Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
File:                     qv9F7YLc9bhYA4mULVnp0p9bwuE.mft (raw, json)
Hash identifier:          4HM6NKSfk2E5kIkqIMTeW2Vuf7BRukESdNpUtvouAEs=
Subject key identifier:   BA:07:1E:30:F1:EE:03:FC:FA:B1:BD:3C:20:BC:5F:AB:A9:B8:FA:0C
Authority key identifier: AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1
Certificate issuer:       /CN=F36E0972AF/serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
Certificate serial:       0242
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
Manifest number:          0241
Signing time:             Wed 04 Jun 2025 04:10:10 +0000
Manifest this update:     Wed 04 Jun 2025 04:10:09 +0000
Manifest next update:     Fri 06 Jun 2025 04:10:09 +0000
Files and hashes:         1: qv9F7YLc9bhYA4mULVnp0p9bwuE.crl (hash: WfafmNquxXRvTr/Tt/Cl5e9+FQtRJn0qhs9iec1eTmg=)
                          2: 17B6FBFE87C911EEBD3EF6264AD9E6FC.roa (hash: 5ZD1WUDmaiv05T51fwwZBTVbvUWprAEi25d+4iZwaOA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0972AF, serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
        Validity
            Not Before: Jun  4 04:10:09 2025 GMT
            Not After : Jun  6 04:10:09 2025 GMT
        Subject: CN=683fc721-f042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:18:aa:9d:a6:f5:00:82:7a:06:74:9e:68:
                    75:80:2c:84:4e:b1:0c:4a:48:44:ae:b7:2a:84:be:
                    45:1d:52:13:53:60:0f:c7:5e:85:7c:c7:db:09:9f:
                    1a:0f:bc:62:48:13:d4:45:b4:d2:43:3f:a3:29:05:
                    21:57:eb:00:e3:04:51:58:87:74:52:82:a2:51:11:
                    6f:1f:63:f6:54:3b:c3:a5:31:a8:bd:92:4f:a3:50:
                    e8:90:c0:40:c1:5a:2f:81:2d:2b:94:f7:62:01:3b:
                    14:78:93:11:49:54:16:2a:bb:3b:53:0c:40:bd:98:
                    e4:5f:64:7b:7a:a3:eb:b0:17:02:8a:c7:45:f2:13:
                    dd:d8:18:d6:07:91:d3:8f:a9:c8:60:a9:46:ce:98:
                    b5:f6:5c:37:0f:84:3b:27:77:87:c8:bf:5c:d9:32:
                    31:76:85:ba:42:3b:c9:71:55:55:23:c2:d2:c9:2b:
                    de:b6:ff:32:3e:08:fa:39:c7:1a:c6:ca:c9:f4:f2:
                    e9:34:1c:90:42:91:7a:05:b9:de:6c:73:4c:4d:bb:
                    48:77:03:25:9f:e2:fb:dd:fc:ca:a4:64:dc:35:38:
                    0e:d9:8f:de:66:4f:9e:d0:d0:b6:d6:20:b5:d2:00:
                    c2:94:c2:42:de:26:b1:dc:09:4f:2e:ba:7f:2f:ed:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:07:1E:30:F1:EE:03:FC:FA:B1:BD:3C:20:BC:5F:AB:A9:B8:FA:0C
            X509v3 Authority Key Identifier:
