Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
File:                     8WD77pBHtMM9L6HZ04IBrg0Yw58.mft (raw, json)
Hash identifier:          W5ExNVohleG601JQjiTO5Jk8UF80P2THZ033sf1YmB0=
Subject key identifier:   91:2D:47:48:A4:7A:06:81:3D:2F:C2:D3:A9:5A:4F:BD:EF:60:C2:1C
Authority key identifier: F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
Certificate issuer:       /CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
Certificate serial:       0160
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
Manifest number:          015F
Signing time:             Sat 23 Aug 2025 04:51:44 +0000
Manifest this update:     Sat 23 Aug 2025 04:51:43 +0000
Manifest next update:     Mon 25 Aug 2025 04:51:43 +0000
Files and hashes:         1: 8WD77pBHtMM9L6HZ04IBrg0Yw58.crl (hash: 7HzEsSvo9z4xlacwdUPGSHPhCCMX+RUXpnvnw1RCc8g=)
                          2: C7ECF7DE74D211EFA2250567762E951A.roa (hash: 2JN5T3Dym/uP+aQB4QDNBNpdJtMGonjqC1jPbmHacMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C63DAF, serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
        Validity
            Not Before: Aug 23 04:51:43 2025 GMT
            Not After : Aug 25 04:51:43 2025 GMT
        Subject: CN=68a948e0-c69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:cd:3a:da:64:7f:e5:ee:07:e7:61:f9:16:
                    ed:d2:79:8a:45:89:3a:9c:14:97:b4:1d:e2:17:0b:
                    2c:d7:4a:26:43:6c:fc:e1:70:a7:1d:e9:3b:60:68:
                    68:b7:28:1d:2f:2a:84:07:33:f1:c0:00:98:a0:85:
                    2c:5b:3c:92:65:6d:f6:10:1f:3f:ab:bb:55:48:90:
                    71:41:18:81:5b:b7:58:ab:6d:55:2b:32:c2:a6:c0:
                    ca:73:91:1d:0d:9f:f8:1e:36:1d:d6:55:ea:2d:dd:
                    a5:db:6b:85:5d:17:c1:9d:31:30:9f:8e:7d:e9:a6:
                    38:96:ea:42:4f:35:de:c7:ff:29:1f:e2:98:a8:80:
                    72:cf:33:da:cc:b2:8b:4c:eb:ab:6f:42:a1:ee:33:
                    64:c4:3b:eb:60:c3:c9:8a:98:81:94:70:af:f2:7c:
                    1d:4d:bf:47:c4:87:ed:30:9e:0e:ed:85:ab:d8:2b:
                    0b:83:9c:2d:c4:1c:31:6d:bd:aa:f7:75:f2:03:f4:
                    49:16:4b:c7:09:eb:29:ab:45:5b:e4:d8:ce:a2:78:
                    f3:e7:42:ef:3f:41:25:21:a5:39:07:33:03:8e:99:
                    b8:a7:9e:43:7c:f0:fd:cf:e7:dd:d4:f1:16:cf:f1:
                    49:c7:bd:51:17:1b:3f:fd:08:65:28:18:8b:0b:94:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2D:47:48:A4:7A:06:81:3D:2F:C2:D3:A9:5A:4F:BD:EF:60:C2:1C
            X509v3 Authority Key Identifier:
                keyid:F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:52:8d:f6:75:e4:ed:ea:cd:b7:0f:2c:23:9d:1a:4a:d4:23:
         d8:dc:ee:65:27:33:2f:c8:63:b3:77:0f:a5:12:3d:94:fe:d4:
         63:2a:69:cf:9f:e6:d7:10:48:90:18:34:2f:c8:8f:09:44:e4:
         01:ec:83:1e:d8:bf:1d:3a:89:0c:38:ae:da:b5:88:79:b3:89:
         c2:32:ea:ca:a7:85:c0:0d:a0:5a:ec:30:83:52:a4:c7:40:c9:
         98:72:88:a4:01:0b:48:7d:71:35:12:d0:a1:11:92:ae:94:a2:
         a4:47:27:c0:78:5e:63:77:d0:d5:3c:01:b5:78:46:29:34:18:
         b8:ce:29:d7:12:c9:67:88:c0:c9:fd:59:d1:5f:72:e9:e3:6e:
         72:48:8c:3d:96:69:65:80:f9:c5:53:7a:15:2c:0a:ef:10:25:
         83:c9:96:5a:67:c5:30:3a:1e:ce:2d:65:cb:ad:0d:ff:56:51:
         bb:19:ce:4f:e6:3a:4b:ec:6a:8a:f5:82:6b:1c:52:ad:4e:12:
         d8:dd:d5:f0:e6:fd:b1:2f:f2:1a:a9:c1:61:2c:39:39:db:82:
         ad:1c:f4:a2:df:f2:98:c5:5e:94:26:69:c7:b9:63:08:37:80:
         fa:46:0e:f2:18:b5:05:4c:67:17:5c:17:e6:a8:7b:b7:18:f7:
         35:02:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:18 2025 by rpki-client