Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          IoLKWAGaBCpIr7NXnBTJnf4Bmg/SPDA5K3FC7VyvgeA=
Subject key identifier:   7D:A0:E4:09:E8:52:F6:47:03:13:DB:79:EE:7A:0E:C1:8F:2E:6C:D8
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          014F
Signing time:             Sat 23 Aug 2025 04:55:01 +0000
Manifest this update:     Sat 23 Aug 2025 04:55:00 +0000
Manifest next update:     Mon 25 Aug 2025 04:55:00 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: zu94Kz0ppVwJk/PUnjMy6Jh/q2y3Fl9xLewsAaljGP8=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Aug 23 04:55:00 2025 GMT
            Not After : Aug 25 04:55:00 2025 GMT
        Subject: CN=68a949a5-eb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:31:32:de:7c:62:2d:be:a4:e3:82:0b:38:7d:
                    03:d7:8b:e0:af:42:5f:61:57:a2:d9:e1:bd:fd:d8:
                    34:02:1b:eb:a5:89:f8:b3:ed:96:1c:29:fa:76:9a:
                    f6:08:13:20:14:7c:dc:9a:4b:03:ed:61:18:c8:5d:
                    e6:70:9d:f5:14:c5:33:d9:19:20:bd:c5:65:46:43:
                    51:9e:6a:fa:3f:5f:de:1a:fe:60:91:c0:12:e8:aa:
                    03:91:ad:c7:b8:f1:7c:34:1a:c2:63:a4:8d:c4:eb:
                    9d:6c:1e:eb:d5:9a:4f:77:5f:0a:97:ec:ec:6d:dc:
                    cc:d1:81:d5:0a:ff:77:fb:2c:de:91:e6:94:48:69:
                    f3:c0:ae:86:e4:27:1a:5d:ea:2c:d8:8f:23:ca:b4:
                    ce:e8:fd:fd:ae:ea:ce:28:ae:b1:bd:7a:dc:f7:44:
                    4c:8f:51:1f:c6:a1:c9:96:4e:e9:3a:eb:e5:3b:4e:
                    33:02:21:10:98:47:0c:12:b0:86:b4:c4:a2:86:64:
                    be:c0:29:8e:95:94:0b:7a:8c:09:b6:38:63:d4:f2:
                    03:df:1c:77:53:8b:b0:5a:a6:6f:b1:e0:c7:e5:68:
                    80:1b:b9:f1:60:82:d3:a9:54:f8:cd:0a:30:a9:dc:
                    43:77:1f:f1:d8:4c:30:f9:fb:0f:c8:94:9b:61:6d:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:E4:09:E8:52:F6:47:03:13:DB:79:EE:7A:0E:C1:8F:2E:6C:D8
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:1a:04:94:9f:fb:83:77:a8:45:dc:07:fd:b0:b8:99:9e:
         e7:e7:67:1b:b7:f2:0d:fe:19:76:d2:f9:bd:b6:61:cc:83:c7:
         ba:fe:af:5e:86:7a:6e:e7:66:fd:62:4d:54:fc:7a:f3:be:57:
         bb:b0:8e:f7:bb:66:30:84:7c:d4:ff:3b:c5:39:35:8a:2e:75:
         89:54:b0:5d:0b:17:5d:70:1e:4c:46:32:77:40:1c:0e:87:25:
         0e:1b:e4:88:68:fa:fe:ae:31:11:b8:1e:10:a6:e0:7f:f3:02:
         19:75:e0:b1:12:96:64:5a:f5:2d:3c:a1:a9:74:b0:86:f9:0a:
         87:00:45:5c:04:9f:cb:e3:4a:c6:f2:54:50:1d:02:38:92:c3:
         89:75:34:87:1e:5e:cc:b4:c7:cc:cc:47:33:99:44:a6:d4:b9:
         d3:e4:b2:27:23:89:53:62:e3:20:a7:83:dc:96:c1:8c:14:3d:
         f4:be:f1:a6:4b:b5:d0:e4:3d:df:a5:ea:ce:a0:a4:89:3c:53:
         e7:04:af:c1:ee:50:70:59:8e:2f:51:eb:0b:76:b4:8c:32:23:
         f0:d8:3e:0f:1a:fa:fd:1e:ab:ca:7c:47:7f:2b:b5:03:11:02:
         fc:c8:60:39:14:b9:ed:26:3f:53:9e:38:92:4d:d4:4f:c8:09:
         ee:5a:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:25 2025 by rpki-client