                keyid:AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:e1:16:c3:54:67:e4:9a:b0:82:00:2a:1e:5e:eb:20:fb:
         77:be:0c:1c:4d:7e:c4:6d:ac:b1:3b:e8:ec:b6:bf:a8:70:f0:
         86:80:36:4b:72:9e:96:3d:ff:6b:fb:88:00:be:99:e4:a7:1b:
         42:f7:84:49:8b:24:91:6b:35:97:30:89:e6:14:0b:3b:56:25:
         a0:e5:75:ac:71:29:52:18:70:0a:39:96:f6:16:7f:93:04:7b:
         d7:97:97:be:06:56:c4:43:0a:a3:ec:e1:1b:f4:f9:9e:84:68:
         bb:e7:b8:70:44:1f:fb:96:c7:f1:24:d4:85:51:15:e4:05:ff:
         1f:34:9f:2e:6c:e7:de:63:14:38:93:68:69:6c:7f:95:f4:d7:
         09:08:71:d8:2e:2d:ab:98:3a:54:06:39:c7:3a:bc:dc:5d:40:
         19:1a:5e:87:22:77:1e:8f:82:93:76:e8:f6:b1:37:9c:34:4b:
         4b:f9:60:fe:f4:2c:4a:bd:45:19:e6:4d:20:de:6c:54:ea:93:
         89:91:ba:99:d2:e4:94:b4:e2:7f:fd:7c:d1:c6:6e:17:12:65:
         bd:80:db:64:3a:d2:98:31:10:0d:d9:1a:52:23:37:cc:cf:49:
         9d:dc:30:30:a3:e0:9d:55:69:9c:08:3a:b5:35:4d:7d:bd:77:
         15:76:f6:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTA5NzJBRjExMC8GA1UEBRMoQUFGRjQ1RUQ4MkRDRjVCODU4MDM4OTk0MkQ1OUU5
RDI5RjVCQzJFMTAeFw0yNTA2MDQwNDEwMDlaFw0yNTA2MDYwNDEwMDlaMBgxFjAU
BgNVBAMTDTY4M2ZjNzIxLWYwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDhBiqnab1AIJ6BnSeaHWALIROsQxKSESutyqEvkUdUhNTYA/HXoV8x9sJ
nxoPvGJIE9RFtNJDP6MpBSFX6wDjBFFYh3RSgqJREW8fY/ZUO8OlMai9kk+jUOiQ
wEDBWi+BLSuU92IBOxR4kxFJVBYquztTDEC9mORfZHt6o+uwFwKKx0XyE93YGNYH
kdOPqchgqUbOmLX2XDcPhDsnd4fIv1zZMjF2hbpCO8lxVVUjwtLJK962/zI+CPo5
xxrGysn08uk0HJBCkXoFud5sc0xNu0h3AyWf4vvd/MqkZNw1OA7Zj95mT57Q0LbW
ILXSAMKUwkLeJrHcCU8uun8v7Y0bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUugce
MPHuA/z6sb08ILxfq6m4+gwwHwYDVR0jBBgwFoAUqv9F7YLc9bhYA4mULVnp0p9b
wuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUwOTcyL0M5QkYxMkNFODdDODExRUU4MTYwMzUyNjRBRDlFNkZDL3F2OUY3
WUxjOWJoWUE0bVVMVm5wMHA5Ynd1RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3F2OUY3WUxjOWJoWUE0bVVMVm5wMHA5Ynd1RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTA5NzIvQzlCRjEyQ0U4N0M4MTFFRTgxNjAzNTI2NEFE
OUU2RkMvcXY5RjdZTGM5YmhZQTRtVUxWbnAwcDlid3VFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANYuEWw1Rn5JqwggAqHl7rIPt3vgwc
TX7EbayxO+jstr+ocPCGgDZLcp6WPf9r+4gAvpnkpxtC94RJiySRazWXMInmFAs7
ViWg5XWscSlSGHAKOZb2Fn+TBHvXl5e+BlbEQwqj7OEb9PmehGi757hwRB/7lsfx
JNSFURXkBf8fNJ8ubOfeYxQ4k2hpbH+V9NcJCHHYLi2rmDpUBjnHOrzcXUAZGl6H
Incej4KTduj2sTecNEtL+WD+9CxKvUUZ5k0g3mxU6pOJkbqZ0uSUtOJ//XzRxm4X
EmW9gNtkOtKYMRAN2RpSIzfMz0md3DAwo+CdVWmcCDq1NU19vXcVdvZv
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:57:16 2025 by rpki-client