Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
File:                     7KUu1usrGLOvGbp5LPM-AO_td-o.mft (raw, json)
Hash identifier:          QJr5oYDQk4XXHhvVi+qSQjL3yqZ/HBma1ITBYH8Ychk=
Subject key identifier:   5F:A9:5A:B1:5E:61:B9:FE:CF:57:9D:C8:AE:07:28:F2:EE:51:3F:66
Authority key identifier: EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
Certificate issuer:       /CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Certificate serial:       0865
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
Manifest number:          0863
Signing time:             Sat 23 Aug 2025 01:44:28 +0000
Manifest this update:     Sat 23 Aug 2025 01:44:28 +0000
Manifest next update:     Mon 25 Aug 2025 01:44:28 +0000
Files and hashes:         1: 7KUu1usrGLOvGbp5LPM-AO_td-o.crl (hash: 3NYhEEgcHXw1JwGqMqYyDXYYdKzzbzymYXwQfGqBZoQ=)
                          2: 72E4BD0412B111EA9EACDA3AF8AEA228.roa (hash: lEGlEyNpK2D28OfWSczq5nyD+T86uHXMrbx63t8Ft0s=)
                          3: 5142A9C212B111EAAF53AF3AF8AEA228.roa (hash: xG/mwLzjMt/AD4VCyWzSqQgk/KYhEOItbq9UQDh1nvU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678D2DAF, serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
        Validity
            Not Before: Aug 23 01:44:28 2025 GMT
            Not After : Aug 25 01:44:28 2025 GMT
        Subject: CN=68a91cfc-ee6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:30:ab:21:74:f4:3c:4a:6a:d5:33:10:69:
                    5d:92:85:96:23:38:23:de:39:1d:51:52:a9:d5:ab:
                    3b:c5:f0:ec:06:2f:bf:e5:07:0d:be:ed:2c:ac:29:
                    e8:c1:e3:bd:90:63:08:55:f7:fc:65:bd:74:89:1d:
                    3c:69:3e:71:67:11:2b:07:3b:38:c6:7b:18:5d:18:
                    88:7c:f7:d8:9c:f4:c2:5f:7d:3c:09:f0:e3:4d:39:
                    65:d8:8d:3f:39:05:70:74:2d:ba:2a:c9:99:20:9e:
                    3b:6f:f6:ec:79:b9:59:77:99:93:26:41:18:79:61:
                    a4:12:3f:53:39:60:61:ba:17:b1:dd:e7:81:94:b0:
                    aa:b3:a4:ac:1a:40:c2:0c:c2:f1:85:9a:fb:cb:ef:
                    e8:ef:97:71:7d:52:63:e7:dc:13:a6:d8:32:e9:99:
                    88:94:7d:4f:9a:66:95:47:93:46:73:ab:c3:72:40:
                    b5:36:ea:a7:f4:be:ff:74:ce:c7:12:63:5a:f7:f4:
                    ae:1c:fb:98:a1:7d:c4:da:c0:6e:5e:b0:7e:ac:89:
                    27:61:26:fc:b3:52:00:bd:5e:e0:db:4a:27:90:ca:
                    3b:44:c0:a2:21:d2:3c:8c:39:7b:b8:ed:93:59:a4:
                    8b:f9:8e:fb:4f:74:1c:df:6d:ae:ce:b9:42:94:b3:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A9:5A:B1:5E:61:B9:FE:CF:57:9D:C8:AE:07:28:F2:EE:51:3F:66
            X509v3 Authority Key Identifier:
                keyid:EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2a:a9:66:43:8c:ee:a1:56:1d:81:fa:a5:e2:6b:9d:92:42:
         68:ea:80:16:8c:5b:99:e4:a7:88:6f:0f:99:b4:c9:09:7b:75:
         de:80:50:50:87:96:dc:55:fe:89:c7:c2:b1:ec:08:08:f9:63:
         cf:3b:41:6a:0c:3d:71:29:fb:6a:f8:81:a3:8f:75:e1:16:4b:
         d9:25:34:3c:d8:59:31:d9:5e:c5:bc:0f:ee:07:b4:21:39:4b:
         c8:45:e5:92:8f:fb:6f:8a:b7:f9:1d:35:24:39:7d:25:7d:46:
         c5:7b:f7:50:cb:61:48:c5:5e:b8:10:1f:59:39:86:b0:09:7a:
         d3:fd:aa:cf:49:a9:e7:c9:a1:d9:3f:71:40:02:a3:67:86:d0:
         3c:a6:7e:41:13:3f:d4:e1:6e:4c:44:3a:f5:27:56:57:45:7c:
         32:c4:e2:52:d9:06:13:ac:2b:17:7f:a6:3e:41:8b:ae:13:cb:
         17:63:9f:45:28:60:92:e7:cf:fe:39:ea:a8:36:6c:ad:43:6a:
         32:34:33:05:21:d0:b7:ef:a1:ca:c9:d4:0c:6c:f2:4e:5f:1f:
         b2:29:5c:75:89:1b:37:44:1f:9a:48:8a:fc:5c:66:22:c4:f0:
         d2:b0:1e:45:11:8f:33:e2:8d:96:63:93:c5:af:15:35:16:98:
         2a:16:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:13 2025 by rpki-client