Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          g907Zc+Qij9ba3iU0huhvrFAwby2e6bPLldh3n9yYGk=
Subject key identifier:   25:FC:E5:A6:C4:C9:8C:B9:F5:D2:54:E7:71:CC:66:AB:DF:EB:6B:18
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       0470
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          0469
Signing time:             Sat 23 Aug 2025 03:08:00 +0000
Manifest this update:     Sat 23 Aug 2025 03:07:59 +0000
Manifest next update:     Mon 25 Aug 2025 03:07:59 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: RQVzCo/Ln9TrHVa9SboddAOjwaC/mYVK3W1F9ABQblA=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Aug 23 03:07:59 2025 GMT
            Not After : Aug 25 03:07:59 2025 GMT
        Subject: CN=68a9308f-a4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:68:e9:57:5e:71:78:b5:a7:9d:3b:6f:57:
                    3f:19:6a:94:00:8a:00:8c:06:b2:a7:18:6d:e0:55:
                    56:5d:6c:30:d0:90:e5:83:8c:99:55:43:29:74:49:
                    5d:45:ad:64:14:81:8d:18:2b:91:62:1c:8e:12:15:
                    ce:71:d9:10:00:f1:d2:73:f0:b3:41:cb:a6:32:b3:
                    90:c0:82:49:97:e6:0f:ff:19:b0:db:f3:4c:00:8e:
                    1e:9b:2c:9a:1f:67:d7:7f:68:54:52:9e:05:aa:4f:
                    bb:9c:78:23:6c:07:99:ae:7e:8f:5c:a7:22:38:8e:
                    37:78:ae:16:a4:74:31:eb:fb:15:b2:87:64:1c:3c:
                    31:89:92:e6:1b:02:b0:cd:68:93:80:2e:b4:04:40:
                    52:6b:68:75:5f:44:0c:f2:33:95:95:28:eb:12:57:
                    bc:f4:09:aa:01:b4:0b:c6:c8:5a:a8:9a:90:78:8a:
                    56:10:83:d9:a5:c5:e4:cc:de:9c:89:45:74:6b:2d:
                    13:8d:fe:60:13:3c:77:49:4f:f6:b7:de:49:89:67:
                    70:0e:f5:3e:64:20:4b:73:41:a4:9d:54:bd:b6:af:
                    07:d1:03:6d:47:b1:35:7d:a5:3d:23:11:0f:d9:5b:
                    03:4a:16:a9:13:48:8f:34:8d:5d:73:2e:16:15:5d:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:E5:A6:C4:C9:8C:B9:F5:D2:54:E7:71:CC:66:AB:DF:EB:6B:18
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:99:4b:0c:8e:ce:05:cf:fb:de:4e:50:01:79:5f:bd:15:8a:
         e9:b0:47:89:ed:b2:a8:81:15:ca:ad:a8:ad:7c:16:ff:80:59:
         f5:ce:eb:18:7f:64:f0:9f:fd:10:72:9e:bc:9b:f1:d4:18:2f:
         be:97:59:6a:cc:c2:d2:b9:af:db:33:2b:4b:34:c7:d0:a7:b2:
         77:82:6e:3a:68:d8:c2:34:87:d8:a6:9d:61:64:fd:54:6d:b1:
         ca:65:31:8c:bf:55:12:b7:91:4d:b6:8a:36:66:1c:3a:23:1b:
         d6:54:2d:40:60:4c:c9:bd:68:b6:a5:c9:c9:dd:a8:4e:05:87:
         30:99:c0:44:4a:d0:38:df:8e:f5:55:0b:70:5b:3b:08:b0:61:
         0d:1f:f5:fa:3b:2f:3b:1e:6b:8d:68:d7:f5:12:18:c1:0c:ec:
         5c:c4:3e:48:ee:43:19:42:f6:52:37:9e:f4:35:e2:99:7b:29:
         5d:21:7c:27:04:7d:09:6a:e1:5e:cd:96:42:0c:29:8c:81:3e:
         88:1e:ef:01:be:ee:4d:3c:83:90:ff:6a:7c:6c:fb:dd:5e:ea:
         93:c6:5d:68:31:73:31:de:40:8c:e7:34:37:92:ca:1b:da:85:
         b5:c8:41:3c:6e:b1:b9:81:44:ec:da:70:d6:fe:28:2e:31:b9:
         1e:c9:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:31 2025 by rpki-client