Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          NHWIaAP1+3JSjwtZ0XP8WXYWo4d/ndxMKVgLNVqfnlE=
Subject key identifier:   7E:14:A8:FC:09:EC:10:A4:FB:0F:78:89:A1:CB:9F:7A:1F:B2:68:A2
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          0101
Signing time:             Fri 04 Jul 2025 05:02:20 +0000
Manifest this update:     Fri 04 Jul 2025 05:02:19 +0000
Manifest next update:     Sun 06 Jul 2025 05:02:19 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: c0yoAxj4ho9GAYaKtKRaABy2qPouNkLxHxFBBXn81As=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 05:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Jul  4 05:02:19 2025 GMT
            Not After : Jul  6 05:02:19 2025 GMT
        Subject: CN=6867605c-5413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:e0:20:8f:5f:fb:5f:81:6d:34:75:6f:c7:
                    32:ef:48:91:96:23:dc:15:bd:75:8a:06:36:54:ec:
                    49:44:fe:6c:da:0b:ec:36:c4:39:aa:63:e3:37:97:
                    d0:4c:4e:a6:7d:26:85:1a:50:c2:bb:f6:66:98:25:
                    49:da:b6:2d:d9:d5:bf:3b:2c:8c:b1:3a:be:75:6c:
                    99:76:c0:46:f5:5e:e8:10:2a:fd:56:12:41:91:32:
                    d7:a3:d0:31:7d:d2:96:65:34:40:b5:dd:b3:ad:24:
                    14:37:c3:3a:b4:f1:74:e7:3a:23:33:76:e1:27:2f:
                    16:07:c9:e6:a0:ca:2d:41:6f:74:45:3f:ab:0e:5c:
                    6a:85:e5:0f:c8:56:ca:9b:9a:f3:29:38:31:05:76:
                    19:f2:40:c4:49:6e:28:f0:52:86:5e:e8:b2:ea:c4:
                    5a:e2:31:fc:3d:3d:3e:19:c1:88:c0:17:49:94:a7:
                    3c:75:cd:de:66:f5:37:94:85:18:0e:dd:12:76:ab:
                    9b:a6:00:b1:a2:46:9d:6d:38:7b:cb:0d:e7:c2:77:
                    2e:e0:10:a8:d5:88:22:a1:97:42:e3:8e:52:70:24:
                    fa:9f:e2:72:91:86:79:7a:d1:0d:7e:69:05:eb:a4:
                    ff:bd:56:c1:91:44:72:8a:e2:cb:2d:a9:8c:bb:f3:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:14:A8:FC:09:EC:10:A4:FB:0F:78:89:A1:CB:9F:7A:1F:B2:68:A2
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:71:16:7f:56:dd:6e:36:bc:12:6f:62:f9:66:8c:cd:30:
         2c:ed:e3:77:4e:cd:90:06:ce:12:6d:00:ba:60:36:03:1f:55:
         60:d9:4a:73:20:33:0a:ad:5c:02:e9:6d:a5:46:a7:5a:87:ca:
         ae:25:9f:37:0e:3f:b0:96:b1:20:23:71:e6:a5:35:6f:73:5f:
         5f:ec:b2:00:01:45:c5:66:0a:69:ec:e8:b5:bb:8c:e4:bd:c0:
         a0:71:a7:9d:14:a0:3d:6d:c6:72:e0:1d:1c:74:55:a0:cd:0c:
         70:d0:ed:56:38:04:b0:19:5f:f5:e4:79:b8:0d:2d:1d:f4:cf:
         82:a3:ff:d8:f4:aa:23:61:a4:43:dd:53:2a:73:28:28:2e:ca:
         cf:06:a2:64:f7:a0:46:91:67:a7:91:fb:3f:61:aa:b0:92:f5:
         0e:a1:bd:1b:a3:f3:0e:82:31:d9:ee:c1:d0:17:5c:dd:72:2e:
         b7:e7:1a:f1:00:0e:2b:3e:f9:2f:d0:ca:5c:cd:0f:65:a4:fd:
         c9:90:bf:72:f3:61:38:03:43:82:cb:c8:73:65:98:61:b8:c1:
         2c:80:dd:78:63:9f:3f:d8:46:cc:a8:be:35:73:61:9b:be:7e:
         90:33:22:af:16:30:9e:35:c1:41:92:86:c0:89:a1:b3:9d:25:
         ec:4f:23:5e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkNDQzhBRjExMC8GA1UEBRMoMzgzMjUwRDIzRUMxQUFDQzQ2NjY1NUIyMjE5QjE5
RjJFMUM5NDU1QjAeFw0yNTA3MDQwNTAyMTlaFw0yNTA3MDYwNTAyMTlaMBgxFjAU
BgNVBAMTDTY4Njc2MDVjLTU0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcr+Agj1/7X4FtNHVvxzLvSJGWI9wVvXWKBjZU7ElE/mzaC+w2xDmqY+M3
l9BMTqZ9JoUaUMK79maYJUnati3Z1b87LIyxOr51bJl2wEb1XugQKv1WEkGRMtej
0DF90pZlNEC13bOtJBQ3wzq08XTnOiMzduEnLxYHyeagyi1Bb3RFP6sOXGqF5Q/I
VsqbmvMpODEFdhnyQMRJbijwUoZe6LLqxFriMfw9PT4ZwYjAF0mUpzx1zd5m9TeU
hRgO3RJ2q5umALGiRp1tOHvLDefCdy7gEKjViCKhl0LjjlJwJPqf4nKRhnl60Q1+
aQXrpP+9VsGRRHKK4sstqYy78+4TAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfhSo
/AnsEKT7D3iJocufeh+yaKIwHwYDVR0jBBgwFoAUODJQ0j7BqsxGZlWyIZsZ8uHJ
RVswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDQ0M4L0I2NkU5Mjk0OTY4NjExRUZCOEMzQjI0NTc2MkU5NTFBL09ESlEw
ajdCcXN4R1psV3lJWnNaOHVISlJWcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09ESlEwajdCcXN4R1psV3lJWnNaOHVISlJWcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkNDQzgvQjY2RTkyOTQ5Njg2MTFFRkI4QzNCMjQ1NzYy
RTk1MUEvT0RKUTBqN0Jxc3hHWmxXeUlac1o4dUhKUlZzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB49nEWf1bdbja8Em9i+WaMzTAs7eN3
Ts2QBs4SbQC6YDYDH1Vg2UpzIDMKrVwC6W2lRqdah8quJZ83Dj+wlrEgI3HmpTVv
c19f7LIAAUXFZgpp7Oi1u4zkvcCgcaedFKA9bcZy4B0cdFWgzQxw0O1WOASwGV/1
5Hm4DS0d9M+Co//Y9KojYaRD3VMqcygoLsrPBqJk96BGkWenkfs/YaqwkvUOob0b
o/MOgjHZ7sHQF1zdci635xrxAA4rPvkv0MpczQ9lpP3JkL9y82E4A0OCy8hzZZhh
uMEsgN14Y58/2EbMqL41c2Gbvn6QMyKvFjCeNcFBkobAiaGznSXsTyNe
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:34:01 2025 by rpki-client