Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
File:                     wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft (raw, json)
Hash identifier:          dXXwlNQgMlztZX8HSEfW6FS6FqcGKEaD1r9TslhGRhc=
Subject key identifier:   C7:CD:F7:95:F9:30:02:F5:70:9F:18:28:C6:D5:10:B7:BE:73:9E:28
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       0397
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
Manifest number:          0382
Signing time:             Thu 03 Jul 2025 03:34:15 +0000
Manifest this update:     Thu 03 Jul 2025 03:34:14 +0000
Manifest next update:     Sat 05 Jul 2025 03:34:14 +0000
Files and hashes:         1: wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl (hash: NQ6o/797aHrtsawScUhwkpM+oOt+TcguFrrCk8wl5lw=)
                          2: B6E64FA46D8E11EEBD3D23814AD9E6FC.roa (hash: wHxuyQF4+uvgcTMqcLwiE3OPhD9sKRldqLMBbm9GZAk=)
                          3: 755C3946726011EE93489E6F4AD9E6FC.roa (hash: I/IXDJdydOXsHxPlVBdH54iLozFOHgSirildHRHX6us=)
                          4: 1FE2B490676B11EE89F68D6C4AD9E6FC.roa (hash: VkyUxkKXn7LwkNtssSbTSgdVTqQDeGhmPVIGCEo/UYw=)
                          5: 1FAC5C58642B11EEB88178264AD9E6FC.roa (hash: ue0lR9LPzTbHOKn7vlKdSh3YCZxWA6gtEHdH+8CALYY=)
                          6: 126EAE268F4E11EEAECC1E62D25BE465.roa (hash: RVoLCOu04kDM3ma5697yf0ycFSMBgw51El1f03RGHNo=)
                          7: 0E14878A676F11EEA3B081784AD9E6FC.roa (hash: ilcPf1Q17dtn++BbRqyZZTuMiIFeb1JyNCjewhQwPU4=)
                          8: 32C8A6C66D9411EEBBCFC1144AD9E6FC.roa (hash: 2OF/T6bI2e1KDH7oQ4Ng7a72JfGOZwUFWH9xARUOcWY=)
                          9: 21D354BA576211F098BCD5A6DAE4EC9C.roa (hash: 4xF4q1aGLDqPWO/lN87jtt4mzGDncXf1cKquoSVh8Jo=)
                          10: 996CFC786D9011EEB96C32874AD9E6FC.roa (hash: x0DJySpGUWaPqSlP65+H7jaIDC8V3UYDd/FdjU9E7rA=)
                          11: B1B22C14798311EEA5C954334AD9E6FC.roa (hash: Pe3W5d67FeDOdg0O6CjHDs+dvLUaa9BBxTbqB+4ADZM=)
                          12: 64F50FBC740C11EE99EADC474AD9E6FC.roa (hash: W0IpuC6GX4xRD5RgHmpflT28ws+r3XoBXlaHP+TeZBA=)
                          13: ADCC819C6F1C11EEA6EDF2894AD9E6FC.roa (hash: 0EsFQL/056qkK52lVV1RuJFjZ4sGqQwRLakj5+kuntc=)
                          14: F1B3C332579811F08809BD82DAE4EC9C.roa (hash: 34+O2mrUM01X+B/xWivHb8LcGgu1r8wb5reXkKNuSWU=)
                          15: 0908078845A711EEAB5673554AD9E6FC.roa (hash: tqO3uk+osFvKeD1dMRNKDu46qC2fHNV6k3SbxzfnOnA=)
                          16: C2C1572A575B11F09F7D4F7FDAE4EC9C.roa (hash: oT7LXoUtdT1Oeg52MZHLEf/CMeovLLw6njnrby9Y2rA=)
                          17: C91D0582676C11EE817092714AD9E6FC.roa (hash: n7bFFRK6/BBB0upK0yKjNtW7e2v1lvPct030rOjwGHg=)
