Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
File:                     9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft (raw, json)
Hash identifier:          MKdfmjvoyVWjuyyj7Efi3BTnkz8jrnjZOgCIh6g3Z0s=
Subject key identifier:   57:74:59:7C:42:AB:0E:E4:E2:CF:3D:7D:AE:AF:43:86:74:60:28:D8
Authority key identifier: F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Certificate issuer:       /CN=F36848BCAF/serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Certificate serial:       0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
Manifest number:          0D
Signing time:             Mon 12 May 2025 05:18:15 +0000
Manifest this update:     Mon 12 May 2025 05:18:14 +0000
Manifest next update:     Wed 14 May 2025 05:18:14 +0000
Files and hashes:         1: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl (hash: DyHzIQxLRiLzh2DFB9YGZb8NQPpmn4urEdT6Xs2Actc=)
                          2: 09A34FAA26D211F0B6739EA6DAE4EC9C.roa (hash: ODLXD+AAWaNDLl7uFGo30OyjOAfDKyZb34POXL/jqq0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 05:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
        Validity
            Not Before: May 12 05:18:14 2025 GMT
            Not After : May 14 05:18:14 2025 GMT
        Subject: CN=68218497-624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:bf:89:db:c3:c6:97:28:56:52:8a:57:dc:
                    94:e6:94:fd:76:3c:f5:9b:26:0d:25:29:dc:32:72:
                    2d:5a:40:d5:1f:a8:ec:92:8d:be:96:03:fd:82:5c:
                    df:d7:47:56:33:6c:a2:c5:0e:b3:bb:ed:df:7b:e7:
                    11:80:6f:24:f4:5a:95:82:07:78:03:b9:19:29:2c:
                    9c:6d:72:9a:e8:50:32:3e:71:cf:cb:ae:96:e3:0c:
                    f0:97:25:d4:c0:61:e4:8a:94:3a:20:79:f2:70:a6:
                    5b:b6:79:59:83:a5:03:12:a1:9b:88:7d:90:49:bb:
                    04:89:64:6c:db:80:2f:bb:50:40:1f:7b:23:2a:3f:
                    1f:cf:2d:cd:90:9b:5c:58:c4:76:eb:3b:20:0d:ce:
                    98:e7:1b:0a:14:3b:7b:62:0c:ab:7b:08:c4:76:e0:
                    00:d0:cb:14:1b:60:83:82:60:f4:cd:cf:73:c0:e6:
                    6f:66:ab:cc:37:28:f0:b6:28:e4:fb:1c:77:61:73:
                    e7:fb:c5:de:e1:41:05:2d:69:1c:1d:b2:98:9d:07:
                    89:cf:a3:82:25:9f:35:6a:67:a1:8e:85:a8:5d:e0:
                    b8:b4:fc:e8:f3:8c:b0:b3:26:93:ee:e6:b6:8b:49:
                    51:08:a3:9b:af:04:ce:4c:fd:cb:a2:13:8d:9c:88:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:59:7C:42:AB:0E:E4:E2:CF:3D:7D:AE:AF:43:86:74:60:28:D8
            X509v3 Authority Key Identifier:
                keyid:F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:d8:7a:8d:e4:93:ee:7a:06:11:d3:ac:88:97:c2:1c:b2:
         ef:34:43:1c:e1:a8:cf:65:14:b1:72:2e:cb:64:96:8f:68:c6:
         b5:c2:29:fd:73:7f:8d:d0:61:a0:29:8e:6c:2d:43:dd:21:0b:
         ef:75:f2:d8:88:4f:d6:92:05:d0:77:9a:6b:76:11:4d:8f:8e:
         8a:d5:60:f8:a3:f6:2a:a6:50:66:42:94:2e:e2:f0:64:0e:84:
         ea:3e:cc:49:93:b4:5f:dd:b2:6d:a1:78:59:f7:ec:bb:20:4a:
         fa:f0:d9:d8:b5:67:67:45:df:7c:91:25:ae:1f:7e:73:22:87:
         8b:f4:c6:65:61:5e:51:ac:75:0c:8c:02:38:0b:50:e6:03:df:
         66:5e:31:73:dc:fc:0d:ff:3d:ef:42:5a:22:89:57:7c:db:5f:
         2d:c2:7f:88:ed:3c:b3:70:53:c5:e8:81:e9:02:54:3e:93:c5:
         b7:d3:de:90:79:1d:39:e8:80:9a:f3:58:87:39:75:72:25:87:
         9c:0d:55:18:c9:36:69:bb:11:8b:53:01:ee:a2:22:f6:a2:1b:
         8a:88:85:da:0e:f1:53:4b:84:bb:93:56:78:65:8c:ff:a2:17:
         83:f1:e3:d3:01:17:ff:4a:dc:3d:3a:cf:f6:b9:f7:31:f8:90:
         38:6a:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:19:30 2025 by rpki-client