Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
File:                     27tnLt0H4F5FzAKFWwHIE75xXoE.mft (raw, json)
Hash identifier:          EwyA/gTeHDiaBWhCqvqgaH/8o7i00XMMXxjw1cHtBvc=
Subject key identifier:   4F:54:0F:E5:EF:A0:51:C0:5F:96:16:15:EC:BA:63:76:55:CA:C3:E0
Authority key identifier: DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81
Certificate issuer:       /CN=F366A8BFAF/serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
Manifest number:          0122
Signing time:             Sat 23 Aug 2025 04:59:23 +0000
Manifest this update:     Sat 23 Aug 2025 04:59:22 +0000
Manifest next update:     Mon 25 Aug 2025 04:59:22 +0000
Files and hashes:         1: 27tnLt0H4F5FzAKFWwHIE75xXoE.crl (hash: pWCbEBDsPpP7y5+2ajVRi1cAns0AMYmOq2inTQf/qo4=)
                          2: 0C2C5B02A38F11EF9EE69A89762E951A.roa (hash: ECtKxH32G5BPQeuP9KuP/2ILf6so8Vog6XvAyzLxNpo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A8BFAF, serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
        Validity
            Not Before: Aug 23 04:59:22 2025 GMT
            Not After : Aug 25 04:59:22 2025 GMT
        Subject: CN=68a94aab-4cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:36:db:76:14:a4:6d:18:00:0c:bc:af:55:
                    ad:fa:f5:e3:fa:14:63:e5:5b:c5:91:18:5d:8d:6d:
                    42:44:86:79:8c:ed:08:5a:08:c6:70:41:7e:a5:cb:
                    85:70:58:61:09:e7:4b:d2:a6:2e:ce:94:b1:88:de:
                    16:3f:62:62:e9:b3:fb:7b:04:6d:3b:98:7a:83:fc:
                    3f:c0:25:07:62:b9:84:0e:93:0c:e4:a1:70:10:6e:
                    73:57:b6:b0:6d:0a:22:a1:14:bc:5f:48:dd:f9:49:
                    59:ec:e5:32:29:94:5a:11:73:b2:58:0a:02:6e:d9:
                    d7:eb:b1:06:df:35:48:88:d9:92:c1:77:78:d6:d0:
                    98:75:3c:e6:1c:1b:41:61:3a:cf:83:22:15:ca:bc:
                    9b:ac:5e:9f:1c:65:69:71:64:9b:f2:2c:ec:f6:12:
                    a8:95:c0:5d:27:96:cd:b8:61:0c:dc:ba:77:fe:28:
                    19:85:5b:29:08:16:b8:2f:21:b8:7c:0b:52:5b:8d:
                    ca:74:31:d5:81:14:a8:ce:4b:8e:67:1b:b5:6f:16:
                    25:06:23:bb:ce:7b:04:0f:6f:02:85:30:57:07:f3:
                    01:d1:a3:4f:cc:3b:3c:98:59:55:d3:e7:f8:57:c9:
                    d6:2c:07:02:31:1a:03:85:ac:e9:66:f8:2f:8f:f9:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:54:0F:E5:EF:A0:51:C0:5F:96:16:15:EC:BA:63:76:55:CA:C3:E0
            X509v3 Authority Key Identifier:
                keyid:DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:de:e5:b3:46:7e:a6:37:c6:55:25:18:78:13:71:d8:f6:61:
