Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
File:                     ndN95jYew89otu98PBKrOZx8L4s.mft (raw, json)
Hash identifier:          0ipOspoCiVzq19m63kjaBwoEosBSgthRPWqfG/5CiHE=
Subject key identifier:   25:C2:F7:BD:7F:D5:D7:1E:1A:53:B1:B8:25:3D:08:66:C4:3E:72:5F
Authority key identifier: 9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B
Certificate issuer:       /CN=F3660442AF/serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
Certificate serial:       0437
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
Manifest number:          0435
Signing time:             Sat 23 Aug 2025 03:15:58 +0000
Manifest this update:     Sat 23 Aug 2025 03:15:58 +0000
Manifest next update:     Mon 25 Aug 2025 03:15:58 +0000
Files and hashes:         1: ndN95jYew89otu98PBKrOZx8L4s.crl (hash: 5tXyJ9VN5Cnzp9imVnzYLU2UEKHTWqRFhKdJx8LJWsM=)
                          2: CA173E5E37FF11EE925E9B3E4AD9E6FC.roa (hash: DTtlgrbmzzwxu3uoClo86Z6YZ7fh9HCMMfQJyujQvlA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660442AF, serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
        Validity
            Not Before: Aug 23 03:15:58 2025 GMT
            Not After : Aug 25 03:15:58 2025 GMT
        Subject: CN=68a9326e-4335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:66:36:7a:81:39:6a:4a:26:87:a2:bf:7d:
                    17:5b:f2:c8:23:89:e1:c3:19:17:47:8a:db:1b:84:
                    3c:5a:77:28:9c:0a:c8:66:36:9e:c4:69:5e:ba:c2:
                    db:c6:66:01:5f:bf:3a:f9:3a:7f:bf:c0:da:bf:4a:
                    35:8e:7c:23:f2:45:a0:19:fb:14:7a:e0:40:8b:2d:
                    aa:a4:7f:c6:1f:5c:a7:a7:91:ae:69:3f:0d:fb:b1:
                    4d:0e:c6:d1:bf:68:65:08:26:ea:a2:48:3b:b3:76:
                    86:20:25:6b:02:f1:5e:73:db:4c:18:6d:1a:83:e5:
                    0d:a7:00:e4:18:ed:96:d4:32:a0:e4:5b:e5:41:08:
                    90:0e:f1:d6:49:8a:9c:83:3b:1d:3b:ad:f0:c2:6c:
                    e9:01:9d:d5:5f:16:fb:ba:88:50:33:64:62:c3:c6:
                    a2:bb:66:df:d6:a6:bf:14:41:b1:53:9b:43:eb:02:
                    62:ce:0d:e1:29:31:56:7b:fd:5c:74:67:e0:1d:03:
                    53:0d:c2:23:bc:f2:bb:30:0f:ed:88:fc:cc:a4:a7:
                    8a:ee:bf:9f:b7:3a:61:74:f7:12:e7:23:62:68:98:
                    6e:3a:1c:09:68:5f:34:d7:e4:8b:4f:83:d4:4e:8a:
                    1f:99:74:ed:54:cd:9a:bc:6d:38:55:68:3d:dd:04:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:F7:BD:7F:D5:D7:1E:1A:53:B1:B8:25:3D:08:66:C4:3E:72:5F
            X509v3 Authority Key Identifier:
