Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
File:                     X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft (raw, json)
Hash identifier:          K1k4IBNfvQeL0NNAKXw2ZHcZX6cl18UUpHAMcq/djVM=
Subject key identifier:   DB:91:2B:4E:3E:E8:23:E3:11:A9:EE:0E:7B:24:5C:93:B8:7F:44:73
Authority key identifier: 5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24
Certificate issuer:       /CN=F36DD1E2AF/serialNumber=5FD4C60AEC0F5B276DAAB9DB6911766589D8AA24
Certificate serial:       0730
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
Manifest number:          072F
Signing time:             Wed 04 Jun 2025 01:57:39 +0000
Manifest this update:     Wed 04 Jun 2025 01:57:38 +0000
Manifest next update:     Fri 06 Jun 2025 01:57:38 +0000
Files and hashes:         1: X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl (hash: nYRqdzgGkS56CalNYdCN3X8mj66pRUZWyBS/ijXVGuE=)
                          2: 9E5F4D20C02911EAA359D20AF8AEA228.roa (hash: mddgoRu4s2817HTK3OKl+Ig4JHtX0J/FyOyMNUGfu+I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD1E2AF, serialNumber=5FD4C60AEC0F5B276DAAB9DB6911766589D8AA24
        Validity
            Not Before: Jun  4 01:57:38 2025 GMT
            Not After : Jun  6 01:57:38 2025 GMT
        Subject: CN=683fa813-ea0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:ea:3a:42:ef:e6:47:db:ad:cc:53:28:ad:
                    f1:bf:7c:74:6a:3d:64:f4:1d:1b:7b:07:9a:96:8d:
                    0d:10:bb:b8:25:8d:68:2d:82:80:3a:c9:57:70:26:
                    b3:ec:0d:be:e1:cb:64:12:c0:d8:21:54:6b:b6:46:
                    b2:56:a4:4d:1a:94:32:7d:0f:05:cb:ce:42:3b:62:
                    ae:72:71:c6:b7:29:d8:90:21:c7:7c:82:57:e0:3f:
                    40:7a:b0:a2:89:40:b4:e8:de:b8:35:3d:a2:97:74:
                    36:91:92:72:a8:c0:a6:cc:e3:3c:0f:70:ee:ca:1b:
                    e7:3f:03:6f:d8:95:26:45:48:00:63:b8:e0:c9:81:
                    6c:9f:65:6f:97:96:40:86:f2:2a:66:0f:a1:8a:c7:
                    49:bc:89:e9:ef:20:06:06:79:3d:6f:6a:b1:d4:83:
                    82:71:a3:41:3f:1c:27:8f:59:23:32:da:47:11:cf:
                    1f:fd:bc:de:09:08:69:7f:7c:6f:91:77:51:d0:9c:
                    82:6c:3b:2e:14:09:c8:59:d2:97:10:4d:c4:90:0e:
                    58:ee:fc:ba:12:4a:92:8b:05:28:60:fd:a1:18:3f:
                    e9:3d:a1:3e:0a:b7:88:d9:3b:15:43:4b:51:b5:20:
                    fc:e5:64:5a:25:93:2d:f1:d7:2c:bf:73:fd:54:a7:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:91:2B:4E:3E:E8:23:E3:11:A9:EE:0E:7B:24:5C:93:B8:7F:44:73
            X509v3 Authority Key Identifier:
