Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
File:                     0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft (raw, json)
Hash identifier:          HSi/VUNLDaRpRl/YoBPJ+Qq+kpoUr/uhh6wBx/CyfMA=
Subject key identifier:   5C:88:DF:69:81:C7:73:D2:74:E3:21:11:11:C2:8C:62:91:B3:90:A1
Authority key identifier: D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF
Certificate issuer:       /CN=F36B89F3AF/serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
Certificate serial:       03A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
Manifest number:          03A4
Signing time:             Sat 23 Aug 2025 03:31:23 +0000
Manifest this update:     Sat 23 Aug 2025 03:31:22 +0000
Manifest next update:     Mon 25 Aug 2025 03:31:22 +0000
Files and hashes:         1: 0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl (hash: s5Nv+TaYJ3kSV/R4Q4euuKJRhAEZUyvy3BrMhjn593I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B89F3AF, serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
        Validity
            Not Before: Aug 23 03:31:22 2025 GMT
            Not After : Aug 25 03:31:22 2025 GMT
        Subject: CN=68a9360b-45a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:69:c0:79:b8:32:81:21:0b:57:63:54:31:
                    92:b5:8d:f0:f8:2e:d1:5b:71:6b:a4:5a:52:48:64:
                    e9:c2:d9:37:48:be:ab:3f:8a:80:68:66:b5:98:b6:
                    04:5e:87:47:22:14:eb:16:a8:ec:8b:27:5e:23:0b:
                    ce:4b:34:2d:69:64:6e:1e:ee:2d:3b:15:e0:b3:c5:
                    e7:fc:96:36:e7:1b:e4:73:9a:25:97:5e:27:43:1e:
                    6b:3b:62:e7:36:70:08:a2:97:fc:78:2c:de:02:69:
                    6b:d2:42:70:5b:f2:d1:d0:88:62:84:95:ad:9e:a0:
                    4c:90:ab:30:e9:92:33:65:bf:b2:3f:f2:d7:1f:8d:
                    7c:94:15:2e:1f:ac:5c:af:d7:ba:2c:2e:5c:b0:e7:
                    72:fb:b5:46:ae:4b:66:f3:bb:75:8d:87:4d:62:ea:
                    81:16:a0:93:58:1d:54:49:ad:1c:cf:f3:e9:96:2b:
                    e8:b5:a0:83:d8:8f:f6:dd:d9:58:61:d6:bf:f3:a6:
                    94:5a:b4:6b:9d:39:fc:04:b6:ab:cd:aa:8d:0a:b1:
                    06:56:be:57:b7:50:42:5d:a5:f6:dc:f9:d4:ce:4a:
                    a0:15:a3:e1:bc:b6:7c:82:bc:d2:d9:b6:a5:51:22:
                    ac:64:bc:91:1d:16:71:68:2e:c6:47:e1:39:f6:61:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:88:DF:69:81:C7:73:D2:74:E3:21:11:11:C2:8C:62:91:B3:90:A1
            X509v3 Authority Key Identifier:
                keyid:D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c2:d4:e5:ed:a1:bc:1f:4c:1b:aa:c8:86:31:05:6a:4a:4a:
         e3:0b:e1:9c:75:66:67:14:f9:70:70:ec:a9:2b:77:d4:e8:f0:
         32:00:3e:95:03:5a:ff:9d:0b:a6:b5:72:3c:01:5e:97:59:f0:
         30:66:67:08:27:58:b3:47:3b:4a:04:fe:3e:be:4b:a5:2b:0b:
         75:42:4e:c4:89:a0:7d:2e:c2:10:34:9e:db:a8:df:02:5f:6b:
         1e:0f:fa:f2:1b:70:f2:d0:3c:35:bf:74:15:da:80:73:5e:a3:
         c0:8e:f2:c1:23:49:96:95:76:f0:b2:1c:fd:e4:b7:60:68:9b:
         81:86:8d:80:f5:61:72:be:e6:ae:fd:89:e8:5b:a8:fb:5d:9c:
         25:02:22:af:7d:a0:a3:b8:4e:12:fd:35:fd:56:b3:93:fd:02:
         af:e6:6d:43:ef:d9:b0:27:50:60:24:f5:5b:8f:eb:e9:9f:02:
         4b:dc:1d:62:ce:ce:06:ec:2d:d8:77:8e:30:3e:2c:f2:5f:96:
         bd:ca:c3:5f:da:19:bb:ff:d3:6c:04:f5:b2:5a:54:cb:1b:36:
         87:29:42:6b:85:6d:32:5c:0c:15:95:bc:f7:20:72:c1:d3:d4:
         9a:2e:0d:a3:55:a7:a3:77:cf:75:f2:f9:2a:50:f7:27:ad:d7:
         59:5e:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:10 2025 by rpki-client