Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
File:                     2_aMnFwB1o68DJDe5MB0naI6L9Y.mft (raw, json)
Hash identifier:          XqaiPjQTC1u7pGVJlWAJxb4tlgHr1xxdTkvFx9UnPGU=
Subject key identifier:   4E:EF:1D:BA:0D:CB:B7:86:52:59:D8:B3:8D:E0:26:9A:9D:30:7F:AA
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Certificate issuer:       /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial:       04B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
Manifest number:          04AE
Signing time:             Sat 23 Aug 2025 03:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:00:47 +0000
Manifest next update:     Mon 25 Aug 2025 03:00:47 +0000
Files and hashes:         1: 2_aMnFwB1o68DJDe5MB0naI6L9Y.crl (hash: tszKk/Q+OoauQS3g9wAteMnC/bWMPGOJTDJd4kBh3H0=)
                          2: B3EE18F22BD011F08A7C27A2DAE4EC9C.roa (hash: LA8q+uNhXBWE2SjasyXDN1aUvOktsdxT0z0WdJkFsK8=)
                          3: E10AF0E22C4211EEB4DC88104AD9E6FC.roa (hash: 42KgK6RdN4y6CGvKncWwBdL1NNaaBRBg0A8wytUPgDU=)
                          4: 40EAC0D62BD411F0A36BE4B8DAE4EC9C.roa (hash: 9fvE1IFZCB+MmUfnvjTiAQ0VJX4n1Jw5PnZOQzfgAA8=)
                          5: 94A6F8682C4211EE9CAAB80F4AD9E6FC.roa (hash: o0TXx110b3JBiu3Cl6xOs7wBGLlTo9OQb+P0VILZhd0=)
                          6: 95E5589CFCF911EC91C59591F1222468.roa (hash: rnLUsfXlrYCyRp7IztJ9xzb5+MMJaSe1lmd7KitFfus=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
        Validity
            Not Before: Aug 23 03:00:47 2025 GMT
            Not After : Aug 25 03:00:47 2025 GMT
        Subject: CN=68a92ee0-9ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:97:ac:67:ce:b7:e6:f8:15:4e:20:23:01:
                    3d:87:7b:c2:96:99:fe:7a:fb:e8:03:5f:6a:7b:e4:
                    20:e7:69:a2:68:3d:85:7e:92:70:a1:8a:67:6c:85:
                    66:c3:f9:a6:34:46:37:98:22:04:4d:21:26:bd:1d:
                    20:75:2a:0a:0f:98:56:f7:d3:e3:07:61:17:6d:58:
                    35:0f:f8:e8:73:ad:ee:73:e4:04:8f:12:b5:9b:05:
                    4a:9e:ec:a0:7d:ac:d4:e8:f5:2b:e2:ab:bd:f1:1c:
                    8f:88:68:15:9d:5b:7f:7c:2d:4f:fc:7f:8e:e6:62:
                    52:f2:96:7c:f7:ff:4f:7b:94:df:b2:2d:b1:eb:4f:
                    2c:c1:59:fb:27:b2:80:61:c5:54:44:90:05:df:b6:
                    8c:ae:20:29:81:26:9e:e4:4c:a7:00:82:90:b2:55:
                    cc:53:50:81:a5:7f:2e:f8:b3:32:42:f9:58:d9:de:
                    5e:a7:8c:8c:ca:12:71:14:5d:46:16:93:dc:f0:37:
                    06:05:2c:3c:a3:dd:bc:b4:bd:40:55:3a:e9:0f:9f:
                    51:75:44:8d:2e:92:a2:6f:01:6d:f1:d6:0e:d5:11:
                    74:0f:f7:dc:14:2e:f9:92:a8:6e:9e:2c:bf:68:f6:
                    fc:bf:04:2f:43:03:91:40:2d:e0:14:10:e8:be:1e:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:1D:BA:0D:CB:B7:86:52:59:D8:B3:8D:E0:26:9A:9D:30:7F:AA
            X509v3 Authority Key Identifier:
                keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:08:fa:5d:ab:0a:03:10:e2:1e:d3:2d:a1:7f:3b:3f:9c:
         bd:7d:eb:e8:46:a7:5d:60:8e:a9:1b:58:9a:36:8f:ee:c0:7d:
         cb:b9:ce:3b:db:49:21:89:4d:c8:9d:57:44:4a:5e:e3:5b:0c:
         45:ce:14:1f:0e:85:b2:f8:cd:16:62:2b:56:28:85:e8:8e:a1:
         41:55:d1:d7:d3:94:53:4d:b4:08:e3:33:a0:fe:69:b5:52:12:
         0d:8a:65:5a:de:55:0c:32:a9:a9:d6:28:78:2b:7d:8b:0a:5a:
         f8:89:c1:75:9d:da:a2:db:c6:cf:25:18:98:ba:02:38:49:69:
         d7:73:9c:b1:e0:dd:1c:33:46:ff:f7:2d:58:e1:36:b2:50:e6:
         d6:54:9d:75:2f:f9:ec:b1:34:9f:e6:41:23:22:69:11:da:0f:
         f0:c5:e7:af:c1:bb:df:b3:a0:2c:82:6d:ed:8d:74:5e:7e:93:
         e0:a6:66:d8:a0:b9:01:e7:fa:23:35:21:dc:13:af:9d:60:0d:
         3f:a8:86:c8:29:ec:4d:6a:4e:ff:d3:9e:45:77:ea:ab:9b:b5:
         51:21:0d:46:c0:06:9f:f3:32:53:b1:1d:9e:8f:43:3d:42:79:
         c2:2e:bb:30:27:23:de:cf:4a:56:73:88:a7:09:9b:ed:85:30:
         09:86:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:53 2025 by rpki-client