                          18: 505CFBCA6E4C11EEA61CB55E4AD9E6FC.roa (hash: haaJ8RNEFPNeNXKfBocGoCPP48/FPRgVDNeOKZS8HPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Jul  3 03:34:14 2025 GMT
            Not After : Jul  5 03:34:14 2025 GMT
        Subject: CN=6865fa37-38fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:5f:28:3e:ef:9e:17:f9:ff:41:db:7a:35:
                    1b:17:bf:2c:ff:71:83:4f:ea:8d:33:ec:c7:6d:0b:
                    e3:69:b8:73:84:fe:e0:b6:c4:58:54:19:18:75:da:
                    86:f0:df:d8:d8:ab:e7:b5:83:ef:3e:74:9e:91:f0:
                    50:a5:7f:6e:18:69:09:66:0b:1b:02:04:11:04:25:
                    7c:40:fa:95:c0:45:a6:76:d4:d0:ca:4d:29:4e:e9:
                    22:ce:86:76:48:a2:b0:9f:6a:2e:1a:66:44:eb:81:
                    b4:30:68:dc:53:d2:cb:07:f2:8e:01:c1:14:98:87:
                    db:0f:79:f6:10:17:e2:63:6a:fa:bb:98:09:ac:cc:
                    c8:67:05:8e:1e:50:cf:74:17:79:6c:89:96:6d:11:
                    d0:93:0f:32:2a:35:bf:e0:53:7a:d5:72:29:c0:1b:
                    15:03:a1:99:f7:b8:02:e8:33:94:bd:4f:1e:24:d5:
                    88:12:84:15:4c:11:87:e9:9c:f1:1e:3b:d3:fc:4d:
                    31:77:7b:f6:5a:4b:a3:a8:c7:11:e8:92:33:92:3d:
                    f6:27:eb:7e:6f:12:e6:8d:1b:01:ee:6d:08:14:f8:
                    2e:b0:59:d4:05:7a:47:4c:d1:c2:22:5a:3d:52:48:
                    86:3c:f9:30:f1:e1:0f:52:78:5a:de:71:c1:f3:bc:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CD:F7:95:F9:30:02:F5:70:9F:18:28:C6:D5:10:B7:BE:73:9E:28
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:f1:19:07:72:9b:99:7a:71:80:9f:a3:f9:6c:07:f8:d7:
         8f:ac:22:55:7e:67:17:8b:44:67:d7:66:46:24:c2:4f:2b:23:
         16:21:85:92:ba:d6:1a:f1:41:74:6f:1a:06:4b:c7:74:bc:6d:
         26:77:49:a3:70:0e:8a:74:30:77:a9:78:cd:c7:04:b0:6a:a7:
         b2:70:5b:d1:2e:f1:7b:dd:22:06:40:e7:27:b1:70:e0:e8:db:
         1b:8c:de:87:a9:35:29:5b:38:2b:fc:1c:5b:26:4a:6c:37:d3:
         78:1d:37:ee:cd:05:8a:9c:d2:eb:b4:78:9e:af:19:c4:54:11:
         bc:ec:5d:fd:dc:3a:fd:ce:8b:6e:8d:cf:51:a0:f1:27:82:83:
         00:f2:81:dc:45:7f:6f:05:d8:80:a0:ec:c0:0c:70:72:30:9c:
         55:52:10:c7:ed:7c:de:04:07:91:12:6e:38:42:54:80:22:19:
         c1:e3:61:8b:b6:83:f8:2f:83:30:9c:7e:c9:c3:65:8e:ed:c4:
         2b:4d:80:61:f3:7c:ff:cc:bb:01:2f:2f:2f:c5:22:ff:81:ce:
         ba:75:c4:5b:61:4d:4f:10:d2:79:d3:16:74:64:f6:08:a0:3c:
         fa:63:07:bf:32:50:7d:1c:5a:91:51:8b:e1:44:73:f4:96:08:
         56:db:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:03:17 2025 by rpki-client