Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File:                     XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier:          /XDfsSoyDq2D38AMV4WVvXbWPisClFWT3cP3mmIk37E=
Subject key identifier:   A5:11:8C:31:E7:04:DC:C3:11:A8:EB:53:A5:C1:4C:18:7C:9E:1A:3E
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer:       /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial:       0491
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number:          048F
Signing time:             Sat 23 Aug 2025 03:03:12 +0000
Manifest this update:     Sat 23 Aug 2025 03:03:12 +0000
Manifest next update:     Mon 25 Aug 2025 03:03:12 +0000
Files and hashes:         1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: JRX6CP5uZtFsu8kogF4Q7u3h11kEe0rQ0vDzdR0MLsc=)
                          2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361174DAF, serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
        Validity
            Not Before: Aug 23 03:03:12 2025 GMT
            Not After : Aug 25 03:03:12 2025 GMT
        Subject: CN=68a92f70-d01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:e8:32:52:20:7d:86:24:cf:a0:3d:16:23:
                    ad:e9:50:f9:42:66:88:a2:8d:34:d2:66:b5:d7:ee:
                    e1:6b:e7:a7:6a:e7:8f:a5:38:d8:a1:99:a7:30:9d:
                    7c:32:0b:db:40:71:cb:15:1c:41:b1:34:03:a6:34:
                    77:9a:00:ab:b3:57:e6:aa:6f:54:48:73:f4:5c:fd:
                    c0:47:b9:1e:e1:92:c4:4b:be:71:36:42:5f:e8:1f:
                    37:b2:a8:f6:9b:ee:14:a1:53:0d:00:10:52:7c:ab:
                    bf:b5:50:1d:eb:9a:e6:19:8e:d2:05:47:5c:86:dc:
                    7a:7c:07:ac:58:91:48:42:c0:67:36:28:82:4f:e3:
                    f7:cd:bc:15:a4:dd:37:e1:f4:f1:44:46:04:98:87:
                    72:c5:c1:76:22:48:e8:0a:78:ec:4c:a1:55:5b:86:
                    46:a2:d6:db:d7:5d:22:65:52:ca:db:67:04:ee:9c:
                    85:df:72:63:c4:f0:fd:e7:23:17:0d:61:b7:89:33:
                    ac:e8:10:8a:db:cc:22:f7:64:21:d2:78:ff:08:df:
                    2d:00:62:e5:a7:cc:c2:cf:0b:61:d6:a9:70:10:59:
                    11:ff:b6:92:1e:4d:be:fe:ee:a8:db:81:cf:f3:66:
                    06:c2:c1:60:3c:93:8f:5d:f0:03:48:9a:c8:2b:1f:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:11:8C:31:E7:04:DC:C3:11:A8:EB:53:A5:C1:4C:18:7C:9E:1A:3E
            X509v3 Authority Key Identifier:
                keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:4d:81:b5:10:38:7e:e0:d1:63:7c:76:73:d8:fc:19:88:
         11:74:64:fb:23:ae:bf:fd:3c:71:c4:83:5b:ad:4b:ff:df:76:
         9d:6e:03:68:1d:7e:ad:f3:b6:a0:d0:08:6a:cd:2a:27:7c:bd:
         f6:6e:9a:6d:24:16:39:4b:af:34:f4:7b:d9:82:70:e1:f9:3c:
         f6:4d:2b:6d:bc:50:16:39:48:88:15:a1:9d:bd:c3:85:98:5a:
         f5:66:4e:ed:72:ad:45:12:3b:44:88:74:d0:b1:05:ac:45:b3:
         31:09:05:48:26:55:ce:72:0a:8e:17:f5:e2:cc:5a:6a:b1:0f:
         83:e2:89:5b:3b:50:d7:68:50:65:58:c6:c6:65:45:8c:dc:fd:
         b9:73:6a:d6:01:a6:df:1f:9a:f3:0d:cc:65:44:88:55:21:1d:
         d3:fc:37:08:97:53:6e:39:1f:94:95:3d:60:47:b3:3e:cd:7c:
         ec:7e:6c:6c:af:05:25:79:a5:a7:a6:ed:af:ee:fb:a3:a6:e3:
         2b:10:ec:d3:ca:48:c0:9c:76:b7:f3:f3:bb:43:d2:f9:be:f9:
         75:47:cd:b4:c3:cc:93:6c:9d:d2:7a:ef:1d:e0:4f:c0:76:36:
         86:0a:e4:7d:da:ed:2e:af:39:4c:e6:4c:6d:c4:ef:40:7c:79:
         f2:7e:2c:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTE3NERBRjExMC8GA1UEBRMoNURBNkNERTM5QjE0NEM0N0IxMzcxQTc5QkY2MkNG
NkVEQ0E0QTczQjAeFw0yNTA4MjMwMzAzMTJaFw0yNTA4MjUwMzAzMTJaMBgxFjAU
BgNVBAMTDTY4YTkyZjcwLWQwMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmBegyUiB9hiTPoD0WI63pUPlCZoiijTTSZrXX7uFr56dq54+lONihmacw
nXwyC9tAccsVHEGxNAOmNHeaAKuzV+aqb1RIc/Rc/cBHuR7hksRLvnE2Ql/oHzey
qPab7hShUw0AEFJ8q7+1UB3rmuYZjtIFR1yG3Hp8B6xYkUhCwGc2KIJP4/fNvBWk
3Tfh9PFERgSYh3LFwXYiSOgKeOxMoVVbhkai1tvXXSJlUsrbZwTunIXfcmPE8P3n
IxcNYbeJM6zoEIrbzCL3ZCHSeP8I3y0AYuWnzMLPC2HWqXAQWRH/tpIeTb7+7qjb
gc/zZgbCwWA8k49d8ANImsgrHxQFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpRGM
MecE3MMRqOtTpcFMGHyeGj4wHwYDVR0jBBgwFoAUXabN45sUTEexNxp5v2LPbtyk
pzswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExNzRELzI1RUMxMEMwMDhGODExRUQ5MTBBQzNBNUYxMjIyNDY4L1hhYk40
NXNVVEVleE54cDV2MkxQYnR5a3B6cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hhYk40NXNVVEVleE54cDV2MkxQYnR5a3B6cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTE3NEQvMjVFQzEwQzAwOEY4MTFFRDkxMEFDM0E1RjEy
MjI0NjgvWGFiTjQ1c1VURWV4TnhwNXYyTFBidHlrcHpzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAepU2BtRA4fuDRY3x2c9j8GYgRdGT7
I66//TxxxINbrUv/33adbgNoHX6t87ag0AhqzSonfL32bpptJBY5S6809HvZgnDh
+Tz2TSttvFAWOUiIFaGdvcOFmFr1Zk7tcq1FEjtEiHTQsQWsRbMxCQVIJlXOcgqO
F/XizFpqsQ+D4olbO1DXaFBlWMbGZUWM3P25c2rWAabfH5rzDcxlRIhVIR3T/DcI
l1NuOR+UlT1gR7M+zXzsfmxsrwUleaWnpu2v7vujpuMrEOzTykjAnHa38/O7Q9L5
vvl1R820w8yTbJ3Seu8d4E/AdjaGCuR92u0urzlM5kxtxO9AfHnyfizy
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:01 2025 by rpki-client