Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File:                     aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier:          4h113pVfBQOlxyf8neoNf5fP2eHMlYUEzArOcSehw8c=
Subject key identifier:   29:52:B4:76:98:0A:47:FB:FC:00:A5:73:6D:F3:FE:33:D4:A4:5E:8B
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer:       /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number:          34
Signing time:             Sat 23 Aug 2025 05:22:30 +0000
Manifest this update:     Sat 23 Aug 2025 05:22:29 +0000
Manifest next update:     Mon 25 Aug 2025 05:22:29 +0000
Files and hashes:         1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: Mt2kXM9br5EsEJdk/WqzufRDDUFVadI7f6wOTqNMSUg=)
                          2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
        Validity
            Not Before: Aug 23 05:22:29 2025 GMT
            Not After : Aug 25 05:22:29 2025 GMT
        Subject: CN=68a95015-d221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7b:dc:75:21:a3:06:2c:e6:62:04:19:4f:9c:
                    99:18:bd:a2:3d:50:29:86:09:50:c5:02:ff:9c:6b:
                    18:95:25:7c:a8:9d:9c:19:ef:7c:1f:66:48:12:3b:
                    7d:23:5e:21:06:5f:9f:9d:a6:34:75:8a:ae:12:aa:
                    23:c4:18:62:ea:1b:66:b0:ad:72:92:4a:43:b8:04:
                    89:17:b7:19:03:ad:eb:d4:69:ac:cf:98:0e:2a:a4:
                    e9:d5:07:98:6f:96:b7:24:e5:e7:93:61:45:0e:25:
                    fe:d8:e0:73:b6:a3:16:e5:60:a1:6d:4d:46:01:08:
                    1c:c4:b3:a5:7b:6d:29:6d:7f:83:68:9a:64:b3:f0:
                    46:5b:33:d2:13:4c:b1:65:f5:02:2d:8d:d3:01:db:
                    94:56:f0:c9:b7:c3:cb:02:3f:cb:f2:4c:a5:a5:c7:
                    20:96:67:7b:6f:ae:a6:22:69:16:6d:3f:41:6d:75:
                    d2:5f:d1:dc:c3:09:f3:1b:14:7f:53:4e:fa:10:77:
                    85:bd:fb:35:01:e7:a9:97:fe:96:19:99:92:60:8a:
                    ef:a8:19:8e:8e:5a:20:b7:b5:76:a9:db:26:64:69:
                    3b:fd:89:5b:12:b2:57:07:5c:17:fe:43:04:93:ff:
                    48:f3:bb:44:81:fb:0f:d2:f8:c1:ab:5e:ba:cc:c4:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:52:B4:76:98:0A:47:FB:FC:00:A5:73:6D:F3:FE:33:D4:A4:5E:8B
            X509v3 Authority Key Identifier:
                keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:10:83:19:84:ae:07:87:b8:e0:8c:96:97:51:fc:73:e0:
         fc:6a:95:76:1b:44:e2:bd:9e:59:3f:68:dc:e6:8f:a9:d5:2d:
         61:33:e7:46:d6:9a:d2:64:82:21:e2:f1:bf:98:4a:73:bc:18:
         4b:87:5d:53:2d:6e:6f:34:a3:ad:1b:60:65:c8:09:5f:bd:6b:
         b6:5f:22:cb:63:bf:0a:af:77:8f:9f:2c:e5:0c:f3:b6:1f:99:
         92:ea:ec:28:b4:87:3a:f2:45:33:da:c3:22:17:b1:ce:d1:55:
         c7:5e:8d:43:15:b3:ec:4c:10:f2:d3:8c:46:c0:fb:7e:2c:07:
         42:0b:96:bb:a5:57:36:a6:cf:54:bc:2c:77:e9:64:93:6b:95:
         f1:f8:5d:8a:02:bd:5b:2d:cf:b6:07:9d:5e:80:88:26:46:ea:
         97:23:04:93:01:c9:a1:b2:6b:ae:07:92:a6:dd:1f:a6:5c:89:
         dc:87:ff:78:4c:6e:f8:b6:3b:3c:6e:ba:cf:10:7e:f6:4a:18:
         59:63:cf:99:a7:c4:10:ea:cf:38:9b:99:b3:4d:be:70:0b:df:
         20:b9:2a:60:1d:d2:f8:c6:8a:53:26:6f:cd:09:a5:f3:8d:6e:
         bd:30:fb:bd:d0:ae:81:3c:23:bc:ce:81:32:b6:c3:79:e8:db:
         ce:9d:8a:f8
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBNTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MUREQ0FGMTEwLwYDVQQFEyg2OUExQjI3NTREMkM2RjZCNDcyNjY3N0E3MjA0NTAy
MzZCRDJFQ0QxMB4XDTI1MDgyMzA1MjIyOVoXDTI1MDgyNTA1MjIyOVowGDEWMBQG
A1UEAxMNNjhhOTUwMTUtZDIyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOd73HUhowYs5mIEGU+cmRi9oj1QKYYJUMUC/5xrGJUlfKidnBnvfB9mSBI7
fSNeIQZfn52mNHWKrhKqI8QYYuobZrCtcpJKQ7gEiRe3GQOt69RprM+YDiqk6dUH
mG+WtyTl55NhRQ4l/tjgc7ajFuVgoW1NRgEIHMSzpXttKW1/g2iaZLPwRlsz0hNM
sWX1Ai2N0wHblFbwybfDywI/y/JMpaXHIJZne2+upiJpFm0/QW110l/R3MMJ8xsU
f1NO+hB3hb37NQHnqZf+lhmZkmCK76gZjo5aILe1dqnbJmRpO/2JWxKyVwdcF/5D
BJP/SPO7RIH7D9L4wateuszEYr0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBQpUrR2
mApH+/wApXNt8/4z1KReizAfBgNVHSMEGDAWgBRpobJ1TSxva0cmZ3pyBFAja9Ls
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDFEREMvOTFCRTk5MjY1OENEMTFGMDg2QkY3Q0VBREFFNEVDOUMvYWFHeWRV
MHNiMnRISm1kNmNnUlFJMnZTN05FLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYWFHeWRVMHNiMnRISm1kNmNnUlFJMnZTN05FLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MUREQy85MUJFOTkyNjU4Q0QxMUYwODZCRjdDRUFEQUU0
RUM5Qy9hYUd5ZFUwc2IydEhKbWQ2Y2dSUUkydlM3TkUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADapEIMZhK4Hh7jgjJaXUfxz4PxqlXYb
ROK9nlk/aNzmj6nVLWEz50bWmtJkgiHi8b+YSnO8GEuHXVMtbm80o60bYGXICV+9
a7ZfIstjvwqvd4+fLOUM87YfmZLq7Ci0hzryRTPawyIXsc7RVcdejUMVs+xMEPLT
jEbA+34sB0ILlrulVzamz1S8LHfpZJNrlfH4XYoCvVstz7YHnV6AiCZG6pcjBJMB
yaGya64HkqbdH6ZcidyH/3hMbvi2Ozxuus8QfvZKGFljz5mnxBDqzzibmbNNvnAL
3yC5KmAd0vjGilMmb80JpfONbr0w+73QroE8I7zOgTK2w3no286divg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:54 2025 by rpki-client