Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
File:                     4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft (raw, json)
Hash identifier:          tY2m8tA6V5plgvphUalLdQKvwATSrOeGnY/GQbj69kg=
Subject key identifier:   9D:B3:42:57:A2:9C:8F:27:21:32:D4:E3:05:5B:69:69:63:6C:A1:E7
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Certificate issuer:       /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial:       0472
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
Manifest number:          0470
Signing time:             Sat 05 Jul 2025 03:02:40 +0000
Manifest this update:     Sat 05 Jul 2025 03:02:40 +0000
Manifest next update:     Mon 07 Jul 2025 03:02:39 +0000
Files and hashes:         1: 4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl (hash: 53S+a/E1Vyj/DASjlJqjX6Kw1KN7wXbF2Ua4aTrtAzA=)
                          2: 48A838F4F93111ECBE9EE388F1222468.roa (hash: NPEImA7F+Ur3FNr9HiE/AvEd4Yk5gaf4dPIpJJguxBQ=)
                          3: 1E0988AAF93111EC9FC04E88F1222468.roa (hash: 4J9tcGaipzQ9a1uydbIpmJsazATcy1aXE6+2hgX8+4c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Jul 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639454AF, serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
        Validity
            Not Before: Jul  5 03:02:40 2025 GMT
            Not After : Jul  7 03:02:39 2025 GMT
        Subject: CN=686895d0-bd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:80:e8:8b:e3:bb:b1:bf:36:9f:2b:3f:10:
                    c7:99:53:36:14:55:ba:ff:92:06:a7:5f:e0:c3:0a:
                    71:cc:11:0a:15:44:cc:ee:bc:7f:70:3e:5e:8e:6e:
                    62:38:d9:61:3f:f8:d0:c7:be:2c:04:88:e8:dc:10:
                    df:7a:be:2f:f5:f6:47:a2:1b:a7:cd:89:44:6d:58:
                    81:6c:d2:51:0d:ff:ad:f6:79:35:34:51:bd:02:f7:
                    71:81:3e:9e:70:79:f6:e8:a0:67:4a:fe:95:1a:05:
                    43:3d:78:8b:c9:42:6a:60:44:e3:c1:2e:d6:e6:3c:
                    58:99:26:75:87:05:1b:33:a6:09:61:3d:f3:58:80:
                    8a:fd:bf:32:07:2a:d2:58:f3:e2:d3:39:68:9d:fd:
                    94:e8:b0:5b:0d:ea:97:b3:7d:ee:8f:d3:a3:72:69:
                    06:b7:e4:cf:89:f0:50:34:c3:d6:90:4c:ef:00:aa:
                    fc:ee:55:7f:79:8b:17:c8:79:e0:8f:a8:68:72:4b:
                    e5:74:65:0d:8f:e0:ed:77:53:0b:06:d8:12:3a:4d:
                    75:aa:35:70:07:e9:32:5d:87:2a:44:b7:b3:dd:89:
                    0b:c3:5f:14:01:65:95:b1:2b:50:a8:82:bd:a4:84:
                    30:b1:b7:96:45:bb:7e:e9:e2:ba:ab:92:03:71:59:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B3:42:57:A2:9C:8F:27:21:32:D4:E3:05:5B:69:69:63:6C:A1:E7
