Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          YNrfgVOv3ovkzR+cgmWQtHdt47uwgLeXEW1iafrDhTA=
Subject key identifier:   70:0E:77:C5:E9:01:98:7F:C8:D6:EA:65:73:5E:70:78:37:E8:84:4C
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       0251
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          024C
Signing time:             Sat 23 Aug 2025 04:21:46 +0000
Manifest this update:     Sat 23 Aug 2025 04:21:45 +0000
Manifest next update:     Mon 25 Aug 2025 04:21:45 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: okjDbz7EfVKAtkFHl2YWzv305Y7F5dbtH3CoD5zLnOk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Aug 23 04:21:45 2025 GMT
            Not After : Aug 25 04:21:45 2025 GMT
        Subject: CN=68a941da-103f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:0f:b8:74:60:9b:07:09:0f:0b:12:d9:34:
                    49:e8:87:07:fb:3c:88:78:95:d3:58:d0:74:52:c1:
                    1c:47:b6:3a:e0:3a:b4:c1:f1:2a:5f:27:08:9d:50:
                    f5:f9:92:b6:56:bd:97:75:79:75:ba:fc:48:57:4e:
                    a9:69:0e:71:5a:9f:1b:46:39:b7:62:fe:ac:16:7d:
                    45:2f:ff:81:a6:11:51:eb:ae:ab:eb:53:89:c7:81:
                    a2:74:de:66:7c:d4:d1:97:ba:b9:36:80:86:a8:73:
                    f2:d8:66:4b:e5:d3:ea:fc:f3:5a:da:fa:9d:c1:dc:
                    fe:6e:bd:0a:bf:e8:ff:27:6b:29:e1:88:d5:89:8c:
                    83:b3:25:df:7b:60:d1:87:8c:d7:ee:16:c2:23:d0:
                    15:e0:c3:11:a5:a4:6a:57:10:55:27:a6:77:e2:4e:
                    a4:51:7a:4a:04:84:09:28:63:63:6e:bd:87:5b:1c:
                    35:31:c4:a9:60:9f:28:1d:6b:fe:e1:0f:bf:08:e4:
                    20:91:a6:6b:d3:9f:49:c2:1f:f8:7e:ed:96:91:b5:
                    86:4b:aa:3a:87:ab:40:f1:56:47:c1:e1:39:d2:8b:
                    f7:c4:44:d2:d2:86:46:12:be:b1:76:00:10:82:76:
                    e7:7e:c4:18:04:c6:6a:82:e3:bd:cb:37:3a:a4:11:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0E:77:C5:E9:01:98:7F:C8:D6:EA:65:73:5E:70:78:37:E8:84:4C
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:1a:f9:d1:4a:f7:1f:be:c5:3b:9a:26:b8:8d:b0:b3:a1:
         f9:78:6d:58:bc:c7:51:96:a6:ca:e1:e2:94:34:37:53:ff:54:
         7a:0a:59:29:2a:25:24:f6:ff:82:c6:92:fb:48:c7:df:59:38:
         3a:2b:47:c9:11:42:4c:61:74:e7:ce:97:c3:7b:f6:52:f7:90:
         0a:9d:e7:2e:8a:64:2f:69:59:ea:6c:95:f1:be:e0:27:3b:ae:
         3b:62:4e:f9:41:99:45:cf:f0:93:07:dc:03:69:84:d6:e6:ae:
         0c:86:17:69:a5:f3:57:20:67:3f:f2:53:b8:2d:54:34:47:42:
         ec:82:c3:cd:03:b5:d8:95:5a:f4:3e:ab:50:25:6b:59:ae:5c:
         47:89:ac:8b:e3:a9:e6:07:28:8d:10:0b:fd:c5:7f:b4:1d:05:
         9e:a1:45:50:f0:a7:d3:b5:6d:4a:0d:65:74:a2:29:71:46:42:
         c4:ec:4b:75:51:e0:71:f5:8d:32:0f:ca:70:cc:63:c8:6b:fd:
         94:dd:7a:8c:f9:27:3d:5c:1f:5c:0b:c4:92:19:2c:ce:81:d4:
         ed:da:c5:77:39:aa:58:29:1c:a2:21:39:c5:89:55:7a:90:79:
         15:97:c5:bc:20:61:a3:77:c4:6b:ce:1e:80:ff:51:9f:81:cb:
         6c:b0:f8:27
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Njc1RTNBRjExMC8GA1UEBRMoODlCRDE0NkJBRDcyMUU5Qzk0MTlDNTA5QzZFQjJE
NURFQ0I5NjcyMTAeFw0yNTA4MjMwNDIxNDVaFw0yNTA4MjUwNDIxNDVaMBgxFjAU
BgNVBAMTDTY4YTk0MWRhLTEwM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCulA+4dGCbBwkPCxLZNEnohwf7PIh4ldNY0HRSwRxHtjrgOrTB8SpfJwid
UPX5krZWvZd1eXW6/EhXTqlpDnFanxtGObdi/qwWfUUv/4GmEVHrrqvrU4nHgaJ0
3mZ81NGXurk2gIaoc/LYZkvl0+r881ra+p3B3P5uvQq/6P8naynhiNWJjIOzJd97
YNGHjNfuFsIj0BXgwxGlpGpXEFUnpnfiTqRRekoEhAkoY2NuvYdbHDUxxKlgnygd
a/7hD78I5CCRpmvTn0nCH/h+7ZaRtYZLqjqHq0DxVkfB4TnSi/fERNLShkYSvrF2
ABCCdud+xBgExmqC473LNzqkEROXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcA53
xekBmH/I1uplc15weDfohEwwHwYDVR0jBBgwFoAUib0Ua61yHpyUGcUJxustXey5
ZyEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY3NUUzL0RBNkExMzYyRDNFRjExRUVCMEJGN0Y0Rjc3NTQxMkU2L2liMFVh
NjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2liMFVhNjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Njc1RTMvREE2QTEzNjJEM0VGMTFFRUIwQkY3RjRGNzc1
NDEyRTYvaWIwVWE2MXlIcHlVR2NVSnh1c3RYZXk1WnlFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4bxr50Ur3H77FO5omuI2ws6H5eG1Y
vMdRlqbK4eKUNDdT/1R6ClkpKiUk9v+CxpL7SMffWTg6K0fJEUJMYXTnzpfDe/ZS
95AKnecuimQvaVnqbJXxvuAnO647Yk75QZlFz/CTB9wDaYTW5q4MhhdppfNXIGc/
8lO4LVQ0R0LsgsPNA7XYlVr0PqtQJWtZrlxHiayL46nmByiNEAv9xX+0HQWeoUVQ
8KfTtW1KDWV0oilxRkLE7Et1UeBx9Y0yD8pwzGPIa/2U3XqM+Sc9XB9cC8SSGSzO
gdTt2sV3OapYKRyiITnFiVV6kHkVl8W8IGGjd8Rrzh6A/1GfgctssPgn
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:43 2025 by rpki-client