Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          h7ltKab527WU1g8ZM54Xqj95M52yKlxv7dB6Eg3Akp8=
Subject key identifier:   16:ED:D9:8D:54:50:97:C4:B0:2E:A8:0E:1C:FE:34:D1:98:24:41:64
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       08DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          08D9
Signing time:             Fri 04 Jul 2025 01:35:17 +0000
Manifest this update:     Fri 04 Jul 2025 01:35:17 +0000
Manifest next update:     Sun 06 Jul 2025 01:35:17 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: BRs74Wc2OUBY3NCD8cIi+bZP0qNMZsRVNyQK+yhPaC4=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF, serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Jul  4 01:35:17 2025 GMT
            Not After : Jul  6 01:35:17 2025 GMT
        Subject: CN=68672fd5-f193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:cf:80:7e:fe:f6:3a:f2:bb:54:8b:3b:b6:
                    82:64:18:b3:6c:6c:c1:b3:fc:7a:56:74:d6:47:4f:
                    ce:d9:ee:b0:9c:d2:04:97:72:af:26:85:b9:78:a1:
                    4a:45:80:a2:77:a2:83:ab:f6:c1:10:c8:5a:7a:7e:
                    ba:a9:12:66:dd:cc:fc:84:b3:c1:de:bf:e3:ba:56:
                    e9:5d:45:cf:35:2f:07:7b:e9:73:02:3b:fe:d6:d5:
                    04:b2:ce:1b:9a:f6:84:f8:2d:d3:b1:69:02:3a:93:
                    f3:da:24:f3:1d:cc:06:ef:2d:67:ad:9b:ef:7c:53:
                    a1:72:ed:fe:d2:59:c2:89:b8:99:55:9a:2c:a7:5f:
                    6b:9a:ec:61:9e:0f:7c:87:d5:6f:9d:6d:8d:4d:2d:
                    95:b8:04:96:81:b6:19:e4:d9:e2:16:6d:c7:10:ab:
                    6a:2a:47:1d:12:da:2f:b4:20:62:4a:2a:ed:ea:3c:
                    97:3a:0d:9b:5e:86:10:2c:91:5b:e1:36:04:de:7c:
                    b7:44:0c:cf:ae:39:d8:40:2b:fc:04:1e:aa:1d:54:
                    c2:bd:35:b8:cd:03:4e:1c:27:25:d5:fb:63:8a:73:
                    5f:c5:38:a3:c1:51:5e:a3:d7:f8:6a:11:25:5a:b0:
                    32:23:2a:6e:a8:52:cd:a9:cc:c7:f9:c5:f5:7a:ef:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:ED:D9:8D:54:50:97:C4:B0:2E:A8:0E:1C:FE:34:D1:98:24:41:64
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:d4:3d:6c:51:18:f6:f1:45:35:c6:1a:25:b9:bd:42:2e:
         69:2b:a9:d2:1d:a5:80:cf:88:4a:87:bd:35:b5:8a:2a:12:12:
         5f:0a:ec:16:a3:b8:10:88:70:7d:14:a1:3f:c1:fe:4f:6d:57:
         7a:8e:0c:2d:02:1c:fd:1c:76:39:d5:90:12:02:fe:18:be:f9:
         ba:cb:69:d1:65:0c:0b:d3:d4:28:2f:9c:14:e1:18:43:57:81:
         34:5f:6b:03:1a:17:0a:fb:f1:84:89:20:28:64:8a:aa:dc:a9:
         a9:3b:fb:51:55:d0:21:ed:92:03:3f:4c:d2:1e:f1:fc:98:96:
         4e:65:c1:bc:60:2b:c6:54:1c:a0:29:b9:12:2c:95:67:4f:98:
         84:eb:a5:6b:33:f4:cf:6a:bf:89:24:f0:3d:30:86:ef:f4:e7:
         3b:bd:9e:8a:84:6d:e3:23:11:d0:4a:35:c1:3f:c1:84:ce:39:
         bc:a0:a5:e5:b4:88:e7:d9:dc:13:07:ce:83:fb:8c:34:9d:99:
         b1:2b:ce:ec:a7:f6:d9:b2:80:1a:4d:d6:6c:f4:40:41:bb:cb:
         8d:dd:2a:86:b4:b2:67:52:d3:72:28:e9:ca:ff:c4:ae:a9:84:
         3c:0d:4d:6c:6e:0c:4b:64:47:85:bb:69:a0:aa:e4:c2:0f:83:
         36:dc:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:21:50 2025 by rpki-client