Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
File:                     BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft (raw, json)
Hash identifier:          yxHYavQNuaW17amid2bN1P6AE8H7B3U+2lePMLTDhoM=
Subject key identifier:   0A:04:1A:40:3D:CD:CE:F3:12:B8:80:75:74:8B:A6:51:71:AF:46:0E
Authority key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Certificate issuer:       /CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
Certificate serial:       05F3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
Manifest number:          05F3
Signing time:             Sat 23 Aug 2025 02:25:49 +0000
Manifest this update:     Sat 23 Aug 2025 02:25:48 +0000
Manifest next update:     Mon 25 Aug 2025 02:25:48 +0000
Files and hashes:         1: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl (hash: 7ZL+4VYoaGopP9Gpb9u/5zb0YD9xj1l5po9CrqbZN8M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                          rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523 (0x5f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
        Validity
            Not Before: Aug 23 02:25:48 2025 GMT
            Not After : Aug 25 02:25:48 2025 GMT
        Subject: CN=68a926ad-2595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:68:e1:ea:4b:d4:2e:af:66:2d:54:6d:b2:
                    98:ca:84:4c:7b:a3:7a:21:cf:b5:11:a1:47:a8:89:
                    ea:9e:9a:7b:ba:ff:0c:a0:7e:b2:48:f3:12:ee:de:
                    e3:be:aa:ec:d1:8a:74:e8:3e:a4:9d:01:35:93:be:
                    f1:00:13:21:4b:0f:09:a2:84:92:90:5c:ae:54:50:
                    06:8d:cc:ad:f5:b5:bf:06:da:12:75:e7:ef:58:aa:
                    3e:dc:4f:79:4b:53:1b:a0:ba:81:73:8f:ff:49:19:
                    b1:72:72:e7:63:1d:2d:34:f4:fe:a0:de:23:08:c6:
                    2f:e8:ed:73:ba:0e:61:04:35:56:a5:fe:91:c4:00:
                    3b:d7:3b:27:29:13:75:ed:4f:83:ca:59:83:ba:6f:
                    99:2b:72:a7:1a:6b:86:a8:2f:c4:b7:8a:13:8a:5e:
                    37:68:55:b6:64:75:82:30:21:04:e0:fe:46:96:5c:
                    dc:e3:f0:33:4a:35:08:c8:59:43:60:24:78:17:33:
                    19:7e:2a:5d:20:a5:f2:8b:7c:ca:21:42:e1:4c:ef:
                    93:f0:ff:ba:82:59:3d:2c:1d:5b:d0:8a:53:48:82:
                    93:ca:08:c8:d1:ff:5f:df:3e:69:c2:fd:49:b5:3c:
                    0f:66:f9:8f:60:7e:2a:d5:25:eb:79:e0:de:ca:a7:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:04:1A:40:3D:CD:CE:F3:12:B8:80:75:74:8B:A6:51:71:AF:46:0E
            X509v3 Authority Key Identifier:
                keyid:04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d3:5e:11:b4:84:78:14:1f:8c:3c:8c:dc:9f:e4:17:42:b4:
         a1:d0:e6:e7:d4:b4:70:e8:52:92:b7:cd:d7:2b:39:d8:c8:82:
         86:9c:8e:11:54:a9:84:99:e6:6e:a3:db:a3:a6:34:0b:82:e4:
         4a:9e:e2:29:e9:f5:63:4c:1d:cd:ab:77:5f:4d:72:f2:ea:2a:
         d1:04:8d:7c:c9:a2:73:92:ce:d3:b4:50:fa:07:b1:0c:e4:81:
         d5:c0:f5:06:7d:fa:21:82:14:fc:aa:81:f5:77:cf:ce:d7:83:
         42:be:be:cf:eb:3e:0c:0d:82:44:2b:3f:8c:80:a5:4a:44:2f:
         65:8e:00:4c:9f:77:82:fb:d6:75:c4:f3:ed:fe:9a:ad:50:f3:
         70:67:44:13:08:98:69:54:95:3a:6a:13:a7:25:85:82:b4:5d:
         22:47:f1:07:2a:36:7c:cf:d6:cc:d2:88:62:3f:c3:d9:74:88:
         72:2b:dd:a0:e1:97:ea:96:d9:79:7f:1a:0a:4c:1b:a7:cc:4a:
         83:46:5a:01:d0:44:ee:41:0e:63:cc:3e:db:45:1d:12:e9:4c:
         e6:18:4c:cd:42:a8:cd:6a:15:1e:80:4d:c5:aa:17:8d:c9:3c:
         7a:2c:91:d5:77:ec:15:d8:64:d5:16:5c:96:50:16:3f:dc:84:
         27:6a:e7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:35:18 2025 by rpki-client