Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File:                     8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier:          nQDq642YBc9xTaCLj8bjodrIZU2s9IUJMS7RmILAXKs=
Subject key identifier:   5C:29:1E:0C:DF:F1:0F:D8:5D:EA:2C:8B:FA:87:01:3C:DB:17:12:34
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer:       /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial:       0145
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number:          0144
Signing time:             Sat 23 Aug 2025 04:56:19 +0000
Manifest this update:     Sat 23 Aug 2025 04:56:19 +0000
Manifest next update:     Mon 25 Aug 2025 04:56:18 +0000
Files and hashes:         1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: 5nYlOubZBrFRcGU0LRzDe0KiuBsQR6L7HPCH4TYumR4=)
                          2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CD07AF, serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
        Validity
            Not Before: Aug 23 04:56:19 2025 GMT
            Not After : Aug 25 04:56:18 2025 GMT
        Subject: CN=68a949f3-7c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:1f:25:77:01:b3:6a:21:9b:52:66:cc:58:
                    5b:0f:d1:ce:06:b2:41:e4:a3:30:7e:2e:27:72:14:
                    10:c2:7f:e4:a1:ca:91:62:25:a4:f5:c7:28:cc:f7:
                    46:fb:ab:94:64:a3:a4:25:7f:ba:69:60:59:7f:52:
                    08:07:da:48:5d:5f:c1:b2:57:56:01:08:cf:f2:e9:
                    b9:b1:ed:4b:6d:88:03:ea:85:94:0e:c9:31:0a:db:
                    71:5a:6d:96:d1:37:90:cf:65:6e:ae:7c:62:46:df:
                    47:1e:26:6b:98:42:96:ae:d4:e4:cf:69:6e:ff:5f:
                    e4:29:65:ee:0a:d6:4a:5e:da:f9:2c:a4:cd:20:42:
                    e9:0b:91:b0:c6:66:44:cc:a8:f7:4c:d2:34:eb:96:
                    90:66:aa:7f:00:86:38:99:f9:67:b0:48:be:c6:32:
                    e2:5c:ef:3a:79:e7:d6:60:6b:2e:16:f6:cc:b4:51:
                    00:36:56:20:25:97:bf:7f:82:98:44:50:9c:a4:44:
                    ba:5b:38:0f:0b:8d:78:40:13:e5:21:33:6b:88:c7:
                    9a:c2:41:9e:f9:0e:83:9f:37:5e:13:13:b5:40:c6:
                    8a:54:53:6f:2b:65:0f:fd:5d:6f:fb:84:1d:46:5a:
                    7e:9c:3a:7c:5b:fc:2a:2b:53:8b:83:50:99:bb:18:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:29:1E:0C:DF:F1:0F:D8:5D:EA:2C:8B:FA:87:01:3C:DB:17:12:34
            X509v3 Authority Key Identifier:
                keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:20:1b:f0:5c:88:76:4f:4d:6d:af:67:f2:80:c7:bb:e2:69:
         4c:d5:a4:5c:d5:70:45:9d:ec:f9:48:eb:3b:ae:74:39:cf:5d:
         57:2b:c3:c3:ea:69:14:ef:99:c4:14:c0:98:35:df:8f:ea:f3:
         12:e0:99:a6:9d:0d:6d:aa:b2:1d:29:a3:3d:03:c1:8b:ba:33:
         f3:7f:2b:09:f2:67:66:8d:c3:53:52:0a:eb:a8:9f:82:38:31:
         7e:49:6d:a3:a0:5d:f2:85:51:ee:e4:03:30:fb:b1:81:b1:49:
         7f:28:54:bc:70:47:f5:12:b2:72:b5:d8:f2:4c:20:0d:f9:bb:
         45:a6:29:27:91:9f:43:86:68:11:e6:d3:f1:04:33:4b:d6:2a:
         68:87:03:7a:1b:ea:77:5b:61:a8:32:43:0e:1f:65:6c:f1:49:
         fc:3c:a3:ca:e5:01:21:ed:8d:58:f6:fd:18:25:94:64:ea:9f:
         e9:9f:30:ae:78:07:2a:ba:26:75:59:19:0e:e0:25:50:f2:c1:
         0b:52:3a:00:2f:31:c4:be:63:6b:1a:b7:a9:ed:d8:b5:bb:34:
         a0:bc:32:36:b9:d5:47:bf:7e:5c:30:13:b0:c9:8c:d2:72:70:
         85:5d:50:61:3d:14:ed:b2:fa:d3:86:f7:5c:e8:18:b2:1e:4b:
         7f:85:40:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:17 2025 by rpki-client