Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          WJfhFnwJni3DWOfKeBnCgtQaMXDEKPyxuhbXtNDUnZw=
Subject key identifier:   7D:30:03:E0:A0:DA:6C:77:16:11:B6:9D:FB:DE:7D:5A:E7:E7:E1:8A
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       0134
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          0133
Signing time:             Sat 23 Aug 2025 04:57:38 +0000
Manifest this update:     Sat 23 Aug 2025 04:57:37 +0000
Manifest next update:     Mon 25 Aug 2025 04:57:37 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: BX8F10RPmFazIqnPlsmEhyIUMI1M5sFhRvOTk9FCi74=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Aug 23 04:57:37 2025 GMT
            Not After : Aug 25 04:57:37 2025 GMT
        Subject: CN=68a94a42-35f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:34:45:cc:9a:a1:40:ec:83:e8:c0:8d:a5:99:
                    06:af:b7:be:55:54:a3:0a:fb:0b:55:3c:f6:d9:bb:
                    9e:b0:9e:27:f3:b5:5f:67:a1:58:2e:01:d0:f4:cc:
                    92:03:a7:e3:e2:e7:ee:e5:2a:b4:1c:34:be:2a:09:
                    c5:7f:0a:48:cf:f9:35:38:f1:ba:5d:a3:16:d2:e0:
                    6e:93:44:0c:ad:e0:6a:62:53:1d:a4:17:ee:22:a6:
                    20:cf:50:82:90:55:ef:4a:ea:12:cc:9f:41:2a:91:
                    8b:9f:54:ae:77:8a:90:03:49:03:dd:91:2d:03:07:
                    28:1b:58:0e:0a:59:91:df:cf:58:9d:43:f5:b6:d2:
                    83:55:8a:d5:4a:a1:c5:3f:03:92:97:91:27:04:73:
                    55:5c:73:ed:bf:8f:db:ce:10:7d:42:d4:9e:47:a2:
                    fd:2b:54:ee:c2:00:79:b4:94:46:31:a7:9f:a0:34:
                    78:4b:0c:64:24:59:14:8d:95:57:06:f4:a8:cb:b3:
                    a4:78:25:01:be:3b:38:83:c2:4c:43:84:58:ef:51:
                    b0:ce:c2:51:b7:02:10:02:24:13:39:e9:d4:54:bb:
                    0a:c8:7d:cc:b5:17:46:af:42:8c:a0:fd:80:d5:b3:
                    52:31:ac:0e:bb:ca:02:ff:37:74:66:e3:d9:f2:0c:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:30:03:E0:A0:DA:6C:77:16:11:B6:9D:FB:DE:7D:5A:E7:E7:E1:8A
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6e:66:4a:67:2d:77:6e:ec:bc:66:2c:7c:8c:3b:2f:4d:d8:
         bd:70:a0:2b:ca:76:07:8f:03:1d:7f:dd:8d:6d:96:ce:26:9d:
         96:52:5e:b1:91:3c:4b:8e:44:08:9d:8a:61:a3:42:89:12:fc:
         07:6b:3a:af:0f:52:f4:05:36:a1:9e:57:2f:28:c3:d9:b7:56:
         3e:ed:17:7b:e2:3e:20:9f:09:f2:c9:e9:03:39:09:35:d3:ff:
         15:7a:55:27:10:8d:dc:76:2b:f7:f9:e6:75:d7:e3:c1:77:9a:
         d6:46:19:ce:99:65:ae:61:ae:0e:25:79:61:b8:7d:ea:8e:d8:
         6b:ed:66:36:f8:3e:94:6a:de:44:22:81:43:66:17:ca:95:36:
         de:20:02:82:3b:4c:31:dd:fb:d6:bc:e9:95:34:b6:d1:08:e6:
         f6:bb:bc:de:ff:53:4f:28:b8:45:b0:35:77:18:5f:93:f1:76:
         b9:94:4c:59:6e:e4:23:bd:be:4f:88:59:8e:4a:38:dd:41:be:
         0c:2d:9c:cf:23:9c:bf:f0:35:59:f5:23:b8:38:95:ec:b1:b4:
         3e:3c:2d:23:c7:ef:15:32:25:f6:fa:e3:7c:52:c4:db:81:ab:
         c0:0b:68:77:d2:12:9a:22:b7:17:cb:37:2a:58:63:a5:d0:10:
         79:e3:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:20 2025 by rpki-client