Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
File:                     RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft (raw, json)
Hash identifier:          Xkuj7q9kGk/sNTZAnpGMQ0NqSPOxQcmSqDA+sdNd4nc=
Subject key identifier:   87:EB:9A:70:7F:70:15:78:83:E6:E8:3F:32:2D:CA:FD:51:41:06:65
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Certificate issuer:       /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial:       011C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
Manifest number:          011B
Signing time:             Sun 29 Jun 2025 04:58:07 +0000
Manifest this update:     Sun 29 Jun 2025 04:58:06 +0000
Manifest next update:     Tue 01 Jul 2025 04:58:06 +0000
Files and hashes:         1: RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl (hash: +AjRKnwlbbj/fNsgrotAfqgCNg5g5Hn7ODsymYJGhc0=)
                          2: 3115BA58AC9A11EFBB666976762E951A.roa (hash: bHbD7weS2dip8Z+GiQXd9+abXSVFw+tU7+Gs29hWT0o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 04:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
        Validity
            Not Before: Jun 29 04:58:06 2025 GMT
            Not After : Jul  1 04:58:06 2025 GMT
        Subject: CN=6860c7de-54db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:00:c8:1e:42:ec:bb:8d:c3:19:c4:c0:5a:
                    d4:4c:c0:24:96:dd:25:13:64:dc:7d:9e:2c:86:93:
                    36:86:35:45:2e:e3:f9:c8:2a:08:75:13:9b:6d:1e:
                    de:ef:e7:67:b6:0f:32:10:19:6a:e2:1b:55:1f:cd:
                    fa:0e:58:c1:cc:fb:73:7e:6f:a1:8d:ef:b8:94:b9:
                    54:ec:fe:38:a1:f0:41:d0:06:46:32:8f:4c:bb:5c:
                    1d:e8:17:03:8e:6d:a0:4a:76:bc:cd:76:d9:4c:7a:
                    a1:29:03:29:68:eb:2e:f6:40:01:dd:dd:89:99:41:
                    fe:44:8d:7b:a0:22:5f:20:7c:e4:4b:15:1b:d5:9a:
                    0f:4d:cf:09:72:59:47:a5:8a:f8:2d:5a:75:5f:b8:
                    1e:ae:2e:30:14:f8:6e:4c:90:80:d5:d4:4d:bd:83:
                    52:11:c8:f5:a9:69:97:1c:7d:18:3b:a7:21:35:22:
                    3c:51:5e:4e:8c:d2:cf:60:31:e8:0a:9b:7f:08:e0:
                    60:9c:a0:56:db:43:0a:7f:05:ec:e2:30:19:11:69:
                    7e:72:52:22:f4:32:82:a2:a8:0b:a1:f4:d4:f6:42:
                    87:67:8a:d3:35:37:41:79:d4:45:61:ec:71:80:0c:
                    16:93:02:97:f2:d0:83:5f:15:0f:0d:10:fd:ff:56:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EB:9A:70:7F:70:15:78:83:E6:E8:3F:32:2D:CA:FD:51:41:06:65
            X509v3 Authority Key Identifier:
                keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:03:70:06:5e:9d:c3:62:0f:ce:8b:e0:6b:34:22:9a:d8:37:
         d7:9d:4a:83:8f:8a:2d:1d:d5:8c:ad:ad:bd:3a:ea:6c:58:4f:
         ee:56:8c:25:f3:85:a2:b1:d9:57:4a:dc:39:c0:b6:8f:ea:74:
         00:e0:51:37:eb:2d:78:d4:77:56:fb:99:ed:50:24:df:4a:a0:
         6f:f7:af:d3:ac:5b:6e:e1:47:c6:29:42:78:f7:5b:0e:c0:6b:
         4d:bb:1c:e8:80:35:04:3b:df:96:a5:3e:c9:c6:b6:eb:af:3a:
         05:da:fd:c6:ff:e7:4e:66:e5:40:1a:0c:08:85:55:f5:26:fc:
         67:38:ba:d8:7c:4d:a7:e6:c2:66:12:7e:1a:9a:e2:b1:22:4b:
         9b:c9:ae:b2:70:c8:64:0c:4a:9a:77:8e:5a:32:f8:42:a9:cc:
         10:e0:24:94:37:cf:6b:86:67:20:1d:e1:5e:e3:01:11:d2:bb:
         06:0d:65:de:ea:d2:20:e2:2a:b9:20:85:15:da:29:35:cc:55:
         07:c5:8b:23:6b:b1:ac:66:b0:d0:a1:66:81:a6:13:07:3f:60:
         76:c6:25:af:ff:04:68:c0:73:85:78:14:5e:01:36:5c:f2:e7:
         65:a2:bc:86:e2:87:1b:35:7c:60:c9:90:37:6c:53:fb:37:a9:
         84:62:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:26:56 2025 by rpki-client