Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          KomJq6J4bZdVj9UOg4tKQC9w3hbOGdSlgaCXqbuP6J8=
Subject key identifier:   26:92:D4:9C:54:7F:B8:9D:FE:E6:5A:61:A6:43:DB:09:22:1A:19:C0
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       016F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          016E
Signing time:             Thu 03 Jul 2025 04:41:03 +0000
Manifest this update:     Thu 03 Jul 2025 04:41:02 +0000
Manifest next update:     Sat 05 Jul 2025 04:41:02 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: q+TbqTmV9xwwf4HbVvyRSYHCvFyhz8dOtkMrGRSPLKg=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 04:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Jul  3 04:41:02 2025 GMT
            Not After : Jul  5 04:41:02 2025 GMT
        Subject: CN=686609df-3e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:76:b0:75:df:7a:a4:6d:65:f5:35:fc:d9:
                    83:c3:dc:a7:8e:c8:c5:d0:a5:1c:58:18:48:1c:9b:
                    c0:d6:13:d3:30:e0:4a:3e:97:11:9e:72:99:1c:24:
                    63:40:69:c4:7f:08:44:54:01:a7:17:14:54:b5:1b:
                    cc:46:29:1f:da:02:e5:87:8f:a0:08:79:7e:d8:71:
                    0a:bd:c4:20:6d:68:4e:95:95:1d:62:58:1e:11:ef:
                    28:18:c0:66:a3:47:f2:29:ae:9a:f3:d9:d6:36:67:
                    87:34:4e:13:10:16:5f:da:c9:5d:2c:ca:0f:12:4b:
                    d5:85:fa:55:df:b5:c5:26:8d:58:fb:fe:29:39:a6:
                    23:b6:5b:73:64:22:30:06:9a:90:a1:b9:45:5b:ee:
                    4f:25:d7:3c:75:8c:a6:0b:f2:4e:ad:b1:32:c8:43:
                    fa:8a:0e:d5:7d:5c:4f:5e:34:87:da:9f:5f:0c:5f:
                    8a:d6:ba:19:d0:18:01:ec:a6:72:b9:70:4a:df:55:
                    e0:8f:c7:2c:5c:53:4c:46:45:2d:62:ff:d9:80:ab:
                    ac:88:a5:d3:aa:13:fb:de:c1:22:82:a8:22:8d:da:
                    3e:00:ee:c3:27:97:b9:ba:a8:c5:24:78:fb:4d:45:
                    42:9b:3f:f9:8e:0b:41:0c:c8:32:5c:af:57:47:94:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:92:D4:9C:54:7F:B8:9D:FE:E6:5A:61:A6:43:DB:09:22:1A:19:C0
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:83:a1:67:6d:ae:8b:57:5d:8f:3a:49:40:e4:aa:0f:4e:
         81:55:95:21:e4:2c:28:ca:83:fe:17:c7:70:95:30:63:4d:41:
         f9:cd:62:dc:3d:0b:6f:e8:5e:fc:99:e9:5e:00:bc:f4:3b:27:
         f2:d7:17:08:dc:34:e1:bb:8d:79:8e:bc:60:4b:19:4d:12:70:
         73:b0:67:a5:35:7b:83:99:6f:21:a5:39:80:7b:5b:6c:28:f1:
         32:d9:eb:4d:2e:7e:95:6d:87:d6:0b:af:76:23:49:41:39:f2:
         3e:f0:52:23:84:d9:7f:df:e9:96:b4:81:1d:39:ef:26:32:be:
         e5:de:e2:cb:43:51:c5:20:fb:46:55:45:09:23:5b:8e:2d:92:
         f7:50:26:71:1f:64:80:d8:73:11:31:df:c6:17:f1:c1:44:f8:
         8a:89:f7:a7:fc:bd:35:b3:c3:97:10:a6:d4:d8:fa:81:00:80:
         44:6f:56:38:f6:c6:de:b4:a2:5a:54:86:d6:6f:14:57:11:06:
         07:eb:aa:9f:ce:fc:3f:e9:e0:22:96:c8:7b:1c:95:46:33:18:
         43:0a:95:be:03:f0:fe:f5:3b:c7:d4:03:79:aa:a2:09:c5:52:
         12:eb:fa:2a:12:16:bb:1d:64:0a:b1:4c:a2:c3:04:3b:0e:7d:
         fc:4c:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:30:06 2025 by rpki-client