         72:1d:2e:58:5e:7f:07:c2:4c:a7:e2:cb:a5:3e:ae:b1:72:44:
         3e:03:6a:0c:41:8c:db:48:5c:89:8f:78:2d:86:c7:39:1e:a5:
         17:6e:bc:9a:3b:53:9e:c9:8e:fe:16:c3:bc:a3:da:e6:82:2f:
         55:78:23:6b:d4:88:43:e3:a5:c1:d5:9c:77:5b:49:3b:50:04:
         fa:ba:4c:2c:a6:c3:9f:87:f1:67:8e:20:20:f3:27:34:23:e9:
         da:44:65:e0:10:1d:8d:74:1d:45:d9:db:de:25:06:4d:7d:5f:
         a8:4c:48:37:10:3b:d5:22:5e:15:6f:18:23:1d:c8:a2:65:59:
         30:44:72:59:51:c9:5e:b5:c1:13:18:8f:ca:94:e4:b2:bb:07:
         d3:a0:09:a8:0a:0c:fa:9f:7a:b3:ab:71:8c:c4:9d:47:2f:98:
         a4:13:5d:2b:e4:f6:e8:70:83:1e:9f:ec:1c:38:52:5d:ad:69:
         1f:2c:5c:c3:f4:ad:f3:35:14:d4:04:e3:28:e4:76:df:37:13:
         c3:d2:b4:07:cc:f3:a0:71:da:12:00:68:ef:64:f3:2e:60:05:
         1f:5f:e6:d4:3e:b5:b9:95:67:f1:34:c8:a9:cd:8e:15:3e:08:
         ac:b0:4c:46
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICASMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkE4QkZBRjExMC8GA1UEBRMoREJCQjY3MkVERDA3RTA1RTQ1Q0MwMjg1NUIwMUM4
MTNCRTcxNUU4MTAeFw0yNTA4MjMwNDU5MjJaFw0yNTA4MjUwNDU5MjJaMBgxFjAU
BgNVBAMTDTY4YTk0YWFiLTRjYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDakzbbdhSkbRgADLyvVa369eP6FGPlW8WRGF2NbUJEhnmM7QhaCMZwQX6l
y4VwWGEJ50vSpi7OlLGI3hY/YmLps/t7BG07mHqD/D/AJQdiuYQOkwzkoXAQbnNX
trBtCiKhFLxfSN35SVns5TIplFoRc7JYCgJu2dfrsQbfNUiI2ZLBd3jW0Jh1POYc
G0FhOs+DIhXKvJusXp8cZWlxZJvyLOz2EqiVwF0nls24YQzcunf+KBmFWykIFrgv
Ibh8C1Jbjcp0MdWBFKjOS45nG7VvFiUGI7vOewQPbwKFMFcH8wHRo0/MOzyYWVXT
5/hXydYsBwIxGgOFrOlm+C+P+UjnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUT1QP
5e+gUcBflhYV7LpjdlXKw+AwHwYDVR0jBBgwFoAU27tnLt0H4F5FzAKFWwHIE75x
XoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZBOEJGL0RDQTFDNjUyQTM4RDExRUY5MjYxMzc4MTc2MkU5NTFBLzI3dG5M
dDBINEY1RnpBS0ZXd0hJRTc1eFhvRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzI3dG5MdDBINEY1RnpBS0ZXd0hJRTc1eFhvRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkE4QkYvRENBMUM2NTJBMzhEMTFFRjkyNjEzNzgxNzYy
RTk1MUEvMjd0bkx0MEg0RjVGekFLRld3SElFNzV4WG9FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ3uWzRn6mN8ZVJRh4E3HY9mFyHS5Y
Xn8Hwkyn4sulPq6xckQ+A2oMQYzbSFyJj3gthsc5HqUXbryaO1OeyY7+FsO8o9rm
gi9VeCNr1IhD46XB1Zx3W0k7UAT6ukwspsOfh/FnjiAg8yc0I+naRGXgEB2NdB1F
2dveJQZNfV+oTEg3EDvVIl4VbxgjHciiZVkwRHJZUcletcETGI/KlOSyuwfToAmo
Cgz6n3qzq3GMxJ1HL5ikE10r5PbocIMen+wcOFJdrWkfLFzD9K3zNRTUBOMo5Hbf
NxPD0rQHzPOgcdoSAGjvZPMuYAUfX+bUPrW5lWfxNMipzY4VPgissExG
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:23 2025 by rpki-client