Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          snFbNWAJfdjdltuXpzRkUEZbXCEiyf/eaj22fmwB57M=
Subject key identifier:   4B:6D:D5:FC:99:2F:BB:4B:63:28:06:BC:A7:E9:28:E9:F8:33:9F:A5
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       016F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          016D
Signing time:             Sat 23 Aug 2025 04:48:53 +0000
Manifest this update:     Sat 23 Aug 2025 04:48:52 +0000
Manifest next update:     Mon 25 Aug 2025 04:48:52 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: 0OMp4KNvmjJ42hBM/Q5zzPwyhj13maHNPePu6NT7zFs=)
                          2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
        Validity
            Not Before: Aug 23 04:48:52 2025 GMT
            Not After : Aug 25 04:48:52 2025 GMT
        Subject: CN=68a94835-4adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:60:4e:3f:7a:04:b4:c4:17:2b:8e:51:8e:d6:
                    69:57:bc:6e:03:12:d7:a5:f4:fa:07:1e:24:f5:1f:
                    95:1b:2a:57:ba:60:c2:ab:aa:06:a6:a7:b5:39:5c:
                    86:d7:c9:37:28:08:65:2a:35:2c:2f:77:cd:09:c3:
                    0e:83:19:06:70:70:86:78:15:a9:4e:1e:f1:39:26:
                    aa:fe:20:88:52:4d:06:b3:17:b0:20:5e:9d:68:12:
                    f7:dd:64:f9:38:5e:07:16:3d:b3:37:57:a5:a4:c1:
                    1b:58:e2:ec:07:9f:d0:8c:06:63:e4:5a:44:1d:7a:
                    89:02:2f:df:73:7c:bc:ab:ba:44:a5:fd:81:f4:33:
                    41:f3:18:26:97:fe:2f:1c:3c:23:37:3b:98:f0:9d:
                    bf:78:11:8a:75:b1:f0:fe:bb:c1:7e:55:4b:f4:38:
                    b2:a3:77:ae:93:ac:a7:ef:7f:56:10:d6:dc:2d:cf:
                    c9:17:3d:8e:85:f1:b9:c4:eb:81:d8:e4:b7:6c:b1:
                    e1:2a:cb:3d:2e:9e:ee:ec:58:5e:4f:c2:8b:4e:79:
                    c5:e3:2b:32:dc:76:33:33:21:1d:06:75:4a:e8:f4:
                    2e:86:81:65:fa:3a:6a:85:e4:cd:24:90:cc:5b:05:
                    c6:6b:0a:22:e1:fd:b7:b6:d2:96:9b:7a:e0:b9:6e:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:D5:FC:99:2F:BB:4B:63:28:06:BC:A7:E9:28:E9:F8:33:9F:A5
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:04:32:10:ad:77:e5:3f:92:c9:8e:0e:67:29:98:c8:15:
         9a:80:03:86:96:84:47:44:fe:51:04:5d:9f:6e:09:28:15:83:
         dd:2d:69:8e:88:11:60:cb:9f:99:4f:a5:bc:17:e2:78:26:a4:
         3f:a4:4a:2c:92:77:6c:c6:16:83:ea:41:ab:72:94:f4:29:f9:
         32:fc:aa:75:64:d6:a2:db:b2:9c:f9:f5:74:30:0f:30:9f:39:
         b5:10:38:5c:3e:b4:89:9e:94:94:22:43:b1:b6:e4:b9:24:fc:
         bd:03:ea:e9:f8:d2:9f:7a:8c:70:7a:b8:04:42:9a:51:96:bc:
         46:f5:6a:75:1c:58:41:52:e5:db:60:c7:f5:79:f2:33:2d:eb:
         e8:47:f0:1e:17:98:23:72:7e:3a:20:5a:4a:a9:09:4b:ee:c2:
         9a:f6:31:91:df:d2:5e:67:dd:9f:1d:7c:15:48:8d:1e:53:9a:
         e7:28:dc:00:4c:64:13:4e:8f:b4:14:ec:8d:c9:c1:01:40:ef:
         28:48:9c:a0:11:4e:2a:2c:ff:b3:03:c0:79:9b:1d:e2:31:e8:
         84:36:4e:27:3a:28:43:bf:93:2c:86:05:47:1f:ee:f3:95:5b:
         d0:2e:5e:e1:38:1c:68:2e:13:dd:ca:13:5b:23:b5:1a:27:9c:
         d6:fe:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:44 2025 by rpki-client