Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          cXQVOQVLRwtKKREFQ1qOJrW+LQagEfOddzdFRDGnIrk=
Subject key identifier:   4B:7A:70:78:FE:95:F5:39:AA:A7:FB:5B:B6:41:6B:13:8F:B5:E4:15
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       029D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          029C
Signing time:             Sat 23 Aug 2025 04:06:47 +0000
Manifest this update:     Sat 23 Aug 2025 04:06:46 +0000
Manifest next update:     Mon 25 Aug 2025 04:06:46 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: gSquNm2kL/n7HcjBTSIsJGmafIFWC5u6JKXwXWUNkmk=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Aug 23 04:06:46 2025 GMT
            Not After : Aug 25 04:06:46 2025 GMT
        Subject: CN=68a93e56-0c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:48:45:80:4b:fe:4d:3d:24:0d:9e:79:9f:
                    a1:e4:31:da:cd:c2:0f:4d:07:6e:c3:72:ae:e6:b7:
                    61:81:6e:dd:60:5d:d2:a1:46:9e:9c:af:2e:37:bd:
                    fd:8c:98:05:3b:95:ac:bb:48:aa:e9:11:b5:aa:37:
                    07:c1:ca:7c:b8:7e:ce:b3:4e:d8:18:2c:3b:47:50:
                    67:ef:04:3f:1c:b1:5d:72:11:52:46:57:28:1f:2c:
                    2d:1b:de:13:57:61:3c:ab:29:ff:8a:01:e6:5d:c1:
                    c6:e4:c8:61:39:9f:98:83:ab:85:67:24:bb:41:2f:
                    0e:1c:51:19:3d:ee:8c:14:b0:49:5c:e5:14:91:be:
                    22:4b:8a:1e:e0:d8:07:1f:14:b1:a1:2f:9f:af:31:
                    88:c1:a9:4b:a3:95:cd:71:8a:bb:6d:da:47:50:f7:
                    80:f7:15:ba:78:ed:25:82:96:ea:ec:e5:14:6b:87:
                    1e:f5:26:24:ad:c4:97:47:d4:c8:1e:0a:30:01:27:
                    4f:e1:23:b6:8c:be:1e:b4:2a:cb:9c:c8:97:d4:80:
                    07:2e:9a:e3:a9:2f:b3:0e:37:5c:7a:91:e7:6b:25:
                    29:d2:d1:34:94:5a:e4:2c:8d:58:ec:b7:33:8d:7b:
                    4d:45:66:57:3d:7e:f8:75:e9:2b:33:30:6b:3a:83:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7A:70:78:FE:95:F5:39:AA:A7:FB:5B:B6:41:6B:13:8F:B5:E4:15
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:57:7b:fd:3f:1e:12:be:86:60:7b:c0:e3:0f:40:49:54:83:
         c1:d7:20:3b:e0:0b:f5:13:c3:41:17:27:de:7c:0c:4f:17:55:
         e4:cc:19:9c:84:22:3c:32:ab:78:c9:4e:e2:ce:d6:3d:ea:19:
         81:09:62:f4:0c:ee:c0:47:b0:d9:cd:84:4e:6f:bf:53:74:86:
         a0:e4:2c:fb:d0:92:b4:42:15:c0:55:7c:3c:15:66:e6:b1:a4:
         62:52:38:87:d4:62:eb:8c:a1:61:0c:93:21:b7:1e:34:ec:48:
         93:d5:70:5c:37:83:a4:74:b5:f5:e8:c9:ab:c4:67:fa:e8:b1:
         5c:d4:4e:24:ea:76:e7:04:76:8e:31:a0:c1:a8:1b:9f:b1:4c:
         7a:2a:78:5e:02:ff:50:16:e9:8a:d7:91:bf:21:d7:b3:f5:8e:
         ae:e0:45:49:63:2c:6f:07:f6:3e:23:de:e8:a4:6d:7f:16:dd:
         5b:d9:46:d8:3f:ae:93:3a:2c:c8:55:72:d2:4e:4d:cf:1c:84:
         d8:79:7c:c0:37:83:f6:d5:17:c0:ba:f9:42:52:90:e2:0c:c8:
         45:30:9f:10:b8:43:d2:72:a5:44:be:12:29:e3:35:1b:a9:3f:
         2b:d4:bb:c8:b4:88:c2:3a:0b:36:8b:6d:c8:2a:9f:b1:8c:f8:
         f1:79:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:31 2025 by rpki-client