                keyid:9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:e9:4f:2e:a9:11:05:6d:2b:d9:69:62:da:90:fd:8d:0f:
         9f:b9:a0:7e:95:d9:b7:bf:66:cc:83:03:cc:c5:2a:dc:65:31:
         cd:26:a3:c3:b4:a4:eb:ca:6a:be:e5:08:bd:ea:61:a8:22:02:
         d7:3c:19:09:7a:7d:9d:82:00:14:9c:c0:b0:49:4b:8e:1f:48:
         97:1f:3d:2f:ae:42:da:c3:cc:24:ff:c2:12:43:4e:3d:b8:e6:
         34:be:2b:27:da:d2:ee:00:a8:0b:38:74:31:d1:a2:c6:99:00:
         15:7a:46:ec:28:cf:8a:b3:49:b1:f2:f6:03:1f:6a:29:40:ff:
         b9:f0:e2:3d:f9:7f:53:6a:9a:e7:ab:72:8f:c6:38:ec:85:97:
         03:85:7c:6d:5d:e9:fb:84:1f:ca:f3:b4:98:83:63:0f:05:0a:
         f3:ba:77:a8:c3:20:2d:0d:b6:56:66:2d:c5:a9:1d:0e:3b:cd:
         40:4d:f5:ac:7a:8b:27:bc:a5:49:d0:b7:e1:e4:37:da:cb:be:
         58:b0:82:e1:06:9a:90:36:b9:e6:a5:37:ea:30:cc:ed:43:0e:
         36:21:5e:56:7a:a4:a5:58:a5:e1:93:b1:f3:73:1d:10:da:fe:
         ac:2c:ef:b5:7e:c7:45:3c:70:24:b8:48:95:b8:07:cc:68:e5:
         22:e9:a2:41
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjA0NDJBRjExMC8GA1UEBRMoOUREMzdERTYzNjFFQzNDRjY4QjZFRjdDM0MxMkFC
Mzk5QzdDMkY4QjAeFw0yNTA4MjMwMzE1NThaFw0yNTA4MjUwMzE1NThaMBgxFjAU
BgNVBAMTDTY4YTkzMjZlLTQzMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/omY2eoE5akomh6K/fRdb8sgjieHDGRdHitsbhDxadyicCshmNp7EaV66
wtvGZgFfvzr5On+/wNq/SjWOfCPyRaAZ+xR64ECLLaqkf8YfXKenka5pPw37sU0O
xtG/aGUIJuqiSDuzdoYgJWsC8V5z20wYbRqD5Q2nAOQY7ZbUMqDkW+VBCJAO8dZJ
ipyDOx07rfDCbOkBndVfFvu6iFAzZGLDxqK7Zt/Wpr8UQbFTm0PrAmLODeEpMVZ7
/Vx0Z+AdA1MNwiO88rswD+2I/Mykp4ruv5+3OmF09xLnI2JomG46HAloXzTX5ItP
g9ROih+ZdO1UzZq8bThVaD3dBEonAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJcL3
vX/V1x4aU7G4JT0IZsQ+cl8wHwYDVR0jBBgwFoAUndN95jYew89otu98PBKrOZx8
L4swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYwNDQyLzI5NjI4MDFDNEZCMjExRUQ4MzcxNDZENEYxMjIyNDY4L25kTjk1
allldzg5b3R1OThQQktyT1p4OEw0cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25kTjk1allldzg5b3R1OThQQktyT1p4OEw0cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjA0NDIvMjk2MjgwMUM0RkIyMTFFRDgzNzE0NkQ0RjEy
MjI0NjgvbmROOTVqWWV3ODlvdHU5OFBCS3JPWng4TDRzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMzulPLqkRBW0r2Wli2pD9jQ+fuaB+
ldm3v2bMgwPMxSrcZTHNJqPDtKTrymq+5Qi96mGoIgLXPBkJen2dggAUnMCwSUuO
H0iXHz0vrkLaw8wk/8ISQ049uOY0visn2tLuAKgLOHQx0aLGmQAVekbsKM+Ks0mx
8vYDH2opQP+58OI9+X9Taprnq3KPxjjshZcDhXxtXen7hB/K87SYg2MPBQrzuneo
wyAtDbZWZi3FqR0OO81ATfWseosnvKVJ0Lfh5Dfay75YsILhBpqQNrnmpTfqMMzt
Qw42IV5WeqSlWKXhk7Hzcx0Q2v6sLO+1fsdFPHAkuEiVuAfMaOUi6aJB
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:25 2025 by rpki-client