Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          LmfBIpKt3czizW5GTlULu+pAtaOt1hvUZoeZz1usx7k=
Subject key identifier:   4E:AC:7F:E4:73:9E:68:66:EB:71:C1:13:96:FC:0A:3D:09:BA:30:31
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       026D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          026A
Signing time:             Fri 04 Jul 2025 04:11:22 +0000
Manifest this update:     Fri 04 Jul 2025 04:11:21 +0000
Manifest next update:     Sun 06 Jul 2025 04:11:21 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: n2OnhKsdCAiiIj8F3dbHexGCIUTGlR9a9D/cEtTNQPM=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 04:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
        Validity
            Not Before: Jul  4 04:11:21 2025 GMT
            Not After : Jul  6 04:11:21 2025 GMT
        Subject: CN=6867546a-ff2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7d:30:47:6e:42:af:dc:49:c9:0d:fc:c5:03:
                    c5:63:95:05:fb:a1:a8:11:5f:23:cd:ca:1c:a2:bb:
                    e2:20:92:f9:f6:11:b6:aa:59:0c:8d:ef:52:80:33:
                    66:93:12:ba:06:d0:fa:bc:49:77:a8:ee:14:46:7a:
                    f9:19:43:51:fd:9b:92:bc:55:ee:8a:51:85:7f:d9:
                    37:5a:f4:e2:2b:7a:c6:36:63:03:bc:dd:6d:6a:ce:
                    03:5c:84:fb:c0:2a:aa:48:6e:45:b7:d2:1d:6d:1c:
                    93:1d:82:82:ac:9f:b8:e4:6c:fb:bd:49:12:95:58:
                    c4:91:8e:32:18:69:8f:97:30:46:19:bb:b2:87:88:
                    37:23:0c:dc:9f:2c:e3:d1:45:08:e8:a6:48:53:9b:
                    1d:f1:6d:11:6f:6d:98:cf:e1:c0:39:d9:7b:53:41:
                    e3:dc:c3:4b:e4:56:53:1d:e7:45:03:2d:3d:38:18:
                    34:59:d7:be:ff:f3:88:d0:f1:5b:8a:b1:56:e5:b1:
                    f9:f3:43:ad:26:8b:18:81:7b:1f:e1:d8:21:db:38:
                    55:a9:7b:4f:87:1a:69:e2:3b:0a:26:c1:44:cf:be:
                    c2:b4:bc:9e:86:24:43:fc:18:34:45:48:b1:59:8e:
                    6c:7f:29:40:92:2e:40:91:c8:62:6d:44:a4:16:76:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:7F:E4:73:9E:68:66:EB:71:C1:13:96:FC:0A:3D:09:BA:30:31
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:f9:d6:47:50:49:d6:fd:df:60:0c:34:e5:17:c1:5a:9f:
         36:84:3c:6b:f2:b9:66:85:e6:5b:13:81:c4:2b:43:92:f0:b3:
         41:41:0b:ed:ea:38:32:49:d3:9f:96:c8:6c:a7:7c:f2:4a:cc:
         90:f1:48:0c:23:7b:7b:7d:cc:6a:d9:2e:09:04:64:b7:15:5b:
         1a:9e:a2:77:ac:7d:08:7e:41:f8:6b:df:38:33:d9:e0:32:3a:
         ef:34:b3:31:fc:e5:30:2e:c4:84:57:21:11:6e:ed:72:52:23:
         c9:f2:f5:e7:f2:f0:34:cb:19:37:3f:19:50:c0:9a:27:74:4b:
         b9:37:45:c9:97:13:e1:21:c2:95:e1:ff:3d:31:f6:af:42:94:
         bb:20:5a:0a:4b:83:a6:50:81:ac:f1:9c:31:b9:8d:ae:de:27:
         1f:14:1f:74:c0:e2:a0:a0:de:a2:e9:42:7f:ea:fe:e3:cc:50:
         68:b8:5e:14:b8:93:07:20:26:b7:bd:f1:2f:cc:f7:50:fe:23:
         57:5e:20:4d:d9:1a:09:a7:da:a0:5a:65:a1:ba:f3:f1:56:ec:
         12:09:e0:7a:90:5a:41:49:83:8f:8c:e4:45:1e:40:ef:e9:89:
         e6:cb:ef:6e:eb:4e:c9:fb:dd:74:af:aa:88:bf:20:74:8f:b6:
         c4:23:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:09:43 2025 by rpki-client