            X509v3 Authority Key Identifier:
                keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:21:aa:1e:87:47:f6:14:99:e6:9d:2c:10:a2:21:d8:6a:6c:
         6e:61:80:50:39:bb:96:35:ed:53:f9:d5:e7:a2:e7:dd:28:00:
         21:d3:62:c8:da:7d:12:3e:da:9f:ac:b8:15:5e:2d:f0:9f:80:
         4f:4b:ff:63:9f:32:53:a5:a0:bf:92:ae:ff:b5:63:82:40:11:
         52:07:3b:ca:ce:58:d0:ce:7e:1b:1e:27:2a:53:e7:5e:db:c1:
         b8:ba:73:da:16:b9:e0:a0:7e:f6:62:db:8e:23:d0:82:b3:a9:
         56:3d:cb:d3:9e:bc:8f:8e:d0:d6:08:3f:67:e1:bc:af:d0:14:
         44:6a:e8:95:c4:0a:21:86:af:05:33:3f:89:62:2f:98:dc:4a:
         10:a7:48:de:72:a2:e4:b7:7b:60:73:c6:ae:3d:a8:9a:fc:59:
         bb:82:51:2b:32:a7:31:6e:ab:10:79:b8:e1:d7:43:6c:a4:53:
         14:e7:d5:b8:83:3c:7c:d4:88:d3:4a:95:38:04:0f:fc:96:e3:
         16:ad:d4:15:c1:37:00:d5:9f:6b:71:e4:76:40:ec:34:54:d9:
         2a:d3:7d:b9:eb:f5:5b:dc:32:c6:62:8c:a3:ee:a3:b1:ac:cb:
         6c:ba:4e:50:61:f4:54:da:7d:dd:eb:ab:c5:73:38:fd:07:71:
         fe:a4:f5:1d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzk0NTRBRjExMC8GA1UEBRMoRTBCRTJDNDJBNjJBRTZENzUyOUMxN0QzNDRDMkQy
MTc3NjM3QTk2NjAeFw0yNTA3MDUwMzAyNDBaFw0yNTA3MDcwMzAyMzlaMBgxFjAU
BgNVBAMTDTY4Njg5NWQwLWJkODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDyYDoi+O7sb82nys/EMeZUzYUVbr/kganX+DDCnHMEQoVRMzuvH9wPl6O
bmI42WE/+NDHviwEiOjcEN96vi/19keiG6fNiURtWIFs0lEN/632eTU0Ub0C93GB
Pp5wefbooGdK/pUaBUM9eIvJQmpgROPBLtbmPFiZJnWHBRszpglhPfNYgIr9vzIH
KtJY8+LTOWid/ZTosFsN6pezfe6P06NyaQa35M+J8FA0w9aQTO8AqvzuVX95ixfI
eeCPqGhyS+V0ZQ2P4O13UwsG2BI6TXWqNXAH6TJdhypEt7PdiQvDXxQBZZWxK1Co
gr2khDCxt5ZFu37p4rqrkgNxWfRxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnbNC
V6KcjychMtTjBVtpaWNsoecwHwYDVR0jBBgwFoAU4L4sQqYq5tdSnBfTRMLSF3Y3
qWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5NDU0L0FGOTA2QjdFRjkyRjExRUM4MTVCRjE4M0YxMjIyNDY4LzRMNHNR
cVlxNXRkU25CZlRSTUxTRjNZM3FXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRMNHNRcVlxNXRkU25CZlRSTUxTRjNZM3FXWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mzk0NTQvQUY5MDZCN0VGOTJGMTFFQzgxNUJGMTgzRjEy
MjI0NjgvNEw0c1FxWXE1dGRTbkJmVFJNTFNGM1kzcVdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIIaoeh0f2FJnmnSwQoiHYamxuYYBQ
ObuWNe1T+dXnoufdKAAh02LI2n0SPtqfrLgVXi3wn4BPS/9jnzJTpaC/kq7/tWOC
QBFSBzvKzljQzn4bHicqU+de28G4unPaFrngoH72YtuOI9CCs6lWPcvTnryPjtDW
CD9n4byv0BREauiVxAohhq8FMz+JYi+Y3EoQp0jecqLkt3tgc8auPaia/Fm7glEr
MqcxbqsQebjh10NspFMU59W4gzx81IjTSpU4BA/8luMWrdQVwTcA1Z9rceR2QOw0
VNkq03256/Vb3DLGYoyj7qOxrMtsuk5QYfRU2n3d66vFczj9B3H+pPUd
-----END CERTIFICATE-----
Generated at Sun Jul 6 00:07:23 2025 by rpki-client