Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft (raw, json)
Hash identifier:          VcNvaf1we/7roWWTZ6u/EEer+SFUzrIMbgY5Mw94o6I=
Subject key identifier:   7D:9C:FF:8F:94:FA:71:C2:F9:15:0D:71:81:E8:0B:23:69:03:3F:41
Authority key identifier: BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Certificate issuer:       /CN=F36E084CAF/serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
Certificate serial:       0877
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
Manifest number:          0871
Signing time:             Sat 23 Aug 2025 01:43:49 +0000
Manifest this update:     Sat 23 Aug 2025 01:43:48 +0000
Manifest next update:     Mon 25 Aug 2025 01:43:48 +0000
Files and hashes:         1: u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl (hash: WbtNhOCsiXgxz+vcWH99PCqSBCWfrl1CLDlB3FJrw6w=)
                          2: 86921EA0A38311EBBE2DD613F8AEA228.roa (hash: Qdm1jwSuwMkCRXEjG6ft+SApHF6cYD5AROgyucfXjCM=)
                          3: C2A79C94A38311EB9FD81C14F8AEA228.roa (hash: wCi/saeIICAwOHNLZFRK/7Rxl1hUxRkLtU6ihyqYm9U=)
                          4: 09404144A38211EB9403A411F8AEA228.roa (hash: XszKqqcugifGQ7P7cFMGaXWJ1rKb7154oh90pRoXSnM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Validity
            Not Before: Aug 23 01:43:48 2025 GMT
            Not After : Aug 25 01:43:48 2025 GMT
        Subject: CN=68a91cd5-75bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:75:8a:e0:63:77:05:4f:cd:84:88:17:ff:
                    2a:79:3e:97:37:f3:22:6e:15:19:71:06:81:0f:e4:
                    ed:92:56:27:63:18:05:cd:d2:1e:ba:31:f4:f6:47:
                    94:5d:91:46:b3:0a:e6:b4:f7:00:14:93:9a:64:0b:
                    b9:0f:e2:9c:04:48:a0:58:06:77:23:1f:3c:f2:40:
                    67:a0:c0:e7:52:24:ad:df:75:cd:df:df:cd:e6:c2:
                    db:00:4c:75:59:df:50:e9:84:0d:f4:f7:9a:ba:34:
                    41:8e:92:04:ce:61:92:b2:2b:e2:5f:62:38:e9:e2:
                    14:9b:39:e8:bb:9d:50:54:83:50:51:db:62:e1:5a:
                    76:89:62:dc:dd:3b:11:fd:c0:39:8d:34:2b:47:e4:
                    7f:3c:77:e3:1e:4b:07:b6:ce:40:56:34:bd:89:83:
                    72:11:49:28:ea:7f:81:05:f5:84:13:d4:6d:18:93:
                    46:96:1a:56:cb:1b:c3:dd:20:02:05:f5:92:54:af:
                    17:2d:ea:b3:66:2c:8c:37:f5:67:82:cd:f2:91:d8:
                    b1:b4:d1:a2:b8:1e:52:b2:cb:9b:d6:d2:d8:fb:50:
                    f9:b9:63:5a:f7:c6:b7:32:e0:bf:1b:53:04:8f:d0:
                    42:41:57:5e:cd:2e:6e:d2:80:01:85:87:1b:08:40:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9C:FF:8F:94:FA:71:C2:F9:15:0D:71:81:E8:0B:23:69:03:3F:41
            X509v3 Authority Key Identifier:
                keyid:BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:1b:9d:fb:b6:25:94:94:ee:86:d7:78:d7:e9:f9:f4:8a:
         52:e8:bd:48:85:35:71:bc:2a:75:f5:52:04:95:82:c8:63:67:
         a6:cd:a4:bd:f6:a0:79:36:da:1b:1f:57:d8:52:91:53:b4:73:
         a0:00:1b:67:8d:2b:83:09:0e:2b:8a:d0:b1:8d:0d:1c:af:68:
         e4:8d:ce:4f:36:e1:6e:ca:9a:3a:64:b1:6c:55:45:43:04:cc:
         1a:4b:55:ae:a7:f5:e5:ba:69:6e:2d:e9:30:ce:df:a8:c3:03:
         ad:a0:87:b8:c7:48:ff:d6:14:3d:40:17:40:03:0f:d4:f4:26:
         22:6b:70:f7:4d:96:6e:42:61:71:d5:09:d3:e9:ab:53:be:17:
         ba:43:5d:ca:54:9f:20:4e:26:e3:66:95:2b:1c:d8:83:4b:62:
         2c:f8:bd:d8:05:01:0f:f4:21:76:26:f2:30:5e:e1:27:f2:f2:
         8e:de:0d:29:77:a0:87:a5:17:cf:0c:ed:2f:42:9f:e8:59:5e:
         d7:30:e0:d4:6c:b6:7c:a8:28:a8:2e:48:17:2f:10:d8:51:de:
         91:22:4c:5c:7c:87:41:e0:51:ce:db:54:0d:b6:49:4e:06:fb:
         ea:cd:37:41:3f:71:90:bb:7e:12:64:04:5e:db:51:27:4f:ae:
         1d:48:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:16:13 2025 by rpki-client