Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          f4yM4qsdE+z1tnYdc7WYOysHzQHLtD/mhCiO/X8T8Hg=
Subject key identifier:   81:AF:8E:81:14:0C:28:55:A6:EB:48:6C:52:A4:10:00:26:D2:43:1A
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       03E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          03E2
Signing time:             Sat 23 Aug 2025 03:19:58 +0000
Manifest this update:     Sat 23 Aug 2025 03:19:57 +0000
Manifest next update:     Mon 25 Aug 2025 03:19:57 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: Tckiyfq+fooxRajMqysnWomR+OSdPZh0/hNy3QAMZFk=)
                          2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
                          3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Aug 23 03:19:57 2025 GMT
            Not After : Aug 25 03:19:57 2025 GMT
        Subject: CN=68a9335e-0001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:40:64:49:95:56:cd:d5:48:38:e3:0c:5f:
                    21:09:49:0a:75:f0:45:13:8a:2b:80:7f:37:d1:ab:
                    63:6f:29:63:0e:d6:61:6f:e7:97:fe:7f:ff:bd:bb:
                    46:70:ec:ef:4c:ae:05:4f:ed:7c:ea:47:dc:ce:27:
                    4a:32:67:3a:9b:c0:81:4a:0a:9e:a9:69:7a:77:f3:
                    a1:bd:29:5c:b0:2c:11:51:b0:d3:7e:0e:9f:88:94:
                    c7:5c:74:91:a7:2b:b0:8c:49:0b:13:d7:6e:55:a9:
                    d1:27:09:7e:b5:69:ee:01:a8:07:0c:ba:60:11:86:
                    f0:ad:d5:25:c8:e9:0a:1a:24:c4:35:13:cf:72:43:
                    95:06:2b:2f:94:ba:0a:6c:99:e2:bd:9a:0d:6b:3f:
                    7f:1a:20:10:a5:db:43:31:56:00:6d:79:5b:6f:70:
                    ce:90:dd:bc:1f:63:12:bb:81:eb:38:4f:29:aa:55:
                    ae:3d:96:b8:e9:f1:0c:aa:be:58:b6:a4:44:d2:20:
                    85:e3:61:49:bc:ef:f7:d0:e1:b4:2e:f3:17:2e:fe:
                    01:c2:59:41:d9:88:6b:6e:15:45:8b:c8:f3:bc:fd:
                    c2:1b:b1:ee:b5:b0:f0:51:b6:3f:b9:68:51:53:ca:
                    59:31:78:52:4c:7b:64:45:61:3a:e7:59:43:21:08:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:8E:81:14:0C:28:55:A6:EB:48:6C:52:A4:10:00:26:D2:43:1A
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:00:33:7e:bb:14:ef:f5:b9:36:ba:f9:bf:25:c1:6e:a6:4c:
         fa:0d:e2:50:76:d5:5b:a0:c3:bc:fb:a2:78:e1:66:0a:0d:26:
         2c:42:cb:81:59:39:44:8c:5c:dd:c5:e3:62:89:51:80:68:c4:
         80:92:13:5c:a0:67:a9:3f:98:85:30:e2:60:b0:e3:30:da:95:
         81:68:02:ba:79:c3:39:ba:c9:c5:21:cd:b3:2d:11:4c:e0:ba:
         e5:ed:49:0b:19:3c:94:2d:01:02:f4:a7:4b:a1:66:c4:8b:f6:
         e3:af:95:be:32:ee:51:52:a4:fc:e6:ce:aa:9c:d0:be:61:5c:
         75:5d:a6:a8:83:a8:95:a7:9f:c9:31:3d:db:83:07:46:cb:ba:
         bd:cd:cf:4f:dd:14:86:1d:2e:9b:09:8f:cd:c6:2c:3b:a4:64:
         6f:a2:c4:ce:b1:d7:ea:e7:f6:fb:9b:6f:73:2a:25:43:f4:8c:
         e2:e0:14:e7:76:46:dc:ac:2f:cd:eb:f5:93:68:43:32:2e:b7:
         a8:79:9b:c6:16:05:ce:b5:11:ad:83:b0:3c:0c:6f:4e:3f:64:
         b7:39:c3:a0:d3:f2:cb:5b:ab:dc:4b:57:d5:7a:37:29:4e:7d:
         0f:85:7d:38:6b:1f:f4:25:65:d5:7e:3c:68:b0:61:fb:7e:d9:
         d8:9e:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:56:47 2025 by rpki-client