                keyid:5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:d1:9a:ee:56:8f:86:03:39:02:c4:e9:30:f3:57:0a:ff:
         26:88:70:85:cb:cd:29:f6:a9:f5:0d:d2:f8:6f:4e:9d:c5:23:
         d8:08:e3:1f:d8:b5:14:07:f6:5d:47:f0:f5:8a:72:33:b5:94:
         d4:22:07:4f:67:f0:5e:ac:c8:76:d7:42:0c:a6:e4:ea:40:c9:
         b5:0f:9f:ad:e5:e3:af:ce:c6:ae:25:e2:65:2e:20:bb:4d:bc:
         21:4a:c8:90:2a:f9:24:8b:72:39:3e:a3:16:7b:96:5f:86:d8:
         f0:84:62:fe:55:af:86:87:e5:ac:05:8b:3b:94:18:7a:90:0b:
         89:6b:0c:bb:35:a4:e6:89:bd:20:06:3b:c2:83:0e:60:05:b5:
         7a:21:a6:28:21:c7:76:ea:af:13:46:6d:00:16:48:9b:2a:90:
         42:16:55:f1:d8:3d:d6:74:89:20:fd:d4:da:3a:bb:16:36:25:
         91:f1:0f:16:eb:38:bf:7a:b2:6f:9f:bb:18:d4:76:d6:6d:31:
         10:58:aa:f2:f3:80:56:63:a8:e0:8a:19:8c:9f:82:ac:c3:56:
         b1:ba:1c:85:97:15:85:44:a6:47:44:18:d3:30:8b:21:ad:77:
         c0:a8:85:ce:f7:01:75:b7:aa:68:8d:a3:8f:e2:dd:e8:cf:53:
         ef:db:e1:ea
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REQxRTJBRjExMC8GA1UEBRMoNUZENEM2MEFFQzBGNUIyNzZEQUFCOURCNjkxMTc2
NjU4OUQ4QUEyNDAeFw0yNTA2MDQwMTU3MzhaFw0yNTA2MDYwMTU3MzhaMBgxFjAU
BgNVBAMTDTY4M2ZhODEzLWVhMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjiuo6Qu/mR9utzFMorfG/fHRqPWT0HRt7B5qWjQ0Qu7gljWgtgoA6yVdw
JrPsDb7hy2QSwNghVGu2RrJWpE0alDJ9DwXLzkI7Yq5ycca3KdiQIcd8glfgP0B6
sKKJQLTo3rg1PaKXdDaRknKowKbM4zwPcO7KG+c/A2/YlSZFSABjuODJgWyfZW+X
lkCG8ipmD6GKx0m8ienvIAYGeT1varHUg4Jxo0E/HCePWSMy2kcRzx/9vN4JCGl/
fG+Rd1HQnIJsOy4UCchZ0pcQTcSQDlju/LoSSpKLBShg/aEYP+k9oT4Kt4jZOxVD
S1G1IPzlZFolky3x1yy/c/1Up8BTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU25Er
Tj7oI+MRqe4OeyRck7h/RHMwHwYDVR0jBBgwFoAUX9TGCuwPWydtqrnbaRF2ZYnY
qiQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkREMUUyLzU0QzkxOTJBQzAyOTExRUE5MUMzODcwQUY4QUVBMjI4L1g5VEdD
dXdQV3lkdHFybmJhUkYyWlluWXFpUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1g5VEdDdXdQV3lkdHFybmJhUkYyWlluWXFpUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REQxRTIvNTRDOTE5MkFDMDI5MTFFQTkxQzM4NzBBRjhB
RUEyMjgvWDlUR0N1d1BXeWR0cXJuYmFSRjJaWW5ZcWlRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFxtGa7laPhgM5AsTpMPNXCv8miHCF
y80p9qn1DdL4b06dxSPYCOMf2LUUB/ZdR/D1inIztZTUIgdPZ/BerMh210IMpuTq
QMm1D5+t5eOvzsauJeJlLiC7TbwhSsiQKvkki3I5PqMWe5ZfhtjwhGL+Va+Gh+Ws
BYs7lBh6kAuJawy7NaTmib0gBjvCgw5gBbV6IaYoIcd26q8TRm0AFkibKpBCFlXx
2D3WdIkg/dTaOrsWNiWR8Q8W6zi/erJvn7sY1HbWbTEQWKry84BWY6jgihmMn4Ks
w1axuhyFlxWFRKZHRBjTMIshrXfAqIXO9wF1t6pojaOP4t3oz1Pv2+Hq
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:13:04 2025 by rpki-client