Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          qEptrdSqCPRj577C6dCVR/gb6pt9x4UrvAAq7QFIVR8=
Subject key identifier:   A8:C2:90:32:D5:2B:63:42:AC:98:8A:38:3C:90:36:54:D6:EB:21:3A
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       018F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          018F
Signing time:             Sat 23 Aug 2025 04:41:34 +0000
Manifest this update:     Sat 23 Aug 2025 04:41:33 +0000
Manifest next update:     Mon 25 Aug 2025 04:41:33 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: 1GwBoy93byV0nEPEGPhVpht9C3F/N2FTv6o/Cbm2pos=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Aug 23 04:41:33 2025 GMT
            Not After : Aug 25 04:41:33 2025 GMT
        Subject: CN=68a9467e-6c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:f2:b5:cd:46:05:5f:70:0b:2c:5b:b3:d5:
                    46:73:0b:b5:28:47:05:a3:e8:31:7d:dc:5d:5b:39:
                    5a:83:26:46:10:75:80:9c:70:7b:82:1f:75:b7:ad:
                    6c:a8:04:7f:c8:d2:9e:cf:4e:3c:d2:c7:30:f7:62:
                    4c:c0:fc:bb:9e:3c:b5:0a:da:0a:c3:63:1a:8d:df:
                    d8:95:ee:ee:1b:9a:00:44:cb:38:e9:02:48:7d:b6:
                    27:01:b9:ab:76:5c:3d:d5:5c:8d:f1:d2:30:66:ff:
                    c4:85:4c:5e:a4:38:91:e7:90:f9:10:f1:29:b6:3a:
                    1d:96:37:95:8d:1d:0c:07:22:aa:7b:d1:fe:8d:ff:
                    2b:4a:cf:2d:1a:4c:c4:81:88:7d:96:00:74:b2:cb:
                    5d:e8:86:3c:15:ae:7e:03:b1:d2:6c:e2:38:ab:55:
                    04:21:b4:a5:79:43:ca:f3:f7:c3:14:b6:e4:b3:32:
                    a9:84:f1:7e:30:d3:98:4b:bd:37:3c:11:b5:2c:66:
                    18:5c:f0:d3:37:6b:07:09:14:6a:02:d5:a4:60:a5:
                    ce:f4:7e:7b:3d:17:42:68:e6:2d:40:da:eb:4c:f7:
                    80:75:7c:90:24:64:ca:6b:20:bc:ef:24:dd:0e:0b:
                    12:97:76:0a:ce:83:78:9f:0c:1d:87:05:8a:07:d7:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C2:90:32:D5:2B:63:42:AC:98:8A:38:3C:90:36:54:D6:EB:21:3A
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:0a:21:23:93:33:b6:bf:8e:f2:01:77:e3:f7:86:53:eb:
         b0:8c:09:2a:f8:93:45:f1:c0:2a:4f:23:ba:1e:a0:20:84:61:
         20:f1:32:e2:80:de:18:8e:39:ae:cb:cc:08:9c:f6:3a:fc:b0:
         f5:45:94:fe:05:0e:1a:40:fc:8b:0a:f9:5a:06:8a:1a:01:57:
         96:3a:b7:3c:91:c9:c4:be:d9:2c:5b:47:17:18:25:e2:cb:7a:
         16:83:0a:80:ac:16:b9:08:e3:3a:5a:c7:8c:45:8e:5d:30:d0:
         05:c0:09:5c:2a:26:7e:6e:32:45:9a:18:cf:03:75:ee:25:23:
         88:06:8d:9e:56:16:32:33:54:42:73:b3:b9:9a:9f:e2:59:97:
         a8:8e:6a:2f:83:4d:1e:93:ad:99:c7:25:f9:47:27:86:21:e1:
         80:b3:c5:fa:3c:ad:e2:3c:0a:81:38:d6:fd:24:85:80:6e:03:
         b3:cc:af:48:56:06:ec:e6:2b:68:4b:9f:ca:ba:d2:b7:2f:e1:
         a4:55:27:b9:a5:ea:2e:43:32:96:e7:22:89:a6:d3:9e:52:21:
         46:5f:88:7e:81:c3:15:23:c9:d1:f2:bf:ee:ba:98:90:fe:a6:
         73:56:66:f5:d3:dc:b2:9f:4a:9c:fa:c8:2c:29:32:5c:e2:25:
         bf:f0:92:1b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTg1ODNBRjExMC8GA1UEBRMoRkJGNEM3Q0Y1RUM4NjJENDJEQzgxMEEwNDMwMDIx
MUJBMkI3QzUwODAeFw0yNTA4MjMwNDQxMzNaFw0yNTA4MjUwNDQxMzNaMBgxFjAU
BgNVBAMTDTY4YTk0NjdlLTZjODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4GPK1zUYFX3ALLFuz1UZzC7UoRwWj6DF93F1bOVqDJkYQdYCccHuCH3W3
rWyoBH/I0p7PTjzSxzD3YkzA/LuePLUK2grDYxqN39iV7u4bmgBEyzjpAkh9ticB
uat2XD3VXI3x0jBm/8SFTF6kOJHnkPkQ8Sm2Oh2WN5WNHQwHIqp70f6N/ytKzy0a
TMSBiH2WAHSyy13ohjwVrn4DsdJs4jirVQQhtKV5Q8rz98MUtuSzMqmE8X4w05hL
vTc8EbUsZhhc8NM3awcJFGoC1aRgpc70fns9F0Jo5i1A2utM94B1fJAkZMprILzv
JN0OCxKXdgrOg3ifDB2HBYoH10/rAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqMKQ
MtUrY0KsmIo4PJA2VNbrITowHwYDVR0jBBgwFoAU+/THz17IYtQtyBCgQwAhG6K3
xQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4NTgzLzZFNTU4OTQwNEU0QzExRUZCM0YwNjdBRjc2MkU5NTFBLy1fVEh6
MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1fVEh6MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTg1ODMvNkU1NTg5NDA0RTRDMTFFRkIzRjA2N0FGNzYy
RTk1MUEvLV9USHoxN0lZdFF0eUJDZ1F3QWhHNkszeFFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDuAohI5Mztr+O8gF34/eGU+uwjAkq
+JNF8cAqTyO6HqAghGEg8TLigN4Yjjmuy8wInPY6/LD1RZT+BQ4aQPyLCvlaBooa
AVeWOrc8kcnEvtksW0cXGCXiy3oWgwqArBa5COM6WseMRY5dMNAFwAlcKiZ+bjJF
mhjPA3XuJSOIBo2eVhYyM1RCc7O5mp/iWZeojmovg00ek62ZxyX5RyeGIeGAs8X6
PK3iPAqBONb9JIWAbgOzzK9IVgbs5itoS5/KutK3L+GkVSe5peouQzKW5yKJptOe
UiFGX4h+gcMVI8nR8r/uupiQ/qZzVmb109yyn0qc+sgsKTJc4iW/8JIb
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:02 2025 by rpki-client