Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
File:                     xk60GwPUwTMps2P1p5PyzZy0LLc.mft (raw, json)
Hash identifier:          jE3/0YQryID/RGKQUe1CM4s/64W9LqEk8PueYam3uUk=
Subject key identifier:   57:06:32:8B:F7:CD:0C:4E:1B:E4:A7:11:A8:15:1E:22:B8:F3:EB:F6
Authority key identifier: C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
Certificate issuer:       /CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Certificate serial:       0659
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
Manifest number:          0656
Signing time:             Sat 23 Aug 2025 02:14:11 +0000
Manifest this update:     Sat 23 Aug 2025 02:14:11 +0000
Manifest next update:     Mon 25 Aug 2025 02:14:11 +0000
Files and hashes:         1: xk60GwPUwTMps2P1p5PyzZy0LLc.crl (hash: 5C7Rw9X86D4W6q8oLqXL9uG3cbYICFNDzq/7sntP2p0=)
                          2: 4FDC1DC2F14D11EFBAC0E3A0762E951A.roa (hash: dOKqRkTfN9jocpe+O0SITKXIanbXliNmUMx3esYzAi8=)
                          3: 87E50DA6AA2B11EE9A64EA6D775412E6.roa (hash: XpYMXNR2CG5z3pCw7sOpke9QbTyJBxDxE9SukOPOH8g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5804AF, serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
        Validity
            Not Before: Aug 23 02:14:11 2025 GMT
            Not After : Aug 25 02:14:11 2025 GMT
        Subject: CN=68a923f3-5d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:e3:29:8b:53:fd:77:ed:f2:6b:6e:28:16:
                    bb:b0:47:36:d6:7a:c4:5e:88:d7:24:48:f2:a3:6f:
                    e4:28:c1:54:b1:62:ef:24:c2:6f:92:e1:3a:0b:ad:
                    8b:2e:9b:df:61:11:0c:93:e0:86:2f:e5:c2:16:77:
                    9b:96:ed:7a:71:6c:7e:c1:2e:95:b0:47:db:0e:14:
                    c4:79:68:57:13:a2:1a:6b:3b:bb:af:50:d8:b0:0e:
                    97:c1:78:14:c6:91:b7:d8:da:59:78:52:a3:bf:0f:
                    87:fd:67:7f:e7:47:7c:7d:44:dd:dc:7c:b2:11:de:
                    10:37:76:5e:b9:e5:79:71:15:26:a7:0f:b2:7a:3e:
                    15:3a:da:64:02:58:e7:4a:92:5b:5f:84:9a:f2:50:
                    22:f4:8c:ff:4f:58:00:58:04:ec:09:8a:9c:e5:96:
                    a8:3e:8f:86:ef:98:03:1f:8d:3c:71:bc:2f:90:44:
                    e8:a4:ed:c7:0e:00:83:ec:9f:66:60:2f:58:7f:6b:
                    83:db:f2:6c:87:2f:3d:10:cb:d5:8e:b3:c1:3f:29:
                    16:0b:59:67:77:c0:8e:68:7d:01:d4:f7:af:46:c8:
                    9b:4f:bb:39:9f:b5:ec:36:a4:29:99:53:14:fe:04:
                    e3:45:45:b5:1b:62:06:f7:ce:ff:3b:55:1b:fb:52:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:32:8B:F7:CD:0C:4E:1B:E4:A7:11:A8:15:1E:22:B8:F3:EB:F6
            X509v3 Authority Key Identifier:
                keyid:C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:5f:fc:27:45:e8:f2:1b:23:6d:10:78:8b:86:ac:96:76:
         3f:94:57:4c:a7:a2:f2:21:7b:cb:43:ee:9a:a0:ab:2a:8c:9a:
         35:e6:34:95:2a:65:97:76:94:df:0e:0a:5a:56:9d:f2:5d:c7:
         d2:76:ba:18:c1:b7:94:43:56:cd:de:5c:2c:b5:57:06:03:62:
         48:d3:e5:1c:2e:13:44:53:13:16:5c:ce:1e:e9:e9:39:b2:37:
         08:8c:d4:6d:10:2a:2c:cf:97:81:11:f4:05:7b:b5:f3:a8:cf:
         0c:86:38:41:06:85:f6:02:3f:f7:03:8d:5f:03:00:44:5b:43:
         8b:4d:41:78:c1:2c:1b:0a:2b:9b:47:e3:1d:cd:13:8c:06:57:
         1b:ec:89:54:e8:fa:b1:a9:9d:e8:e1:94:c8:4a:c6:59:87:36:
         71:02:22:ce:42:1e:91:7e:fe:64:c3:ac:e2:e4:46:71:f3:5d:
         6c:23:9a:1c:e6:1f:fb:de:f0:d0:9d:78:eb:18:ff:e2:9e:ec:
         44:26:12:a5:7f:7f:10:d3:f6:91:b0:cf:b2:98:e3:1b:20:11:
         a1:fc:b8:d4:a7:cc:e5:c9:21:49:2d:0f:6a:f7:02:98:f1:cb:
         3c:5c:29:74:e4:37:89:c3:98:4b:fe:d3:85:d2:39:5f:d6:b1:
         ba:f0:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:18 2025 by rpki-client