Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File:                     O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier:          VQVy+GCCsOCoPCR/LAXorxdDSYvV3NQSdr4SUYY76zM=
Subject key identifier:   9E:90:C4:03:6C:E3:24:18:E4:E8:AA:61:D2:02:1A:4F:75:95:D9:C1
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer:       /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial:       0940
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number:          093F
Signing time:             Thu 31 Jul 2025 01:22:21 +0000
Manifest this update:     Thu 31 Jul 2025 01:22:20 +0000
Manifest next update:     Sat 02 Aug 2025 01:22:20 +0000
Files and hashes:         1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: hA9JA8R4zE3X6GuoZ9cFlHoeAUiFiDx6WUiztUfb7TA=)
                          2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2368 (0x940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB735AF, serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
        Validity
            Not Before: Jul 31 01:22:20 2025 GMT
            Not After : Aug  2 01:22:20 2025 GMT
        Subject: CN=688ac54d-ac86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:55:57:7c:ca:0d:fa:c3:09:89:4a:08:70:
                    d8:3f:5f:7f:59:4e:7d:4e:25:3d:54:fd:56:24:a6:
                    cb:b5:aa:bf:7e:eb:78:37:56:ae:71:93:ee:7b:d6:
                    68:18:5a:08:6c:34:3e:18:66:39:f0:2a:1b:33:16:
                    de:72:c4:6d:5d:33:b4:8f:ae:f8:ab:66:70:a0:ee:
                    17:df:be:55:8b:e9:20:aa:4f:f2:b6:54:21:dc:7a:
                    9e:48:38:d0:68:d6:90:bc:ce:d2:4c:c0:77:a8:be:
                    b6:62:a5:d2:eb:86:d3:e6:5e:79:9b:65:97:b4:55:
                    e3:23:9e:49:ac:4d:d8:b1:41:8d:70:91:c9:a5:f7:
                    3f:bb:fe:29:4d:2f:16:a1:5a:a9:96:54:bb:a6:a3:
                    df:e9:57:e0:27:eb:40:a4:de:6e:8f:4c:49:20:c3:
                    89:5f:ca:c0:26:8e:99:4a:58:07:9d:8a:4c:ab:1e:
                    70:29:97:35:4b:5f:11:64:3c:95:a0:c1:ac:05:a9:
                    31:10:54:33:07:be:eb:a9:40:39:ef:b5:1d:0e:13:
                    35:ef:b9:48:62:e5:ea:1c:ae:e6:3d:2b:64:ec:51:
                    b8:d2:79:b5:d5:e1:2f:5f:31:e9:fa:f3:d7:bf:d7:
                    7a:79:59:56:cd:12:a6:93:ff:64:25:12:d3:b2:8a:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:C4:03:6C:E3:24:18:E4:E8:AA:61:D2:02:1A:4F:75:95:D9:C1
            X509v3 Authority Key Identifier:
                keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:83:07:86:7c:3d:f8:28:10:6e:88:84:4b:78:37:ff:78:81:
         16:bb:9f:69:ee:d7:19:d2:81:9f:49:ed:fa:7c:b0:1d:c3:e7:
         84:00:a9:68:4d:cf:fa:bb:42:8a:65:3a:ba:74:f8:ef:28:42:
         eb:88:7d:1f:65:f3:2f:b8:ba:9e:a7:cb:b0:37:4d:55:c5:12:
         5c:bf:7c:f7:d0:d7:67:a8:95:96:52:50:88:77:7c:17:46:fb:
         48:80:6a:bf:14:76:e9:45:6a:6e:97:7b:35:79:29:c2:7f:61:
         99:a7:1f:23:6f:38:0e:69:64:8c:cd:0d:49:fd:44:28:c8:ef:
         a3:7a:5c:58:f9:02:ea:04:fc:d4:ff:2c:d5:41:02:47:e4:5a:
         24:e7:6e:3e:7b:e6:42:f4:8e:c8:7a:18:12:f6:61:f0:0e:e6:
         45:84:24:75:a8:ec:37:4a:a0:e0:b8:68:39:84:d2:31:e6:8a:
         c0:8e:1f:62:3c:36:c5:99:57:64:92:f2:fb:f3:b9:56:f4:52:
         f5:7b:be:e9:91:d0:9d:c4:2a:e6:92:f0:be:8a:59:01:51:71:
         8b:01:ab:95:77:26:c8:6b:95:81:a5:bc:69:ee:b5:49:01:21:
         1e:b5:1d:1a:59:39:b5:6e:f9:57:ba:f8:c0:7d:9c:c0:8d:7b:
         d1:f4:4a:29
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REI3MzVBRjExMC8GA1UEBRMoM0I2OTQwMjM3NzhEQkY2MTRGNkJDNjUzNjQ0NjI3
MEZEMUJCODMyMTAeFw0yNTA3MzEwMTIyMjBaFw0yNTA4MDIwMTIyMjBaMBgxFjAU
BgNVBAMTDTY4OGFjNTRkLWFjODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4ZlVXfMoN+sMJiUoIcNg/X39ZTn1OJT1U/VYkpsu1qr9+63g3Vq5xk+57
1mgYWghsND4YZjnwKhszFt5yxG1dM7SPrvirZnCg7hffvlWL6SCqT/K2VCHcep5I
ONBo1pC8ztJMwHeovrZipdLrhtPmXnmbZZe0VeMjnkmsTdixQY1wkcml9z+7/ilN
LxahWqmWVLumo9/pV+An60Ck3m6PTEkgw4lfysAmjplKWAedikyrHnAplzVLXxFk
PJWgwawFqTEQVDMHvuupQDnvtR0OEzXvuUhi5eocruY9K2TsUbjSebXV4S9fMen6
89e/13p5WVbNEqaT/2QlEtOyii7nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnpDE
A2zjJBjk6Kph0gIaT3WV2cEwHwYDVR0jBBgwFoAUO2lAI3eNv2FPa8ZTZEYnD9G7
gyEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNzM1LzRDNTFCNzcwNTdBMjExRTk5NURCQjI3M0Y4QUVBMjI4L08ybEFJ
M2VOdjJGUGE4WlRaRVluRDlHN2d5RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL08ybEFJM2VOdjJGUGE4WlRaRVluRDlHN2d5RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REI3MzUvNEM1MUI3NzA1N0EyMTFFOTk1REJCMjczRjhB
RUEyMjgvTzJsQUkzZU52MkZQYThaVFpFWW5EOUc3Z3lFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzgweGfD34KBBuiIRLeDf/eIEWu59p
7tcZ0oGfSe36fLAdw+eEAKloTc/6u0KKZTq6dPjvKELriH0fZfMvuLqep8uwN01V
xRJcv3z30NdnqJWWUlCId3wXRvtIgGq/FHbpRWpul3s1eSnCf2GZpx8jbzgOaWSM
zQ1J/UQoyO+jelxY+QLqBPzU/yzVQQJH5Fok524+e+ZC9I7IehgS9mHwDuZFhCR1
qOw3SqDguGg5hNIx5orAjh9iPDbFmVdkkvL787lW9FL1e77pkdCdxCrmkvC+ilkB
UXGLAauVdybIa5WBpbxp7rVJASEetR0aWTm1bvlXuvjAfZzAjXvR9Eop
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:18:17 2025 by rpki-client