Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          M+9eVOeMvcS+us/T/bf746/L66zMaVKy1neKQeIMQQ8=
Subject key identifier:   0B:26:67:1A:89:EF:A3:1E:F4:D4:70:2B:80:14:D1:6A:91:77:7C:C7
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       01DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          01D9
Signing time:             Sun 27 Jul 2025 04:34:00 +0000
Manifest this update:     Sun 27 Jul 2025 04:34:00 +0000
Manifest next update:     Tue 29 Jul 2025 04:33:59 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: rd5R6an1wzBVqL7eyIEKSntdHPZ5WCZiX4yJSo6XJbE=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
        Validity
            Not Before: Jul 27 04:34:00 2025 GMT
            Not After : Jul 29 04:33:59 2025 GMT
        Subject: CN=6885ac38-5f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b4:25:ec:c2:0f:91:36:a9:d6:7c:b5:ea:67:
                    4b:23:fe:11:dc:3f:a3:a5:4e:88:a7:29:8e:c1:df:
                    f3:99:22:dc:41:c5:c0:52:74:65:d8:95:85:ca:9d:
                    78:04:02:84:a2:6d:47:84:f8:b7:d8:c6:d0:2c:b3:
                    b6:17:6f:03:c7:f8:17:8c:ad:5f:2f:69:a4:5f:f5:
                    e6:8e:a7:ef:22:fe:49:88:db:aa:c1:df:00:87:ff:
                    16:0a:55:29:78:30:dc:70:c9:ce:4f:32:8e:c7:6d:
                    1f:a2:23:8b:7e:0b:a8:b1:a9:c1:5c:b5:12:24:fc:
                    e0:4a:a8:c0:18:df:0e:51:4c:dc:a7:c5:ce:b3:57:
                    29:e1:b4:43:a6:a5:bc:8b:00:c3:21:9c:85:17:0e:
                    fe:1a:74:ad:d2:7e:77:04:5e:73:0b:85:47:80:99:
                    1c:38:b7:9c:90:ec:3d:5b:41:2a:95:3e:92:51:25:
                    74:9c:1a:d5:3f:35:96:4e:7d:bb:16:89:a9:3f:a7:
                    bb:23:09:d4:89:0e:21:f6:6a:52:5f:ae:7e:69:a6:
                    11:ca:12:3e:45:3d:8c:82:66:5a:22:9b:25:5d:27:
                    32:0e:cd:66:02:60:4e:5d:bc:9d:fe:a4:c2:ab:19:
                    2a:9d:3a:99:5a:c9:f1:67:fc:ca:1f:73:bf:f2:37:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:26:67:1A:89:EF:A3:1E:F4:D4:70:2B:80:14:D1:6A:91:77:7C:C7
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c9:93:20:c4:e3:2b:64:73:67:92:41:f8:46:f0:cf:42:6a:
         22:2a:ef:4b:af:b9:b5:b4:4c:23:5e:97:e9:f9:99:4e:bc:ea:
         41:7e:72:fa:7f:8d:ec:2f:b3:89:74:47:71:63:ab:9e:a7:31:
         9e:b5:b0:22:f6:25:7b:ea:51:9c:3a:3f:3d:38:d2:95:83:f0:
         b9:0f:10:14:9b:02:20:b8:e9:13:3c:fe:cd:54:ae:7c:23:0d:
         8e:b1:bf:29:76:3c:80:1c:de:bb:2e:3a:f5:aa:af:21:db:46:
         2a:42:95:27:a6:fd:d6:4a:75:84:aa:16:1b:bb:cd:75:88:61:
         53:e5:f4:86:e4:f2:4e:bd:45:85:e7:22:d6:65:36:50:6a:d7:
         5c:fc:29:9b:37:13:df:66:64:69:24:79:83:2f:1d:ca:24:1b:
         97:aa:c8:bb:16:38:7b:cd:12:59:b1:6b:c1:dd:74:61:8d:99:
         d2:f1:53:a7:b5:6c:88:31:79:4c:7d:8e:b8:e6:78:4a:96:77:
         48:b9:4e:e5:b4:4e:e7:8d:00:a8:d1:41:b1:d1:df:72:4f:f8:
         be:a9:51:82:d1:26:13:7b:e0:01:5f:3c:32:5d:50:14:35:10:
         e1:fa:2b:00:41:8a:d7:28:7f:3c:7b:90:0c:5f:13:bf:2f:66:
         47:bb:e1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:58 2025 by rpki-client