Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
File:                     eSy8N9dE2IS2DsRH6irH5M2yLX0.mft (raw, json)
Hash identifier:          aIJ+XdXdQwQwZnWx+Ps7enQjYJrfaFF9K6GYgG0MrN8=
Subject key identifier:   75:E5:69:55:4B:5D:63:CB:F5:77:72:5A:E2:13:D4:31:4F:B9:6D:F1
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Certificate issuer:       /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial:       0526
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
Manifest number:          0523
Signing time:             Sat 23 Aug 2025 02:47:50 +0000
Manifest this update:     Sat 23 Aug 2025 02:47:49 +0000
Manifest next update:     Mon 25 Aug 2025 02:47:49 +0000
Files and hashes:         1: eSy8N9dE2IS2DsRH6irH5M2yLX0.crl (hash: zDsSjbprLK9Zt7W9BZHqUM3TjA6XUephH5pFefEUkRQ=)
                          2: 5EB5E646D39211ED825065A9F1222468.roa (hash: ZAIRQP9yJ1tOCU5JQaOiSQZlgWyUtcOGOqQGSm6r4Qc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBC36AF, serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
        Validity
            Not Before: Aug 23 02:47:49 2025 GMT
            Not After : Aug 25 02:47:49 2025 GMT
        Subject: CN=68a92bd6-ba5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:22:67:49:c3:21:a1:fa:d4:72:6d:b5:cc:
                    87:68:1a:f7:6c:bb:40:2b:84:6e:c2:e1:e7:a7:dd:
                    49:ee:60:dc:25:9d:1a:ad:57:a3:b2:10:bb:79:20:
                    d2:d6:cf:b4:3f:12:eb:c4:44:0a:bf:c7:f7:d2:8f:
                    2a:6b:e9:a9:75:0a:aa:13:a1:c0:d7:a2:cc:2e:16:
                    a4:3b:7a:0c:31:e0:3c:f6:ea:50:8b:82:73:6a:d1:
                    1f:96:cd:16:b5:6c:44:d5:aa:df:24:3b:0c:30:09:
                    f5:34:d0:76:18:43:bc:20:53:3b:50:f8:96:ef:a6:
                    7f:ae:6b:d7:22:27:84:51:b3:04:06:39:ad:d9:6d:
                    27:77:9e:99:ff:5b:61:8a:a0:51:f5:57:dd:19:69:
                    d4:dc:a2:05:a9:12:3a:a9:d9:e3:b6:a1:d4:8a:f2:
                    f3:f4:83:29:59:ce:67:c6:05:78:bb:32:84:fc:22:
                    f9:17:d7:fe:f9:8a:c0:7a:94:08:02:cb:0f:5b:32:
                    41:dd:6e:47:15:bc:dc:b6:bb:d8:6f:29:0f:85:b8:
                    4b:0c:d5:48:23:56:4b:1d:07:bf:9e:53:c7:b2:18:
                    7a:f3:3d:81:f0:b9:39:f4:03:8a:18:69:4e:ce:35:
                    50:06:f3:21:45:81:d2:e0:dd:0f:5a:4e:c7:a6:ea:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:69:55:4B:5D:63:CB:F5:77:72:5A:E2:13:D4:31:4F:B9:6D:F1
            X509v3 Authority Key Identifier:
                keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c3:85:5b:c3:37:66:52:ac:52:17:7b:d2:b0:fe:c6:fa:48:
         e9:7f:fe:88:2e:d7:83:99:c2:ca:12:cb:76:63:84:bb:23:ca:
         63:15:46:dc:8c:54:8f:2d:b9:37:c6:e3:be:c7:f1:98:41:97:
         53:c2:2b:3b:2e:77:38:b9:3b:9b:13:b9:1b:ca:74:22:c4:23:
         3f:16:39:f1:4f:78:33:d7:02:ff:3d:9d:d9:50:12:54:bc:46:
         1a:05:a3:87:d0:49:43:b4:ef:88:7b:9e:bd:8e:63:c3:23:f5:
         86:f1:0a:52:0b:2d:77:09:5b:0b:42:e6:00:67:66:d1:6b:17:
         e2:8e:95:84:d2:d9:df:72:dc:53:7d:72:88:8f:59:25:cd:3a:
         bc:e8:e9:31:61:b9:99:51:a9:6c:c0:a6:c0:9e:ae:ee:33:ed:
         fc:21:fd:cf:f4:d7:ce:a0:fb:ed:b5:4d:b6:f1:46:7e:42:ba:
         b5:a7:6e:92:f4:d1:88:14:65:35:49:73:57:52:12:8c:73:dd:
         23:43:dc:80:c0:61:4d:05:3a:3c:34:89:10:bb:fc:95:68:b7:
         d6:f4:17:0d:6e:b5:2b:70:ef:38:15:a9:a1:8e:87:81:04:66:
         9f:7a:a6:60:8d:21:cc:06:87:3b:cb:51:f6:dc:fa:6b:01:98:
         ec:58:bd:dd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkJDMzZBRjExMC8GA1UEBRMoNzkyQ0JDMzdENzQ0RDg4NEI2MEVDNDQ3RUEyQUM3
RTRDREIyMkQ3RDAeFw0yNTA4MjMwMjQ3NDlaFw0yNTA4MjUwMjQ3NDlaMBgxFjAU
BgNVBAMTDTY4YTkyYmQ2LWJhNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGiyJnScMhofrUcm21zIdoGvdsu0ArhG7C4een3UnuYNwlnRqtV6OyELt5
INLWz7Q/EuvERAq/x/fSjypr6al1CqoTocDXoswuFqQ7egwx4Dz26lCLgnNq0R+W
zRa1bETVqt8kOwwwCfU00HYYQ7wgUztQ+Jbvpn+ua9ciJ4RRswQGOa3ZbSd3npn/
W2GKoFH1V90ZadTcogWpEjqp2eO2odSK8vP0gylZzmfGBXi7MoT8IvkX1/75isB6
lAgCyw9bMkHdbkcVvNy2u9hvKQ+FuEsM1UgjVksdB7+eU8eyGHrzPYHwuTn0A4oY
aU7ONVAG8yFFgdLg3Q9aTsem6nVHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdeVp
VUtdY8v1d3Ja4hPUMU+5bfEwHwYDVR0jBBgwFoAUeSy8N9dE2IS2DsRH6irH5M2y
LX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJCQzM2LzU4RjZEQUI0OTY0MjExRUNCODY5ODVBODVBNDBENTc3L2VTeThO
OWRFMklTMkRzUkg2aXJINU0yeUxYMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VTeThOOWRFMklTMkRzUkg2aXJINU0yeUxYMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkJDMzYvNThGNkRBQjQ5NjQyMTFFQ0I4Njk4NUE4NUE0
MEQ1NzcvZVN5OE45ZEUySVMyRHNSSDZpckg1TTJ5TFgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcw4VbwzdmUqxSF3vSsP7G+kjpf/6I
LteDmcLKEst2Y4S7I8pjFUbcjFSPLbk3xuO+x/GYQZdTwis7Lnc4uTubE7kbynQi
xCM/FjnxT3gz1wL/PZ3ZUBJUvEYaBaOH0ElDtO+Ie569jmPDI/WG8QpSCy13CVsL
QuYAZ2bRaxfijpWE0tnfctxTfXKIj1klzTq86OkxYbmZUalswKbAnq7uM+38If3P
9NfOoPvttU228UZ+Qrq1p26S9NGIFGU1SXNXUhKMc90jQ9yAwGFNBTo8NIkQu/yV
aLfW9BcNbrUrcO84FamhjoeBBGafeqZgjSHMBoc7y1H23PprAZjsWL3d
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:41 2025 by rpki-client