Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File:                     aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier:          3hFuAtzRQI7e2JME/i51Jnvix6rxAGNqP66YFE/9FQE=
Subject key identifier:   41:0B:F0:2C:43:C8:90:43:5F:17:FC:45:3F:B7:C0:14:DE:A6:4E:CF
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer:       /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial:       6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number:          6C
Signing time:             Tue 12 Aug 2025 05:16:53 +0000
Manifest this update:     Tue 12 Aug 2025 05:16:52 +0000
Manifest next update:     Thu 14 Aug 2025 05:16:52 +0000
Files and hashes:         1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: s+g2zowVgbWUziPKZCM/VNiF3O7HnkRTQUGpOTaNZac=)
                          2: ED854A8624C811F0B4D15694DAE4EC9C.roa (hash: KyIxaodmc2Nf2dSIBbZZRE5rqK1fV8FCMAMx88jtkk4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 05:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
        Validity
            Not Before: Aug 12 05:16:52 2025 GMT
            Not After : Aug 14 05:16:52 2025 GMT
        Subject: CN=689ace45-4a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:c9:40:d2:d3:f5:5f:76:43:a4:7d:05:46:
                    2a:f2:7e:a9:03:82:d8:30:3b:3c:ba:5c:75:77:d6:
                    ea:df:2c:25:c6:1c:b8:be:f5:a9:c5:8b:eb:07:04:
                    2d:a2:75:cd:44:2e:bf:0d:a4:54:ac:aa:cb:ec:b5:
                    ef:56:d1:d8:35:64:6d:11:ac:36:10:d6:70:bb:42:
                    3d:dd:5d:5e:a8:d7:15:92:30:f4:eb:83:52:5c:96:
                    bb:d2:45:28:61:41:f1:25:70:a6:a0:1d:5a:34:1e:
                    cd:4d:fc:58:25:3b:e3:6c:c2:7c:44:ba:aa:42:5c:
                    22:6d:2f:08:61:90:53:6b:c6:4f:92:68:18:67:7b:
                    d1:ab:af:12:d2:b2:1c:a4:86:fe:c9:f6:ed:0d:70:
                    65:f7:de:d6:5f:54:9c:7b:b8:07:9d:22:9b:80:7b:
                    a7:fb:be:1d:80:bc:f0:6d:95:79:a6:80:4c:c7:6f:
                    1e:f8:51:b7:a9:c7:dc:dd:94:42:a8:20:d2:4b:ea:
                    93:e7:d4:8b:09:87:27:18:aa:ec:8a:1e:54:ff:55:
                    97:54:34:ce:d6:b5:a7:f0:a0:eb:d7:34:bd:b7:0c:
                    e1:c9:05:f8:ef:29:ea:83:16:8e:8e:94:bc:3a:b3:
                    4b:6f:10:a6:88:ca:da:b0:3a:8b:f2:2d:bb:48:1b:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0B:F0:2C:43:C8:90:43:5F:17:FC:45:3F:B7:C0:14:DE:A6:4E:CF
            X509v3 Authority Key Identifier:
                keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:30:98:d5:ad:ce:67:c4:84:8f:3b:51:56:a7:bb:21:2c:51:
         1a:9d:c6:a4:fa:a9:1b:c8:2e:da:a8:ef:84:f2:1d:dd:3d:33:
         60:51:db:e5:66:57:7f:5b:79:ff:23:1c:0d:e5:5d:a8:21:1e:
         0b:b7:56:92:9e:a9:9f:9a:56:7b:f7:56:4b:73:a0:b7:4e:82:
         56:b4:35:47:fd:a7:ce:8f:6f:90:36:63:66:39:cf:a9:1a:db:
         19:1d:f6:c6:b1:97:fe:9c:db:62:2d:9e:d5:88:dc:bf:f9:52:
         15:f5:ce:6b:82:19:ad:ea:c2:c2:dc:1a:7c:1c:35:23:48:3e:
         bc:93:d0:3b:2c:4d:62:00:a9:3e:20:e2:f9:bd:be:57:3f:5d:
         11:e3:ad:03:29:67:46:42:41:d6:03:c9:64:1a:fe:44:3d:1e:
         b7:d6:79:f3:a8:e2:5f:f1:5a:b3:68:78:68:25:7c:c4:d9:60:
         ba:d6:79:e5:d3:ba:00:6d:c7:f5:71:b1:a1:d5:fc:08:ff:70:
         4b:e2:a4:c5:09:13:db:d3:ce:e1:e6:ba:9c:d1:de:98:f7:53:
         b4:74:75:d7:7c:ba:2c:bf:7c:fa:b2:91:37:38:3a:3b:92:04:
         92:87:be:39:ec:cc:0b:18:75:9d:a1:a5:06:63:7c:7f:47:54:
         bd:88:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:39 2025 by rpki-client