Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File:                     KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier:          N6tRulDFVgqtl7n6IwaFlrfrYuQpIl/Pv0Ps7hMjUiA=
Subject key identifier:   49:0D:90:56:99:B3:DD:F7:0A:69:22:AC:E8:1A:BC:4C:8B:ED:21:B3
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer:       /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial:       0313
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number:          0310
Signing time:             Sat 23 Aug 2025 03:51:52 +0000
Manifest this update:     Sat 23 Aug 2025 03:51:51 +0000
Manifest next update:     Mon 25 Aug 2025 03:51:51 +0000
Files and hashes:         1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: f+ip0Ore9DCB1WjLOLFyn6l++xZHl3pFavCO8Dk2aCw=)
                          2: 9DC8C2C82CAE11F085B92DEADAE4EC9C.roa (hash: s4BJx/7blgbPVpMP6/xtoHDTm3C4tHe27u7Cb4Hry2k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364791EAF, serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
        Validity
            Not Before: Aug 23 03:51:51 2025 GMT
            Not After : Aug 25 03:51:51 2025 GMT
        Subject: CN=68a93ad8-430f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:3c:e3:0b:42:4b:0c:54:b1:8c:c3:8c:5a:
                    88:ce:1a:64:d5:86:c7:0b:41:de:31:c9:bc:fa:54:
                    6b:05:42:3a:16:b9:dc:5e:f5:9a:37:f7:19:6d:4c:
                    6b:e7:70:4a:50:75:38:e7:5f:55:cc:9a:85:3e:35:
                    14:2a:4e:3c:bd:06:3f:f4:66:bb:9f:74:e7:d0:12:
                    b4:72:69:1f:b5:5f:91:8a:02:a8:7f:9e:46:d0:f5:
                    c2:f9:17:7d:a1:7e:85:b8:19:cb:da:00:62:1b:72:
                    56:85:01:a9:ac:70:7b:2a:d4:18:83:7d:25:14:ae:
                    ae:e7:8a:58:f2:06:f6:98:03:9d:66:50:c8:7e:2c:
                    3b:0c:05:f3:46:02:53:ac:aa:05:9c:96:0f:84:77:
                    33:2b:c6:57:3b:bc:e0:8b:82:27:96:0f:f0:7a:90:
                    dc:e0:45:c6:dc:4d:f4:31:a3:6c:1d:dc:d2:00:3d:
                    23:19:bf:a6:11:9f:0e:0d:71:42:6d:ff:47:41:f4:
                    8c:da:50:9e:79:18:6e:3e:c1:d9:12:03:12:e1:15:
                    3c:8f:b9:24:5d:6a:0b:73:4b:ed:0e:b8:c4:1b:4a:
                    f0:4d:be:55:83:f6:e5:f4:3a:09:8f:cd:a2:b7:49:
                    19:64:ab:91:c4:d1:0c:4f:4a:87:ba:7b:b3:b6:ee:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0D:90:56:99:B3:DD:F7:0A:69:22:AC:E8:1A:BC:4C:8B:ED:21:B3
            X509v3 Authority Key Identifier:
                keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:67:1b:c6:ea:7d:9a:a9:72:34:6f:83:9f:54:2d:4f:23:
         6e:68:05:d5:8b:74:91:9b:92:89:ce:3e:fa:b4:27:d1:4a:d2:
         94:65:84:44:d2:9c:76:b7:f1:77:0d:65:24:dc:90:82:98:74:
         7d:d2:ef:8a:a5:7c:77:7b:8f:80:42:fd:65:76:75:9d:71:5d:
         cb:75:bf:af:e9:c6:0f:f7:73:5d:85:34:6c:b3:31:17:b2:c1:
         a7:96:81:61:50:33:4c:8f:dd:65:0c:bf:17:a4:3d:5f:f3:fe:
         97:e3:9c:23:ef:7b:2f:53:5f:3c:59:a9:32:9e:f1:70:08:a0:
         66:25:3c:27:64:81:57:0b:d5:12:3d:ec:3d:00:ce:2c:0c:fd:
         71:bb:fe:5b:d1:0e:ca:06:b3:88:ba:c4:9a:54:42:e7:bc:a5:
         22:a0:c7:f7:06:5d:79:98:da:fc:59:70:75:24:65:08:6c:6e:
         7d:02:5e:7c:79:3a:20:1a:63:00:26:97:a1:e9:c3:70:1f:e7:
         a6:f6:2f:d9:c1:48:04:49:26:dd:51:56:af:73:10:05:26:4a:
         76:e6:89:60:5b:1d:68:05:70:35:b3:ea:0a:00:7b:2d:59:a8:
         56:cc:a6:63:74:9b:b9:92:b2:00:2b:ae:5c:d4:52:8d:1f:ab:
         1b:71:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:46 2025 by rpki-client