Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
File:                     XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft (raw, json)
Hash identifier:          ZIGyWdtJ7c8khgTrBRYNOJB3vWqICy3yn99PuCQUdbM=
Subject key identifier:   BC:B5:96:4E:E0:3F:19:B0:A8:9C:49:62:86:E4:AE:B1:8E:12:AC:89
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Certificate issuer:       /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial:       035E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
Manifest number:          035A
Signing time:             Mon 30 Jun 2025 03:39:23 +0000
Manifest this update:     Mon 30 Jun 2025 03:39:22 +0000
Manifest next update:     Wed 02 Jul 2025 03:39:22 +0000
Files and hashes:         1: XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl (hash: ibVPvnSa4ZHRYGnJPGW4ydVHDI/nAWWBy4OPw1ZlECo=)
                          2: 1ED4202ECD7511EDB2ED6A96F1222468.roa (hash: 9yazktSrBnSqQLJYDiJlJ8U061x2FlDHFoEX+tDlWCY=)
                          3: 8981BFF8CD7511EDADBDC297F1222468.roa (hash: XHwwuY3b3DDaJzLvFzJY6Cge3h5RZq961ny7aXpfhL8=)
                          4: F9FA5CE6CD7411EDA8B70696F1222468.roa (hash: 8eDGMcM6rbtGPj7+umoDH74//2ioLQd3MbdNouRQeVo=)
                          5: 42F3F790CD7511ED90D70697F1222468.roa (hash: pBMuRG1HJgh4SVstyiUpIYlRbDo+xDDlMaQsl1/xXjw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
        Validity
            Not Before: Jun 30 03:39:22 2025 GMT
            Not After : Jul  2 03:39:22 2025 GMT
        Subject: CN=686206eb-f374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:90:04:e7:54:3c:d5:dc:15:63:ce:c0:ab:
                    e0:dd:cf:4b:4e:b1:96:4e:e5:58:3f:e4:14:23:36:
                    b6:cb:d0:55:41:fe:d6:ba:60:a1:49:21:b0:89:a9:
                    c3:d7:96:97:13:f7:d3:b3:c3:15:ca:a4:24:99:a5:
                    e3:7f:0f:98:68:7a:3d:1b:30:4d:43:e7:5d:b3:21:
                    1d:a7:bb:a2:03:fa:64:26:4b:80:dc:b0:5b:43:ea:
                    be:35:20:b0:d3:09:fb:17:38:16:41:4e:50:17:55:
                    f2:84:9e:f1:52:b4:fd:c9:04:16:59:78:e9:11:72:
                    8b:1b:52:f6:1a:d7:2b:e6:e0:5e:4c:68:7c:ac:4d:
                    23:93:73:17:7c:1c:bb:f1:72:5b:ad:ba:b0:e3:da:
                    6a:2c:98:c1:62:83:37:0f:e6:7b:bb:86:d3:d6:a6:
                    95:f7:ff:94:84:67:e8:f9:19:85:5a:a2:34:53:19:
                    75:de:cd:0c:ea:53:94:4c:f4:84:54:2d:69:2e:4a:
                    dd:b7:47:9f:7f:4b:7a:de:8e:1d:ba:42:5b:0d:e9:
                    c6:05:e6:50:6a:6a:9f:00:c5:31:b3:87:f9:f8:59:
                    91:90:60:bf:cc:7f:e1:b6:f7:d4:fb:ae:30:be:b2:
                    d7:fb:3e:32:4e:2f:1c:09:5f:39:f7:60:00:26:e7:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B5:96:4E:E0:3F:19:B0:A8:9C:49:62:86:E4:AE:B1:8E:12:AC:89
            X509v3 Authority Key Identifier:
                keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:7e:26:7b:f2:9c:83:d4:e1:41:ef:61:43:86:02:a2:0d:
         0f:71:50:60:94:20:9f:fd:90:83:8c:44:1b:d1:18:52:54:ab:
         34:5a:fa:2f:2c:6c:f0:bd:82:bf:96:6d:ec:9a:71:4e:95:62:
         35:0b:32:46:85:61:e9:2b:38:9e:bc:8b:06:42:eb:05:99:24:
         f3:b6:55:ac:06:32:d3:0a:83:69:33:81:83:f3:53:a2:3c:08:
         3b:93:47:8f:6a:40:28:28:2b:f0:f8:c8:2f:3c:41:45:9b:bb:
         8d:18:f1:6a:ed:de:89:62:00:9d:b3:0a:b7:1a:2e:70:40:f2:
         db:52:56:79:4b:eb:5c:99:55:99:60:4f:c0:30:9c:4a:95:66:
         e0:66:d1:25:ae:6b:2a:96:93:47:58:00:a5:1e:38:33:20:5d:
         08:b2:86:94:6c:26:c6:bd:0a:fb:26:36:7f:6f:79:cd:8b:c8:
         9c:66:86:81:00:64:b9:c2:2e:33:6d:92:49:19:48:c5:0a:4c:
         b4:42:6c:52:3a:f9:3c:c8:67:db:d0:dc:ca:a2:89:34:48:d0:
         a0:dc:34:d1:f6:66:04:0c:48:32:28:73:3c:6e:cc:92:68:81:
         30:79:27:cc:42:90:ac:49:6e:60:9e:9e:3f:fb:fe:ae:52:3f:
         f0:ca:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:01:22 2025 by rpki-client