Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          NWkK/6oQy2Pfn7fJ5seKbPOWQ1I46OSz/bwua0vZzgs=
Subject key identifier:   F1:6E:2E:B0:63:E5:A1:E4:22:2A:D8:40:DB:9D:6C:B7:CC:F1:66:58
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       0766
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          0766
Signing time:             Sat 23 Aug 2025 01:59:17 +0000
Manifest this update:     Sat 23 Aug 2025 01:59:16 +0000
Manifest next update:     Mon 25 Aug 2025 01:59:16 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: Fiwx968Qk+wJdnpJLswR9k19zbJhuy7llHlzQpNvLPk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Aug 23 01:59:16 2025 GMT
            Not After : Aug 25 01:59:16 2025 GMT
        Subject: CN=68a92075-e75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:c2:75:d2:23:eb:7d:6d:e8:9c:3f:62:f1:
                    fc:58:84:b8:51:4b:9b:cb:a1:ac:40:71:91:b1:a2:
                    88:c5:c4:26:f4:3a:17:42:fc:11:0e:8a:c9:30:57:
                    a2:d5:04:92:20:3e:5c:34:b3:e2:e4:c5:f2:de:48:
                    55:65:13:44:ad:42:55:48:a6:6b:41:dc:3d:76:f5:
                    1b:d8:56:8d:d6:fc:56:61:34:7e:42:22:b8:c9:cf:
                    8a:30:c9:30:d5:1e:a7:b5:ce:f5:67:9a:3e:de:1c:
                    20:72:67:04:78:d9:c4:17:cc:a6:cf:64:65:9b:59:
                    d5:54:7e:8c:ec:62:c8:ec:c1:f8:ac:fd:da:1d:7b:
                    86:f2:9d:97:94:85:5e:93:a1:7f:e6:f8:d5:6f:fb:
                    86:32:6d:7c:28:70:c6:6b:08:45:59:42:13:d5:fe:
                    63:21:6b:ea:60:d4:90:b6:81:8a:8c:17:98:bb:43:
                    1b:70:cb:fc:a2:19:7c:3e:19:58:6b:09:0d:96:24:
                    4b:d1:42:07:eb:7f:2a:03:32:13:25:87:19:6c:15:
                    8f:36:c4:51:20:77:85:1b:12:9c:06:03:a2:e8:7f:
                    a2:07:9c:21:ce:82:47:ea:5d:94:3c:0a:e5:d3:f7:
                    e9:ec:d0:ac:8c:fa:6b:75:f6:b4:ad:b8:e5:d3:97:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:2E:B0:63:E5:A1:E4:22:2A:D8:40:DB:9D:6C:B7:CC:F1:66:58
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:17:6b:42:ca:28:c9:27:0d:35:e8:55:bf:4b:a1:af:bb:9e:
         74:90:e3:46:37:6f:bf:5d:c7:06:c8:38:62:f4:92:51:86:ec:
         9b:80:c4:0b:f2:48:86:6a:54:79:c8:71:23:db:10:82:70:45:
         44:37:c4:ad:65:18:ab:cb:ed:53:9f:8a:0f:94:3e:01:95:b4:
         9b:ae:d7:52:62:f0:8e:20:dc:d8:e3:63:d4:55:c7:f6:30:bf:
         bd:2b:6e:e9:63:bb:f6:e3:cc:6d:33:3e:b9:f5:3e:a1:e3:69:
         cc:3b:8d:b4:47:de:60:1e:cc:3d:ff:f0:89:1f:21:e5:fc:ad:
         ee:7a:13:a7:93:70:b9:e6:9f:73:93:cd:58:b2:b1:de:0a:52:
         dd:b4:6b:99:67:b9:6d:55:65:83:a6:5e:e9:fb:62:08:b9:f0:
         e5:56:8e:b1:68:1a:4d:98:2d:c5:9b:f4:45:4f:66:5a:bb:02:
         b6:63:16:f2:b8:f9:b2:13:7f:6e:46:d2:8d:d3:90:f4:c6:69:
         dc:1f:1e:46:b2:8e:86:53:ed:09:ad:da:f9:28:23:65:bd:56:
         ca:47:cf:18:b2:18:3e:ec:d5:3b:34:53:81:71:ad:87:ed:d7:
         52:7d:40:3a:5f:ef:8c:91:db:3d:fd:d0:1a:c8:cc:da:37:dd:
         c2:a1:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:29 2025 by rpki-client