Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
File:                     EAy9RkqQWltWj3rc7x-dILx1IzE.mft (raw, json)
Hash identifier:          npRb9/DuqkS/heEARlwqjdoFVI3evOSNQ8B9uCv9zm4=
Subject key identifier:   68:1E:61:B2:3D:B7:CC:A7:5A:E4:DE:68:7C:B1:9D:EA:38:F1:9E:ED
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Certificate issuer:       /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial:       0375
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
Manifest number:          036F
Signing time:             Wed 02 Jul 2025 03:35:22 +0000
Manifest this update:     Wed 02 Jul 2025 03:35:21 +0000
Manifest next update:     Fri 04 Jul 2025 03:35:21 +0000
Files and hashes:         1: EAy9RkqQWltWj3rc7x-dILx1IzE.crl (hash: Kbolv5v9sfAT8zJvsXt/RH1vRzYid6F702ZMz+nCmXc=)
                          2: C719F080031811F0BCF8A45B762E951A.roa (hash: 79NJnHtzqcMQMYnoSD6NuoCr6AjHcaiwFE26hsB9lSo=)
                          3: BE98A03E46CD11F08B83E8B4DAE4EC9C.roa (hash: GvbT42KDVOWTxS2JfgWWuD/aGjv1HwP9FkaDOKQ86zw=)
                          4: F6AE29B646C911F0A3352A9CDAE4EC9C.roa (hash: xJc4bxraTn4VMWGp4tujLjr4NYvnFKt/PaHncXl4bO8=)
                          5: 5110E694031F11F0BEF24185762E951A.roa (hash: WjTHo5/2GMgpz/biHo/PTtID/ZgNKHDsBiz50asiS8I=)
                          6: 71F0925246CB11F0906DF5A4DAE4EC9C.roa (hash: 4GpwoUFSemgnNHOneEphyunOOkVz96lSUfPWz4U/DVI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
        Validity
            Not Before: Jul  2 03:35:21 2025 GMT
            Not After : Jul  4 03:35:21 2025 GMT
        Subject: CN=6864a8fa-bc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4a:b4:8c:f4:3c:32:eb:63:2e:cd:d2:f3:62:
                    f9:be:77:d3:48:91:b0:9d:83:c6:9e:d4:0a:10:ec:
                    ea:b6:36:2b:ff:a7:50:cc:0a:47:60:09:a9:28:ff:
                    0a:f0:e1:cb:3a:2e:a9:2b:3d:b9:07:1c:02:50:4a:
                    e7:9e:2d:5a:97:de:d3:2e:79:ee:39:1d:87:5e:85:
                    c7:99:6b:a6:c1:e5:fb:d9:cb:bf:e9:50:3a:b0:50:
                    25:b6:4a:f4:97:d3:ce:90:de:bb:ab:23:67:06:60:
                    d3:b9:85:76:cd:40:2c:f3:94:c2:31:d6:60:a8:18:
                    62:b3:77:cd:f2:68:31:61:72:f7:a3:a5:17:7b:ab:
                    f1:de:1e:6f:59:c2:54:f8:4f:45:fa:f2:ac:7b:34:
                    2e:eb:4f:e4:6d:0f:bf:f3:11:8e:d5:9d:98:6c:6c:
                    19:04:5f:65:9b:08:b3:6c:4f:2a:24:93:e2:97:63:
                    98:5d:f2:a9:17:19:cb:c1:a2:8c:98:7a:12:70:fc:
                    d6:e7:6d:08:eb:31:ca:e9:e9:61:48:d9:1a:56:1d:
                    d7:4b:57:68:35:11:c1:1c:d7:f6:ea:0a:7b:52:dd:
                    45:95:4f:b3:ff:54:55:f1:66:8f:c2:56:91:b9:c1:
