Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
File:                     CNLFTntRy8c0NN0AYFFFEi8ay2c.mft (raw, json)
Hash identifier:          29tVahDTcSQHZpPWeDCZzZzmvK1sRoYE8uCARQ0/3Kc=
Subject key identifier:   34:14:18:E8:E8:D4:6B:AC:50:2F:09:58:D8:2A:8C:73:BC:14:12:58
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Certificate issuer:       /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial:       098E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
Manifest number:          098C
Signing time:             Sat 23 Aug 2025 01:19:44 +0000
Manifest this update:     Sat 23 Aug 2025 01:19:43 +0000
Manifest next update:     Mon 25 Aug 2025 01:19:43 +0000
Files and hashes:         1: CNLFTntRy8c0NN0AYFFFEi8ay2c.crl (hash: +OVMIQJHGDbrmuYdTzqHQic04eWSEy/JTMXEt+cXLFA=)
                          2: 6F1DB8E692A611EEAD363E72D25BE465.roa (hash: U9BUtJsAMRe8LhMXpRX7x5DD1wtXY7iOI00OaJrVYBU=)
                          3: B785A0A892A611EEAC80BD72D25BE465.roa (hash: 0EcQiKXcB6upVmjNjOVseGG+e+e/Qe8GkvIuWAlYYX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
        Validity
            Not Before: Aug 23 01:19:43 2025 GMT
            Not After : Aug 25 01:19:43 2025 GMT
        Subject: CN=68a91730-3866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:1b:17:4c:53:0c:41:21:a1:b4:20:1a:bd:
                    de:b9:43:d4:36:2b:f4:0e:14:f9:08:42:32:bc:3a:
                    85:c7:b9:49:02:fb:fc:a4:03:0f:e0:77:c1:15:a0:
                    27:6c:da:ea:89:51:c7:b0:a1:c6:ec:ce:2d:32:88:
                    a2:76:83:a5:83:30:9c:b6:36:0c:ef:6c:43:ac:a0:
                    81:60:32:98:ba:7b:a1:bd:80:4f:98:68:63:32:cb:
                    ee:99:f1:3b:fc:dc:6c:69:86:63:be:2d:ce:60:6d:
                    e0:b0:65:d0:58:a7:56:40:8a:cb:7a:cc:e0:42:d0:
                    bd:0d:7e:6b:b6:5b:12:df:6f:95:98:dd:b1:c0:16:
                    ea:f8:b9:a5:90:0e:15:2c:9c:4d:7f:c0:c9:2c:63:
                    71:86:cd:43:67:38:64:23:06:8e:a3:20:82:3a:2a:
                    92:26:5d:af:77:7e:db:06:02:b2:09:68:c0:b7:8d:
                    9b:6f:bf:35:15:69:94:4c:fd:82:57:c8:26:9d:4b:
                    44:47:f3:4b:8b:8d:c9:10:ab:9a:dd:b4:2b:a6:8e:
                    ac:87:7e:a0:b3:34:a0:e3:d8:12:4a:1e:be:1b:44:
                    3b:ef:5d:e7:3d:41:07:ec:25:03:56:06:35:ad:57:
                    4e:a1:98:69:62:33:33:c5:f1:ea:14:1a:56:c8:ec:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:14:18:E8:E8:D4:6B:AC:50:2F:09:58:D8:2A:8C:73:BC:14:12:58
            X509v3 Authority Key Identifier:
                keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e5:b6:23:a0:5a:d1:22:32:09:d9:c3:df:e4:cd:c8:2a:ee:
         4d:4f:a8:71:06:9c:e5:73:b5:79:a8:11:af:02:f7:35:dd:36:
         78:e6:59:8d:20:a9:f9:6b:6d:04:ee:c3:15:59:76:c5:e1:84:
         38:f9:e6:96:ef:cb:0b:6f:1a:98:55:9e:ea:de:9f:53:c0:bf:
         51:2f:52:15:bb:8a:6f:8d:72:3f:d5:01:80:29:f3:f3:05:aa:
         18:7d:bd:64:92:1c:44:a8:5c:27:9c:88:e3:d0:16:30:ea:19:
         98:fc:74:89:14:87:41:70:58:85:bb:23:29:bf:0b:9f:f2:dd:
         cf:7c:11:e1:e8:4b:0e:39:a1:70:f0:81:36:1e:e3:d5:a4:41:
         6b:a0:76:c7:0d:46:84:97:b5:91:60:16:30:d7:e2:27:b9:5b:
         d8:69:7b:da:4c:d2:bb:22:df:d0:c0:66:cb:8b:81:37:c2:29:
         c8:2e:60:85:9f:5e:47:24:42:9a:57:2e:69:8f:42:35:fc:e1:
         99:40:d7:29:56:d2:c1:51:94:47:4d:a0:e1:ed:3e:22:1c:94:
         0f:ed:ba:4d:c2:78:d7:82:50:4b:c5:f1:bd:ef:7d:aa:b1:e1:
         3e:81:02:11:45:40:36:e8:35:4c:65:6c:94:d5:8e:00:ce:5f:
         d2:e2:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:07 2025 by rpki-client