Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
File:                     kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft (raw, json)
Hash identifier:          8R8woCC6dNqdaB1iVVmsWmc1WuDYK1SQ9OV4gBEIxAo=
Subject key identifier:   12:41:7A:82:B6:02:36:1E:C9:55:9E:CF:46:16:2A:DB:E9:B8:2C:90
Authority key identifier: 90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
Certificate issuer:       /CN=F366F2B5AF/serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Certificate serial:       0165
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
Manifest number:          0163
Signing time:             Sat 23 Aug 2025 04:50:26 +0000
Manifest this update:     Sat 23 Aug 2025 04:50:25 +0000
Manifest next update:     Mon 25 Aug 2025 04:50:25 +0000
Files and hashes:         1: kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl (hash: F1RsrSpTIXA3lhiXNV9tVIDJM0dIGkd3lguX2q3wfGc=)
                          2: 6217C884742E11EFA821E659762E951A.roa (hash: DqF+PQ0X8r1rRPiZ8RZ4fS3gA5sEXR5BPLyS3G+8cdE=)
                          3: 132CDF5C741511EFA9C5BABD762E951A.roa (hash: 02xv9vPnDrOOLcJupKl7YdL1bTFmoSlfefstM9Glp04=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F2B5AF, serialNumber=9093645F56187261E65B708274DBD52C00DF250D
        Validity
            Not Before: Aug 23 04:50:25 2025 GMT
            Not After : Aug 25 04:50:25 2025 GMT
        Subject: CN=68a94891-8dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:34:cf:a8:1d:e9:dd:ca:ce:2e:83:1e:48:
                    08:ef:5c:3e:22:42:c5:b2:da:4c:95:27:5d:77:8f:
                    c7:de:53:d1:37:a6:b4:dc:64:df:31:c7:44:7b:c0:
                    0d:66:95:e4:2f:d5:a2:d8:20:78:fd:44:d7:56:ab:
                    08:f5:2a:6e:d0:a9:97:ec:d1:01:18:f3:65:d6:ed:
                    31:b9:7e:4a:07:1d:5b:50:81:cc:c1:b0:d7:d7:ec:
                    70:e3:bc:c3:ad:65:65:69:d6:6f:26:50:72:22:53:
                    70:c9:54:8b:ee:c1:d1:c1:75:69:14:98:cf:1c:37:
                    8f:a1:ac:ee:6b:49:2e:8a:a1:69:7e:cb:aa:6c:36:
                    11:c4:fa:22:c2:ba:6a:1a:74:df:ca:72:2c:74:67:
                    18:45:8a:7e:ed:aa:ce:79:e5:cf:9f:ad:5b:60:e6:
                    89:4d:2d:36:2a:8d:ea:92:c2:6e:8d:6c:8a:d4:ba:
                    f6:67:65:f9:f6:5e:2c:53:fb:66:54:1e:8e:7e:a4:
                    0b:69:69:1d:29:ac:d8:13:55:e5:37:6c:10:19:15:
                    2c:42:5f:cd:f4:ac:07:88:fa:87:86:c7:c4:5a:d2:
                    49:40:7f:12:f2:c4:54:50:f9:68:24:ff:68:19:f6:
                    09:a9:37:86:0a:d3:fe:eb:c5:bf:34:29:41:80:6f:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:41:7A:82:B6:02:36:1E:C9:55:9E:CF:46:16:2A:DB:E9:B8:2C:90
            X509v3 Authority Key Identifier:
                keyid:90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a4:8c:62:ab:04:25:30:04:87:6f:1b:b0:0b:80:96:04:73:
         5d:eb:f7:73:ca:78:e7:c5:42:b9:22:f3:ea:d6:80:e1:cf:d9:
         ab:eb:98:db:a5:d4:6b:d9:55:53:d7:8f:98:1b:25:23:4e:83:
         71:90:ce:4d:2c:9e:84:76:fd:ed:fb:41:cc:cc:05:af:1e:08:
         d1:dd:f6:23:db:26:33:3d:4f:c7:03:d9:bb:e6:c8:3b:aa:70:
         15:92:a5:cd:3d:dd:e5:18:df:5b:53:1d:65:39:ac:2d:80:40:
         9d:3f:b9:a7:19:df:13:3f:2b:3c:6b:d5:b4:b0:9a:38:3d:3d:
         da:e5:d5:32:4e:d0:04:8e:5d:cd:9c:85:c4:1b:c2:b1:a1:01:
         55:36:d9:b1:a2:1e:62:67:3c:55:03:d2:af:01:df:97:39:6b:
         20:01:e0:ff:6a:e2:8e:4f:0d:6f:4b:ce:a2:0a:a8:2e:c3:e8:
         88:ca:3b:46:c4:ce:65:51:29:21:90:03:94:ca:22:dc:1e:b4:
         21:89:cf:a8:df:c4:35:8c:d0:b8:88:ca:db:be:98:54:ae:14:
         56:28:12:ce:d3:0b:59:68:76:bd:34:68:d5:fd:34:12:74:10:
         42:54:55:ee:85:b6:1b:c2:12:b2:f6:d5:9e:34:75:25:82:f3:
         26:37:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:34 2025 by rpki-client