Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
File:                     4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft (raw, json)
Hash identifier:          jAVqIDBaw6kat4XUEDf3UWDTVnAV0DmrQxdx8RRtMX8=
Subject key identifier:   75:DA:CD:44:45:9F:8C:35:28:7C:52:C8:15:A7:C5:82:BC:EA:0D:B7
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Certificate issuer:       /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial:       04A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
Manifest number:          04A1
Signing time:             Sat 23 Aug 2025 03:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:00:21 +0000
Manifest next update:     Mon 25 Aug 2025 03:00:21 +0000
Files and hashes:         1: 4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl (hash: 1W8R8KYG8z2L2J19t6K5nLpc2P1wT7kSjqMx1V+4i6g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639454AF, serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
        Validity
            Not Before: Aug 23 03:00:21 2025 GMT
            Not After : Aug 25 03:00:21 2025 GMT
        Subject: CN=68a92ec6-5b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cc:70:e9:8b:0a:1d:46:11:d7:22:99:a1:0b:
                    51:5e:c7:f8:92:d3:0e:98:8d:1c:1f:6f:f2:0d:74:
                    1f:a0:b0:08:27:3b:c8:33:b0:d9:73:98:d2:be:4e:
                    dd:e2:02:35:34:af:0c:8c:0c:21:fb:4a:83:43:f5:
                    09:1f:14:bd:2a:00:af:b5:3c:0b:d5:c7:df:eb:d1:
                    e4:46:76:20:d9:dc:f2:e5:89:95:7a:08:98:3b:34:
                    ea:8e:73:02:8e:d0:67:56:78:a0:fc:d3:e8:3c:b5:
                    d8:bd:dc:1a:01:cd:de:c5:7e:26:32:79:eb:2e:a7:
                    d0:74:30:9b:ea:04:38:2a:80:2a:e6:98:72:bc:22:
                    29:9a:5e:40:f9:56:e2:04:d1:d9:c4:b3:ca:04:9a:
                    1c:60:f0:fb:38:b2:46:d1:8c:92:fc:99:94:9b:07:
                    c9:a8:c1:47:c0:e8:46:7e:91:91:19:af:6b:ae:4b:
                    b6:80:86:3a:7a:aa:d8:56:a9:05:f1:91:a3:36:f3:
                    cf:42:a1:6b:21:e9:a8:3b:23:b7:c1:07:a9:07:3c:
                    0c:49:34:e1:7d:c7:7c:35:57:89:1c:e2:80:ac:2e:
                    e4:4d:16:14:1f:91:05:99:e0:c9:25:f8:f8:1a:e4:
                    db:79:f8:06:32:79:7a:68:6a:a4:97:eb:a5:05:93:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:CD:44:45:9F:8C:35:28:7C:52:C8:15:A7:C5:82:BC:EA:0D:B7
            X509v3 Authority Key Identifier:
                keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:35:12:82:ba:77:7f:db:3e:9b:bb:32:93:ba:86:48:48:
         86:14:62:2e:1d:d1:9b:1c:ec:31:b5:b0:6a:c6:80:9e:35:1e:
         b0:06:56:64:9a:bd:fa:9b:25:ae:81:5a:ba:a6:dd:4f:0a:4f:
         16:66:bb:a5:82:b7:0e:6a:40:d2:17:8a:97:0d:ff:56:64:b2:
         2c:06:a6:1b:bb:39:6b:ca:3c:7f:80:4b:4c:a2:4b:6b:26:3d:
         86:81:cc:60:3d:08:61:ac:91:9d:0d:95:30:79:b2:87:f4:7b:
         11:cf:4b:86:36:fb:ed:49:34:d1:40:8b:97:31:e1:58:38:28:
         c7:b3:f0:3c:3d:ad:0d:b8:73:00:fa:fa:2f:1e:e8:35:49:3b:
         0b:68:eb:06:85:d5:c4:0d:ac:07:c9:af:72:e8:b6:d5:e0:10:
         31:2a:38:7e:94:cd:fb:87:e2:69:87:98:0b:a3:6c:85:a4:54:
         2f:04:fa:35:3d:96:21:2c:46:c5:50:66:09:1d:32:12:fa:85:
         18:d9:a8:4a:e6:93:04:22:f7:48:fc:7c:68:f2:78:28:7b:a6:
         9a:fc:c7:fb:76:62:f8:b2:86:e1:fe:d2:af:36:d2:ac:eb:95:
         3b:a1:3e:12:ee:47:12:76:e6:e9:76:dc:8b:c1:c4:25:50:4f:
         6e:cd:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:28 2025 by rpki-client