Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          mSLynu//ze78av6XS2x/REr92Z2Thw8nqvux/lul28o=
Subject key identifier:   91:A0:11:B0:6B:38:03:1F:0D:29:EA:13:48:38:3B:6D:E1:D8:CF:C7
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       090C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          090B
Signing time:             Sat 23 Aug 2025 01:34:18 +0000
Manifest this update:     Sat 23 Aug 2025 01:34:17 +0000
Manifest next update:     Mon 25 Aug 2025 01:34:17 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: AqKnxpn8iX2Rllq8LvQMwuckbiIXOxQ/5tN7MSMTiEI=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF, serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Aug 23 01:34:17 2025 GMT
            Not After : Aug 25 01:34:17 2025 GMT
        Subject: CN=68a91a9a-f3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:a6:1a:1c:21:91:73:68:75:46:c7:aa:63:
                    4e:7f:5b:52:1e:dc:2f:a5:9f:3f:9b:ae:37:98:e1:
                    b3:d5:15:2c:9f:ad:0f:c3:a5:02:6d:a1:6c:57:d7:
                    45:0e:ff:c9:df:e0:e5:6c:35:c3:03:93:be:f3:85:
                    35:bc:10:6a:77:af:53:f0:2b:e9:ee:68:1f:aa:1c:
                    5e:a4:f0:46:a6:f4:9b:3f:74:16:7a:6e:cf:ee:59:
                    f0:cf:b8:c3:b9:f3:99:d6:e2:6d:a8:48:d1:47:93:
                    69:c0:a4:94:e0:aa:3b:1c:3d:f9:97:03:a9:f4:a7:
                    40:10:35:e6:2f:ee:6b:ef:d7:f0:41:56:7c:f7:56:
                    8c:67:76:91:f1:2a:61:a9:69:b7:f8:a1:42:97:44:
                    d2:27:48:2d:c9:d7:70:51:fa:74:2e:e7:7b:e0:af:
                    40:bf:fe:0d:79:38:c0:a0:04:53:61:9d:86:8d:d1:
                    87:32:dd:d2:2a:37:7b:19:b8:5d:e2:3d:16:d7:75:
                    83:4c:c9:03:de:39:6e:23:03:c2:67:a1:b4:e6:74:
                    1b:77:f3:39:b1:3a:9a:24:14:62:2a:46:97:fa:26:
                    c2:7e:d2:65:0f:e2:29:fc:ba:3a:c4:c5:59:d2:38:
                    21:d4:07:ac:b6:53:a6:89:eb:30:5e:39:78:88:ef:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A0:11:B0:6B:38:03:1F:0D:29:EA:13:48:38:3B:6D:E1:D8:CF:C7
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:e7:09:f7:67:36:43:e3:ee:9e:d6:73:c0:8e:a1:59:99:
         50:70:69:c6:ad:54:b5:b6:bb:2e:3e:2f:78:79:b5:d5:38:b3:
         19:6b:9a:ce:a4:33:29:67:bc:51:04:cb:80:be:ee:b0:82:0c:
         77:59:79:b3:e5:12:67:99:9b:09:d6:36:73:b4:a9:b9:16:6c:
         55:9c:c0:6a:a1:6c:81:a3:85:a7:32:58:58:5a:96:a2:af:db:
         25:eb:35:d1:37:f6:57:59:7b:5e:2b:e6:22:27:e5:92:79:77:
         ee:0b:b7:44:b4:b1:6a:38:87:90:6e:e8:c6:5c:eb:3c:3a:66:
         f8:3a:cc:86:95:87:f2:91:5d:6b:ef:42:fa:6c:99:5a:30:07:
         12:1d:bd:65:92:d0:75:17:9d:16:62:d0:26:1d:b3:24:b6:b8:
         c5:a1:d8:5f:ce:ae:29:0c:eb:85:af:d4:94:76:f7:ab:e4:dc:
         c3:4c:f7:8e:a6:dc:b0:cb:a5:19:df:40:fc:87:3e:3a:a9:58:
         42:c3:9e:fd:46:ac:e5:ed:ae:f1:a9:5a:ce:eb:4e:10:29:d2:
         b6:aa:6f:c3:ea:8e:a3:f0:d0:20:6e:9f:8e:14:20:af:3f:dc:
         c2:75:fb:cd:fd:f2:d6:cf:64:17:87:6f:34:3c:a8:46:e2:ca:
         43:84:f4:d1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlFQzVBRjExMC8GA1UEBRMoOTk2QkU0MzdDMUJGMEVBODBGQzJENzRGRTc5NUQ1
OTdERDdDREZGNjAeFw0yNTA4MjMwMTM0MTdaFw0yNTA4MjUwMTM0MTdaMBgxFjAU
BgNVBAMTDTY4YTkxYTlhLWYzYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmsKYaHCGRc2h1RseqY05/W1Ie3C+lnz+brjeY4bPVFSyfrQ/DpQJtoWxX
10UO/8nf4OVsNcMDk77zhTW8EGp3r1PwK+nuaB+qHF6k8Eam9Js/dBZ6bs/uWfDP
uMO585nW4m2oSNFHk2nApJTgqjscPfmXA6n0p0AQNeYv7mvv1/BBVnz3VoxndpHx
KmGpabf4oUKXRNInSC3J13BR+nQu53vgr0C//g15OMCgBFNhnYaN0Ycy3dIqN3sZ
uF3iPRbXdYNMyQPeOW4jA8JnobTmdBt38zmxOpokFGIqRpf6JsJ+0mUP4in8ujrE
xVnSOCHUB6y2U6aJ6zBeOXiI7xE9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkaAR
sGs4Ax8NKeoTSDg7beHYz8cwHwYDVR0jBBgwFoAUmWvkN8G/DqgPwtdP55XVl918
3/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5RUM1L0QwMzExQ0UwOTJBQjExRTlCMDI4QzgwQkY4QUVBMjI4L21XdmtO
OEdfRHFnUHd0ZFA1NVhWbDkxODNfWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21XdmtOOEdfRHFnUHd0ZFA1NVhWbDkxODNfWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjlFQzUvRDAzMTFDRTA5MkFCMTFFOUIwMjhDODBCRjhB
RUEyMjgvbVd2a044R19EcWdQd3RkUDU1WFZsOTE4M19ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqb+cJ92c2Q+PuntZzwI6hWZlQcGnG
rVS1trsuPi94ebXVOLMZa5rOpDMpZ7xRBMuAvu6wggx3WXmz5RJnmZsJ1jZztKm5
FmxVnMBqoWyBo4WnMlhYWpair9sl6zXRN/ZXWXteK+YiJ+WSeXfuC7dEtLFqOIeQ
bujGXOs8Omb4OsyGlYfykV1r70L6bJlaMAcSHb1lktB1F50WYtAmHbMktrjFodhf
zq4pDOuFr9SUdver5NzDTPeOptywy6UZ30D8hz46qVhCw579Rqzl7a7xqVrO604Q
KdK2qm/D6o6j8NAgbp+OFCCvP9zCdfvN/fLWz2QXh280PKhG4spDhPTR
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:39:26 2025 by rpki-client