Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          xBA+B66drNwudqK/JGApmClk7ldSz+8/cxMxYfFUYN8=
Subject key identifier:   14:B0:55:30:DB:90:D3:97:FC:3B:1F:13:CD:76:18:F6:A7:2F:4F:29
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0C53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0C51
Signing time:             Sat 23 Aug 2025 01:09:02 +0000
Manifest this update:     Sat 23 Aug 2025 01:09:02 +0000
Manifest next update:     Mon 25 Aug 2025 01:09:02 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: 2aBG3E+F5krHlt28hELvSHWRsaOf0dtO53AVlWO5914=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3155 (0xc53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Aug 23 01:09:02 2025 GMT
            Not After : Aug 25 01:09:02 2025 GMT
        Subject: CN=68a914ae-3ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:df:59:82:27:f6:08:19:1a:7f:aa:58:14:
                    3a:9a:87:3a:da:92:ae:7b:6d:c6:66:ad:38:d6:fd:
                    3a:a3:58:a5:92:1e:9e:1c:4f:c1:c9:3e:48:cb:f9:
                    d8:aa:22:bd:ed:d0:8b:c9:0e:15:46:ae:3a:c4:b6:
                    42:1c:09:c0:90:52:1e:ee:1c:2e:34:19:65:b1:3d:
                    6d:fb:59:d3:9e:90:84:2b:ea:9f:89:22:19:3f:30:
                    a5:5a:82:ae:cc:e1:9e:1f:14:49:fd:ac:32:a9:25:
                    d1:0d:10:87:6b:9c:ff:35:66:12:b0:2b:15:24:c1:
                    c1:e6:8f:95:d2:71:71:ab:0d:fa:3f:88:15:16:54:
                    79:ad:d1:52:76:50:8b:e2:bf:44:15:34:80:19:df:
                    ca:1b:fd:cf:26:0a:eb:48:53:d0:49:2b:22:38:c9:
                    d1:93:4f:f6:d3:41:e7:c2:e1:1b:8c:e2:9a:56:08:
                    15:37:41:28:d9:42:f8:96:23:84:a2:f2:df:fa:30:
                    57:cc:f5:ab:a9:b3:d3:e9:88:04:2d:b4:de:a8:0c:
                    13:dd:b9:29:40:2b:dc:ca:08:56:a4:ad:0b:ca:4e:
                    30:1c:38:df:b7:e0:be:f6:58:70:9f:6b:0e:da:6d:
                    f3:4e:96:3c:d4:9b:c7:80:2a:b1:65:2b:3f:8e:52:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:55:30:DB:90:D3:97:FC:3B:1F:13:CD:76:18:F6:A7:2F:4F:29
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:4e:2e:70:fa:4b:c3:7a:41:64:f6:63:93:85:16:e0:ab:
         30:c1:f5:66:7c:aa:60:0c:18:e2:5f:75:57:c6:68:69:01:84:
         17:ba:2e:ea:90:33:03:6f:80:ac:69:d1:ca:be:43:d8:d8:e4:
         2f:9b:62:db:4c:cb:05:5d:29:f6:af:cd:42:d8:8e:a0:0d:d0:
         de:52:bb:fa:5e:3b:c5:e9:f8:02:f2:e7:ee:16:3d:7d:89:4a:
         65:3b:7e:e3:48:6e:9b:a0:b5:67:f3:85:2c:46:95:78:a4:05:
         97:69:1b:52:ea:1a:83:37:60:57:a4:88:09:0f:c7:2d:00:54:
         48:32:88:27:4a:a8:e9:98:80:3c:5c:67:ed:0a:6c:7c:2e:89:
         f8:d2:9d:39:16:53:17:7a:da:f1:ee:c1:5c:c1:4b:02:0e:e7:
         d6:64:59:91:5c:2a:2e:6d:92:d8:db:db:e2:c5:9d:f2:dd:5f:
         33:c1:b3:72:a9:02:d5:a6:91:fa:b9:7c:06:4b:43:85:fe:0e:
         4b:b6:7d:89:c4:e9:1a:40:ca:91:f1:32:d0:68:4d:64:ad:ec:
         91:d5:40:bf:72:96:fa:89:73:0b:91:84:3e:47:a0:39:59:cb:
         c3:94:48:b1:f1:1c:9c:ae:31:45:6f:8b:39:74:c7:4e:b1:4e:
         2c:bb:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:15 2025 by rpki-client