                    1c:79:30:17:6c:fd:52:e8:6b:98:db:55:44:4e:b0:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:61:B2:3D:B7:CC:A7:5A:E4:DE:68:7C:B1:9D:EA:38:F1:9E:ED
            X509v3 Authority Key Identifier:
                keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:75:63:29:e3:17:81:4d:d6:05:1b:68:7b:cf:99:24:8d:a4:
         1c:d0:59:1e:68:a4:bb:46:71:7e:04:75:1a:72:62:37:fe:2b:
         47:c9:61:24:97:f6:77:7c:e0:27:c1:33:f1:ed:c1:e9:5d:5f:
         8c:7f:e3:1d:5e:18:96:39:86:d2:65:c8:2d:38:2d:b6:a8:f0:
         a6:02:8f:25:da:de:2e:fd:24:76:50:6d:9e:d3:16:cf:20:18:
         60:6a:d0:7c:63:b4:e0:fe:65:0c:e3:8d:e7:98:c2:28:67:00:
         bd:bd:97:48:2e:e1:29:23:d8:ba:b0:bc:af:4e:bc:14:08:6c:
         ad:e5:47:a8:96:43:92:66:5a:bb:67:fe:87:2d:91:d7:55:62:
         b0:38:96:ae:ea:c6:e7:c4:74:07:56:16:34:e7:96:52:8f:f7:
         38:7d:9a:f1:ef:d9:84:ab:03:e4:32:9b:31:c6:7b:c2:22:5d:
         dd:89:2a:b7:04:ba:59:96:e1:9d:1c:62:f8:d0:b1:36:a7:d5:
         f6:85:40:58:49:a7:eb:28:89:c9:bb:d8:08:a8:2f:5d:9f:d7:
         44:66:e7:b7:45:e5:3d:e9:a7:54:8e:ae:11:00:a5:dc:c7:02:
         70:14:fd:33:34:c4:70:17:70:2b:85:71:c7:5b:76:dd:93:91:
         6c:db:38:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM3OURBRjExMC8GA1UEBRMoMTAwQ0JENDY0QTkwNUE1QjU2OEY3QURDRUYxRjlE
MjBCQzc1MjMzMTAeFw0yNTA3MDIwMzM1MjFaFw0yNTA3MDQwMzM1MjFaMBgxFjAU
BgNVBAMTDTY4NjRhOGZhLWJjNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqSrSM9Dwy62MuzdLzYvm+d9NIkbCdg8ae1AoQ7Oq2Niv/p1DMCkdgCako
/wrw4cs6LqkrPbkHHAJQSueeLVqX3tMuee45HYdehceZa6bB5fvZy7/pUDqwUCW2
SvSX086Q3rurI2cGYNO5hXbNQCzzlMIx1mCoGGKzd83yaDFhcvejpRd7q/HeHm9Z
wlT4T0X68qx7NC7rT+RtD7/zEY7VnZhsbBkEX2WbCLNsTyokk+KXY5hd8qkXGcvB
ooyYehJw/NbnbQjrMcrp6WFI2RpWHddLV2g1EcEc1/bqCntS3UWVT7P/VFXxZo/C
VpG5wRx5MBds/VLoa5jbVUROsCIzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaB5h
sj23zKda5N5ofLGd6jjxnu0wHwYDVR0jBBgwFoAUEAy9RkqQWltWj3rc7x+dILx1
IzEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzNzlELzY3QzZBRDRDQkYzRDExRURBNkJGODhGMUYxMjIyNDY4L0VBeTlS
a3FRV2x0V2ozcmM3eC1kSUx4MUl6RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VBeTlSa3FRV2x0V2ozcmM3eC1kSUx4MUl6RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDM3OUQvNjdDNkFENENCRjNEMTFFREE2QkY4OEYxRjEy
MjI0NjgvRUF5OVJrcVFXbHRXajNyYzd4LWRJTHgxSXpFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBodWMp4xeBTdYFG2h7z5kkjaQc0Fke
aKS7RnF+BHUacmI3/itHyWEkl/Z3fOAnwTPx7cHpXV+Mf+MdXhiWOYbSZcgtOC22
qPCmAo8l2t4u/SR2UG2e0xbPIBhgatB8Y7Tg/mUM443nmMIoZwC9vZdILuEpI9i6
sLyvTrwUCGyt5UeolkOSZlq7Z/6HLZHXVWKwOJau6sbnxHQHVhY055ZSj/c4fZrx
79mEqwPkMpsxxnvCIl3diSq3BLpZluGdHGL40LE2p9X2hUBYSafrKInJu9gIqC9d
n9dEZue3ReU96adUjq4RAKXcxwJwFP0zNMRwF3ArhXHHW3bdk5Fs2zjg
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:33:22 2025 by rpki-client