Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          nAHF+5NyDUFTT5AkNxf/87LnufjMfkSdNJPLflD1+/Q=
Subject key identifier:   58:19:1B:19:13:1F:CA:1D:0B:4C:85:0F:28:B0:AD:32:7A:2D:A1:0C
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       01A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          01A5
Signing time:             Fri 06 Jun 2025 04:30:43 +0000
Manifest this update:     Fri 06 Jun 2025 04:30:42 +0000
Manifest next update:     Sun 08 Jun 2025 04:30:42 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: fgF1HM/Z+qu/yZ5ptCvg4opIutm3DEUhb6nw7zwoAcA=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
        Validity
            Not Before: Jun  6 04:30:42 2025 GMT
            Not After : Jun  8 04:30:42 2025 GMT
        Subject: CN=68426ef3-9d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:f7:3e:7e:83:53:bd:a3:3e:3a:e1:3b:ac:
                    e5:48:e5:54:25:a2:64:32:9c:1a:83:19:2d:9f:62:
                    03:5c:71:67:7d:ea:90:86:cb:4d:74:70:68:a1:8d:
                    0e:55:eb:43:f0:93:b3:43:6d:d2:10:a2:f3:5e:fc:
                    24:bd:c7:9b:f7:ee:f9:6b:0a:8a:c3:0e:cd:5a:e9:
                    68:a9:e4:e9:5b:76:0d:e9:bc:78:40:ee:54:af:af:
                    b7:64:f0:f4:39:76:cc:b7:a2:f8:6d:fa:69:d1:44:
                    d3:61:f4:69:3c:ed:cf:72:d3:d2:53:41:2d:e6:ac:
                    77:0d:5e:16:d7:d5:91:f9:d6:a2:8c:70:3e:33:8f:
                    90:3c:56:58:d5:a4:b5:95:97:8e:d6:90:d5:20:b8:
                    2b:e9:66:ed:14:0b:f5:0f:9a:fd:66:8b:09:a2:9c:
                    6c:ab:47:c2:95:79:9a:67:5c:96:0c:07:88:d8:64:
                    cf:40:64:02:d2:5e:e8:88:eb:5c:99:ad:a6:12:57:
                    45:b1:9a:3d:f3:af:26:78:fa:ec:4c:37:01:58:de:
                    23:89:cf:08:f7:46:0a:9a:3e:c1:1e:e8:15:e1:06:
                    56:fc:45:48:57:5f:da:86:c6:80:9d:02:ac:76:62:
                    56:34:82:d6:05:9f:ab:6e:78:db:b5:17:fb:47:f9:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:1B:19:13:1F:CA:1D:0B:4C:85:0F:28:B0:AD:32:7A:2D:A1:0C
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:33:6a:c9:c8:63:d0:da:80:15:02:89:d4:a3:cb:37:d3:a4:
         d2:aa:ff:e0:08:42:d8:ca:0b:a7:64:38:b8:94:1e:85:d2:91:
         87:70:b5:92:58:dc:9a:a2:08:d9:75:8c:bc:01:f1:01:3c:06:
         a4:cf:37:ef:e9:86:b0:23:30:a0:14:9b:67:39:b0:62:6c:36:
         e5:e7:17:f2:63:71:94:cc:a8:cd:84:64:38:b2:3b:b7:c3:54:
         4d:e0:ca:84:08:47:0c:b7:6f:0b:3a:f8:56:41:1e:ec:1c:5a:
         af:54:f6:cc:64:fe:7d:9f:bf:5d:e7:b9:77:0a:ac:f6:fc:e3:
         84:17:53:2d:29:22:a2:b9:75:91:2a:14:67:5f:ad:3b:2c:0b:
         ce:ec:60:9f:d6:ae:24:23:bc:9f:0e:e0:60:f0:f0:df:66:07:
         9d:4c:ef:08:73:8b:34:75:73:d0:35:a4:04:aa:38:a8:0b:cd:
         a2:fb:61:6b:d9:7d:5f:f5:86:76:6e:ac:f9:02:ee:7e:30:7b:
         23:b6:e4:b9:d4:db:b9:80:8c:8e:b2:16:4d:12:7b:fc:23:b1:
         3c:ac:11:4d:6c:38:6a:7d:82:ed:51:bf:2e:5c:db:cf:2f:7c:
         02:f9:46:3d:96:ac:52:d0:a7:5b:ad:9f:1a:17:6a:f1:f7:f6:
         8d:5b:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:33 2025 by rpki-client