Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
File:                     WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft (raw, json)
Hash identifier:          S3G5W3N/KfOxZNFFIFy56IVLFWaYgff4C/frThdHvoM=
Subject key identifier:   39:0E:23:D6:D7:F9:F3:49:26:1B:43:C7:CA:BF:A6:EC:C5:67:78:F0
Authority key identifier: 5A:65:99:72:FE:FD:81:31:88:8E:CA:98:B8:F4:33:26:6C:D0:E1:76
Certificate issuer:       /CN=F36DE42DAF/serialNumber=5A659972FEFD8131888ECA98B8F433266CD0E176
Certificate serial:       0321
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
Manifest number:          0317
Signing time:             Wed 17 Sep 2025 03:44:08 +0000
Manifest this update:     Wed 17 Sep 2025 03:44:07 +0000
Manifest next update:     Fri 19 Sep 2025 03:44:07 +0000
Files and hashes:         1: WmWZcv79gTGIjsqYuPQzJmzQ4XY.crl (hash: VWAVc3kKnfOuP9VYrTnXmnpG5AmagtpM1Ujmb/ndMMY=)
                          2: A2D13DF841E211EE8413814F4AD9E6FC.roa (hash: +7tV3cQty0a49mDJHI575oP8uB6zRrZwyEYtIFBv8tA=)
                          3: F62D4A1A41E111EEAB1E864D4AD9E6FC.roa (hash: cFAo+wqTSQNV3wV3FVduOPs4bmdlZBBXmrehWIFAAig=)
                          4: 4950982841E211EE8834944E4AD9E6FC.roa (hash: 3xpGJMGpfFtuBh/X+DB86zB83LJuJIk3NmjOA6Pr8VU=)
                          5: 0E5411CC41E311EE82D6E3514AD9E6FC.roa (hash: 3TJK0gE+dAU3VH/PHstp9QZrPkjTTl+asVnrwcQTUME=)
                          6: 1BBC3BC641E011EE8387A9474AD9E6FC.roa (hash: dJ93WOjftr3A/tY41rgLkc9g+edR1ROqqJR9IAwgCiY=)
                          7: A651F64441E111EEADBE8A4C4AD9E6FC.roa (hash: na3zMW65LzRLit/bOf3+sfLfwD/XqHGj5J+NXRc3tMg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DAF, serialNumber=5A659972FEFD8131888ECA98B8F433266CD0E176
        Validity
            Not Before: Sep 17 03:44:07 2025 GMT
            Not After : Sep 19 03:44:07 2025 GMT
        Subject: CN=68ca2e88-52fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:a5:f5:75:65:ce:94:5a:91:0c:de:1f:17:
                    67:0e:ad:ac:c3:e7:1f:c4:11:53:3b:f8:5f:e9:f7:
                    32:07:d2:bd:9f:59:47:28:73:95:f3:62:6a:94:54:
                    86:5d:d1:83:b6:e7:cf:b8:17:24:2f:23:b9:94:fc:
                    b4:8e:dc:ae:8d:b8:5f:d5:39:cc:a6:84:9e:4a:a8:
                    db:62:21:61:62:16:85:6d:44:93:b6:5b:b0:a4:fa:
                    23:2d:2e:77:36:fa:86:5c:3c:85:70:bd:9c:e1:0e:
                    bc:ef:7e:05:ca:60:70:3a:73:09:9b:cd:79:b5:01:
                    d1:49:af:aa:75:cd:8d:c0:f8:20:91:10:53:46:aa:
                    bc:8b:90:7a:4e:fc:6e:c2:56:bc:36:17:4b:3e:95:
                    97:2b:52:80:8f:fe:ea:b6:fd:b4:8a:55:5a:9e:02:
                    c9:4a:b1:2a:aa:23:0a:a4:ec:1f:e9:19:e8:a1:6e:
                    b1:da:12:df:38:09:82:73:85:ff:6c:39:46:41:ee:
                    82:64:27:b3:34:e6:41:6f:2b:aa:99:12:23:4d:69:
                    82:c7:77:3d:a3:2e:5b:21:15:d5:15:13:c6:e2:05:
                    e8:96:8b:f1:06:86:03:8a:26:1f:59:2e:9a:d2:dd:
                    33:85:11:81:65:48:94:fa:ac:94:d6:ec:5d:bd:d2:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:23:D6:D7:F9:F3:49:26:1B:43:C7:CA:BF:A6:EC:C5:67:78:F0
            X509v3 Authority Key Identifier:
                keyid:5A:65:99:72:FE:FD:81:31:88:8E:CA:98:B8:F4:33:26:6C:D0:E1:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WmWZcv79gTGIjsqYuPQzJmzQ4XY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/DD92018241DA11EE8310FE374AD9E6FC/WmWZcv79gTGIjsqYuPQzJmzQ4XY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:80:36:d6:62:90:c6:61:d2:97:a0:b0:c1:0e:b8:19:f8:
         48:53:fe:4f:62:76:07:83:88:c1:a1:d6:6b:16:45:54:9c:37:
         83:c8:dd:2d:fc:b6:b3:24:83:f5:29:44:cc:8c:77:27:73:b8:
         06:48:f0:66:b8:41:f5:9a:70:b0:17:d0:84:15:8e:8a:0c:19:
         dd:60:47:54:0f:18:c4:03:be:bd:0a:f7:96:ff:c7:75:ad:94:
         5c:ae:de:9d:88:f6:83:3c:79:54:92:82:7f:08:9f:bd:ec:6f:
         ec:56:f3:51:a4:47:c3:35:4c:2f:1b:b7:06:05:2e:e9:10:76:
         20:72:52:3a:76:d1:44:12:ab:b2:76:6d:c7:2e:da:4f:7c:70:
         59:2b:2c:4e:23:70:4e:d2:56:6f:2d:45:b5:ff:d7:bc:c4:fa:
         b5:7e:70:2e:66:80:ca:98:81:fc:26:e9:6f:cc:c7:86:fb:49:
         af:0b:09:e5:7c:97:a2:3b:cc:82:bf:f7:b7:c8:7e:9e:09:29:
         65:99:77:76:a6:63:d3:12:f6:24:99:f8:bb:2e:83:5c:e6:82:
         a3:00:9f:69:d6:ae:85:1c:3a:86:9e:0e:a7:d0:a7:4e:3e:a0:
         be:67:a5:48:f8:63:74:24:62:74:d6:b2:3c:a2:7d:70:2a:df:
         95:04:51:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 18:33:56 2025 by rpki-client