Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          HPe32cPjYDruy8KvijRD3zoTGt22nyfv0ILnTyJ4NVA=
Subject key identifier:   C8:51:49:6C:FE:44:3E:64:4F:8C:58:DA:82:A9:AC:37:88:B2:E1:B9
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       0126
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          0125
Signing time:             Thu 03 Jul 2025 04:56:20 +0000
Manifest this update:     Thu 03 Jul 2025 04:56:19 +0000
Manifest next update:     Sat 05 Jul 2025 04:56:19 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: ANz/Xlxrs/mllMdtSbYZbdTFj6bQOX26PZDq+zIrfjQ=)
                          2: F68C77C279C811EFB5AD7293762E951A.roa (hash: w7SzFM4rVLShHyz8Uu4JGbAwVkZlRI11cdVpH3TTF5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Jul  3 04:56:19 2025 GMT
            Not After : Jul  5 04:56:19 2025 GMT
        Subject: CN=68660d74-2938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:46:45:9f:52:29:7e:9f:75:ce:98:15:06:
                    6a:03:83:0e:1d:77:bf:70:e1:a0:d1:40:a1:f5:fb:
                    85:30:e3:a3:2f:f5:bd:d0:f8:42:48:36:12:5f:a9:
                    a1:b2:d8:5d:55:77:f9:44:76:b6:01:13:d7:5c:2c:
                    78:56:05:e5:31:c2:55:9a:46:e7:ed:61:cf:39:ee:
                    4a:b9:0f:88:14:0e:8b:56:c8:7b:80:d5:0b:3f:85:
                    ae:ad:76:68:5e:a2:2c:49:00:71:2e:3c:a0:b9:f9:
                    51:50:b5:5e:a2:1f:de:f7:71:52:32:4a:84:20:cf:
                    43:c0:b6:d2:26:0a:36:1e:81:b0:59:52:d1:3d:c3:
                    48:b5:73:11:7c:46:6a:0d:b7:44:fb:c3:83:83:c9:
                    ca:32:b4:4c:36:b7:df:a6:7b:ee:0f:64:82:0c:a7:
                    27:ed:6a:8c:0e:5c:03:63:54:9c:36:88:9a:13:c6:
                    e4:3f:ca:ad:af:f0:5b:6f:81:53:d0:df:ac:93:ff:
                    98:4d:6e:c4:62:38:71:58:33:c7:f0:4d:c5:fd:79:
                    a1:05:aa:9b:ef:00:f5:79:50:90:59:e5:03:dc:81:
                    3f:fa:20:ec:93:2f:bb:b3:da:18:4f:94:44:1a:f9:
                    c4:81:50:22:ae:b9:2b:c0:e3:ef:27:f3:ae:96:f9:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:49:6C:FE:44:3E:64:4F:8C:58:DA:82:A9:AC:37:88:B2:E1:B9
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:24:ac:12:17:82:d2:a4:56:f4:2a:3f:ee:7e:f4:73:d2:53:
         49:b5:a3:5c:3a:aa:5d:b8:ab:73:51:56:47:9e:9a:16:b4:6b:
         2d:1d:c9:d0:ca:af:80:ed:d5:b0:7d:cc:0f:06:18:49:d1:80:
         1c:e4:23:47:91:9f:6d:c0:20:d1:3e:30:fb:5c:e0:78:8d:78:
         87:c6:01:4b:69:dc:32:ff:e5:f9:a7:f8:b2:5e:13:53:5a:ba:
         a4:38:aa:e7:39:f7:12:7a:97:c5:8b:fb:7b:c2:dd:f8:13:38:
         2a:14:ba:bd:70:cd:bb:20:9b:13:06:95:6f:9d:ce:47:8a:a9:
         d6:9c:d6:be:18:5d:a5:fd:19:f6:83:fe:56:61:ab:54:e1:de:
         ef:8b:37:b6:33:2a:3c:20:a8:34:9a:a3:c0:bf:81:c3:2f:a3:
         13:90:4e:86:5c:77:6a:c7:d9:d2:1f:e7:ec:cf:48:c0:3f:9e:
         cf:81:8e:1f:41:fe:d9:46:04:3e:2d:39:ca:25:93:0d:06:af:
         ef:24:13:fd:5d:c0:82:a0:f2:6b:7b:e7:1d:c7:30:4f:e5:b5:
         c3:09:72:03:15:18:5c:36:0e:59:87:60:c6:40:ca:36:f6:d0:
         c2:df:14:d5:76:17:69:3b:69:f4:c0:a2:0a:19:df:fe:54:3f:
         5c:ba:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:09:32 2025 by rpki-client