bd:a6:
         dd:f1:26:6b:06:85:42:88:7f:86:8d:3f:3e:de:2a:9b:56:86:
         63:70:81:cc:af:1c:97:fa:4f:07:0a:57:76:0d:74:a8:f1:58:
         0e:69:87:47:f1:7e:ab:e7:2e:dc:05:c3:6d:9d:a2:84:f8:44:
         36:7a:e9:1a:a5:0e:c6:5c:cc:dd:e6:79:e7:1b:6f:20:29:16:
         c2:91:98:61:74:97:ec:43:cb:0c:e4:fd:60:3c:dd:a6:59:e9:
         85:fe:d8:a5:ff:26:7a:3f:74:6d:55:b6:d5:5b:f1:d1:1a:f0:
         8c:63:ca:13:f2:c8:5a:5d:0a:2f:2c:d1:10:37:96:83:d2:bb:
         39:32:8c:26:49:e8:e0:50:f8:80:72:56:12:71:e7:4a:03:79:
         f6:5d:ce:17:14:c1:32:e8:ef:fd:8e:9c:b5:47:9b:98:0d:ad:
         0b:51:1c:c3:66:16:2d:76:fc:0f:c2:92:a1:09:00:79:16:1a:
         bf:a0:85:9f:ae:0c:bb:ea:e9:c2:82:cf:68:25:5e:20:20:4c:
         dd:65:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:10:49 2025 by rpki-client