Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
File:                     8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft (raw, json)
Hash identifier:          VY7tQ+zG4R7nUwdJpfXOW8NoiFDJJj+Ezr9XK0qJRlQ=
Subject key identifier:   FA:65:80:83:C0:45:D1:EE:F1:45:71:8D:89:A4:39:22:40:56:BF:06
Authority key identifier: F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC
Certificate issuer:       /CN=F36DB560AF/serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
Certificate serial:       33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
Manifest number:          32
Signing time:             Wed 17 Sep 2025 05:09:34 +0000
Manifest this update:     Wed 17 Sep 2025 05:09:33 +0000
Manifest next update:     Fri 19 Sep 2025 05:09:33 +0000
Files and hashes:         1: 8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl (hash: LnR6D6e2uX+Q3nDUsrWs5y8t85spaB2p7A1OaiVSlOw=)
                          2: EF1EDC126F1511F0896E51DFDAE4EC9C.roa (hash: nncn04IJgdyOwnNCorMzliS/IExnEzLZa8RXxvCREP8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB560AF, serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
        Validity
            Not Before: Sep 17 05:09:33 2025 GMT
            Not After : Sep 19 05:09:33 2025 GMT
        Subject: CN=68ca428e-f794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:53:b5:74:94:69:66:64:a5:1d:d4:7d:e0:
                    26:b2:c0:73:bf:d2:c5:27:03:83:eb:1c:3d:25:52:
                    9c:81:8c:87:74:5b:2b:1d:4c:af:84:d6:da:2e:4c:
                    a0:9c:1f:50:37:1b:f4:84:80:55:e0:7a:cf:ea:cb:
                    61:19:39:16:cf:f0:ab:ee:66:7c:ea:ef:41:e2:e1:
                    ee:fb:9d:1f:3d:ee:3b:05:28:52:e3:47:d1:27:05:
                    60:6f:07:43:aa:22:5c:10:da:ee:ee:26:83:16:07:
                    61:ba:d4:b1:c2:2a:20:27:b1:e1:6d:ab:0f:75:75:
                    ca:89:0a:40:0b:76:98:32:54:0e:2a:89:0f:ed:8e:
                    c8:32:6f:0f:3c:cb:28:e7:08:26:aa:64:ee:2b:89:
                    e2:19:6a:f0:99:0e:dc:d3:9e:91:77:77:2e:f2:8e:
                    48:33:b4:0d:f5:3f:3a:9e:1b:a8:39:16:38:8a:49:
                    7c:37:9f:b5:21:17:7c:fe:fa:f3:eb:32:86:8f:76:
                    ef:a2:38:72:ce:2a:6c:4e:82:81:f6:48:52:39:48:
                    fc:36:e1:b3:1b:04:00:80:47:7f:4c:8e:ba:4b:c4:
                    d5:ad:f5:f7:78:ef:bc:81:56:c9:88:4f:a7:10:fe:
                    30:dd:65:22:5b:af:4e:4e:03:1a:d4:76:6d:aa:bf:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:65:80:83:C0:45:D1:EE:F1:45:71:8D:89:A4:39:22:40:56:BF:06
            X509v3 Authority Key Identifier:
                keyid:F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a4:7e:1a:7a:35:70:a7:6b:12:5a:6b:5e:83:20:27:9c:36:
         8b:19:11:5f:f2:2b:09:f2:63:df:74:49:37:a6:95:75:1f:74:
         63:8d:3d:ec:b0:a9:9e:4b:2a:88:9f:68:93:13:7d:eb:39:43:
         c2:3a:0d:aa:8a:01:9d:a6:41:04:fe:a1:d1:80:ca:89:46:29:
         2c:08:a2:c4:64:f8:5c:e9:3a:de:73:8f:28:64:78:0b:2c:e5:
         b1:36:ed:f8:71:c2:8e:3b:a6:d0:b0:d8:b6:fd:16:a0:d6:f7:
         03:ea:57:08:ca:98:a5:5e:a2:a1:5a:d8:06:3b:07:3f:9f:4f:
         20:63:c7:09:6c:58:0f:03:54:49:1b:2c:5e:9c:b8:25:ee:e3:
         e5:70:8d:5c:87:0d:82:f7:26:8a:a7:3b:39:48:74:b5:f4:90:
         e8:1d:03:0e:eb:2b:aa:ba:f3:76:75:ca:d7:88:68:16:d2:66:
         60:45:dd:b1:6a:b2:2b:f8:a7:dc:3a:bb:0e:78:9c:3b:1e:78:
         85:0f:48:41:6e:67:af:a9:ad:44:b7:d9:17:18:4c:2f:94:fc:
         a7:e5:09:47:63:c6:85:56:30:e5:2a:6d:a4:ae:9d:87:b3:3c:
         25:db:f4:cc:30:d1:62:7e:c0:74:ff:12:15:02:18:f3:01:b9:
         46:e7:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:30:34 2025 by rpki-client