Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File:                     Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier:          uNdJcA44d+rb1+ntwrj7/2xowEgDzHWisfqRekufJX8=
Subject key identifier:   0F:20:64:97:C0:68:5B:2C:1E:09:74:2B:2D:8A:22:2C:1F:72:B8:37
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer:       /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial:       05BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number:          05B8
Signing time:             Wed 02 Jul 2025 02:21:35 +0000
Manifest this update:     Wed 02 Jul 2025 02:21:34 +0000
Manifest next update:     Fri 04 Jul 2025 02:21:34 +0000
Files and hashes:         1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: oM2YDJpBy7vHYuPjbRPBNKGvP+KLPyib9x7J55xr1V4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 02:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
        Validity
            Not Before: Jul  2 02:21:34 2025 GMT
            Not After : Jul  4 02:21:34 2025 GMT
        Subject: CN=686497af-59f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:6e:4e:02:8c:5e:52:2b:b4:4b:c9:a7:23:
                    8b:bd:12:f3:d3:95:ea:41:eb:fb:87:55:d8:24:d6:
                    5d:68:a4:bb:4f:04:29:c0:b7:d8:57:23:15:5b:cb:
                    ae:35:51:21:c8:42:1c:29:63:8e:ee:6b:4b:2f:05:
                    29:11:a6:bf:bf:da:d3:85:00:b2:71:1a:89:19:a4:
                    f0:90:2b:bb:11:7b:21:20:d3:29:bb:06:5f:cb:d3:
                    f9:ec:7a:5e:53:6c:d4:04:c4:cf:38:21:b9:5c:af:
                    0c:54:38:ff:d6:a0:90:c9:60:5a:bf:83:d4:02:c8:
                    28:c7:f5:57:31:bb:ca:bd:2f:a5:2e:ed:d1:ca:33:
                    f4:65:52:d3:dc:92:bc:e9:c0:9c:29:9d:24:55:91:
                    ee:f1:35:3b:1b:ff:63:a4:f3:05:86:64:ee:e3:2d:
                    e5:12:13:55:04:cb:54:01:c3:48:c9:2d:9d:de:de:
                    42:39:ac:6a:74:d4:b6:fd:c2:dc:af:38:d8:bd:6a:
                    66:d1:e4:33:25:2c:33:ac:2f:cd:1e:be:f0:cc:07:
                    99:db:e9:ee:6a:ff:2c:f2:75:50:eb:dc:5f:9a:d8:
                    5c:8a:72:51:10:27:54:4d:6c:d5:d4:e4:03:96:73:
                    33:ac:55:9f:52:6b:c9:ae:17:89:5a:ab:fb:e1:f9:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:20:64:97:C0:68:5B:2C:1E:09:74:2B:2D:8A:22:2C:1F:72:B8:37
            X509v3 Authority Key Identifier:
                keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:d1:20:c1:b1:01:63:e3:51:47:03:91:b4:83:c6:71:bd:
         15:bb:1c:c9:fe:ec:d9:e3:d7:74:e2:ef:2a:15:47:49:b6:11:
         06:ce:8f:4c:58:76:13:1f:f2:4f:6c:5c:9d:76:1a:eb:fe:db:
         12:e2:9e:ad:90:18:9a:41:3b:4a:17:72:20:ad:e9:77:50:56:
         85:91:0d:80:e4:43:ed:80:33:d1:89:46:fe:67:7b:30:87:e0:
         53:c1:3f:70:28:68:33:88:0e:8c:95:1c:c4:39:30:3e:0c:ee:
         02:ce:70:2d:75:ce:c4:2a:33:83:a2:7a:34:61:d6:a7:f1:e8:
         5a:bd:95:3c:21:d8:22:e5:82:24:e2:27:20:47:c2:57:ed:a4:
         93:a1:86:68:27:cc:09:c8:23:4f:3c:cf:a3:83:9b:ef:4e:8d:
         aa:d0:ec:33:d9:b2:96:14:bf:66:6e:ff:3d:74:ba:ee:53:16:
         42:d3:c2:39:db:c4:a3:27:5b:1c:f8:03:4a:3d:2c:c0:70:21:
         3b:f0:57:6f:1d:45:22:6d:04:e2:3c:cb:52:3b:46:76:71:88:
         f0:b3:cb:03:f1:b3:19:43:a1:e5:22:98:3a:0e:c9:54:9c:26:
         d7:3d:98:cb:ae:1e:ae:67:bd:fc:ed:91:2b:93:3f:eb:6b:dc:
         41:f9:2a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:37:10 2025 by rpki-client