Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          GLT2Li2HEXx0bhEOhKz88LgGR7GC9Vk5MPFlLYkkTWc=
Subject key identifier:   5A:C1:5F:60:E6:16:9A:FC:01:0C:64:66:91:B7:67:20:90:0D:F4:21
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0E56
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0E49
Signing time:             Mon 16 Jun 2025 00:57:23 +0000
Manifest this update:     Mon 16 Jun 2025 00:57:23 +0000
Manifest next update:     Wed 18 Jun 2025 00:57:23 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: Qi5z+mC2uJJ9CfEg4+QI9glg6mEFMH9ik9eWx1IX8Os=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
                          8: A66C5B60EEFB11EAB67BB760F8AEA228.roa (hash: FhdIMm+EQ8oEL4UIZyKUV2bOPB0gTKOHcKnmpA8WxzA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3670 (0xe56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Jun 16 00:57:23 2025 GMT
            Not After : Jun 18 00:57:23 2025 GMT
        Subject: CN=684f6bf3-9833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:ba:8e:dc:e3:fb:64:3c:56:36:75:5b:7a:
                    f2:87:c6:61:b2:ef:3d:67:c0:62:63:da:e1:1c:87:
                    b2:a3:73:22:81:0f:cd:be:ef:77:ca:d8:44:f7:8b:
                    c4:4f:54:b9:35:6f:09:76:10:4f:9e:32:80:80:1a:
                    f5:42:aa:b4:28:b0:94:f6:e8:b2:4b:ac:60:45:8f:
                    59:4c:19:fa:c6:c2:06:6a:42:09:09:8f:56:eb:a0:
                    07:da:d2:b1:1c:78:fd:d8:3c:10:95:e7:3b:52:27:
                    9d:1f:82:19:35:a3:4e:6b:2e:39:cd:72:e0:d5:85:
                    eb:f0:74:7e:27:60:ed:75:4a:73:45:0f:f4:9a:b1:
                    61:bc:42:44:0e:14:47:2b:34:1e:35:b8:c9:0f:de:
                    e2:e9:7d:f4:ae:76:12:e9:13:13:10:e9:70:16:3d:
                    eb:77:5f:09:a9:f6:0a:98:6b:00:44:8c:24:2d:09:
                    ba:74:94:5b:a7:35:1b:8c:2b:b3:8b:12:5b:57:de:
                    34:51:c5:13:ee:0b:1e:83:f1:57:0d:e6:7f:2b:f8:
                    1f:a4:ab:50:6e:fb:1b:9b:01:af:11:09:13:93:38:
                    a1:20:3e:1f:19:5c:bb:f8:1a:23:05:bd:d7:50:d0:
                    f6:d7:01:3e:80:0b:8c:f3:90:e2:55:90:12:fe:e4:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:5F:60:E6:16:9A:FC:01:0C:64:66:91:B7:67:20:90:0D:F4:21
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d1:ba:fb:06:34:78:f0:fa:a6:20:9e:2b:79:d9:05:ed:a3:
         d1:b3:bb:6d:a7:26:41:b9:d0:ea:64:b5:56:bb:15:0c:8e:f5:
         bb:55:1a:e4:62:5f:42:84:1c:f2:49:05:3c:82:0c:72:b4:62:
         83:8f:a2:11:7f:88:be:9b:71:16:f3:4f:27:a0:44:ac:fc:08:
         54:24:f0:e3:61:b6:68:fe:c1:f3:fd:ba:ee:db:d3:11:ee:dc:
         0f:08:e5:d8:b0:b7:14:00:7a:67:32:9f:12:b0:17:8d:45:9f:
         e8:23:0e:3b:ce:fd:97:b4:87:69:ca:a6:e6:30:65:6b:7b:00:
         3b:a4:40:9d:91:9e:87:08:36:4d:03:bf:ce:fb:15:2a:c0:b4:
         4e:fd:2d:56:da:ff:50:f2:e4:2a:ba:99:89:6c:64:d9:6a:bb:
         e0:08:14:70:04:fa:23:c1:ba:78:1f:4a:13:46:1f:77:c0:21:
         62:37:ee:67:11:97:bc:07:d0:4c:d0:5b:7e:f0:b3:e6:3d:7d:
         e1:09:86:d2:94:b2:03:2d:9e:34:33:63:c1:c1:9b:aa:e3:1b:
         a9:ff:05:c3:d4:3c:3c:cd:b4:db:cb:06:b6:46:d4:d9:36:0d:
         54:db:4d:2c:54:9f:cb:9c:f8:64:89:bc:03:fa:14:20:0d:1b:
         9a:cb:84:c8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUQyOTlBRjExMC8GA1UEBRMoMkIyNDQyODQ4MTc0QUE4ODk0NDY5QTc3OUI5RkQ3
REE0OTU4QzY2OTAeFw0yNTA2MTYwMDU3MjNaFw0yNTA2MTgwMDU3MjNaMBgxFjAU
BgNVBAMTDTY4NGY2YmYzLTk4MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4NrqO3OP7ZDxWNnVbevKHxmGy7z1nwGJj2uEch7KjcyKBD82+73fK2ET3
i8RPVLk1bwl2EE+eMoCAGvVCqrQosJT26LJLrGBFj1lMGfrGwgZqQgkJj1broAfa
0rEceP3YPBCV5ztSJ50fghk1o05rLjnNcuDVhevwdH4nYO11SnNFD/SasWG8QkQO
FEcrNB41uMkP3uLpffSudhLpExMQ6XAWPet3Xwmp9gqYawBEjCQtCbp0lFunNRuM
K7OLEltX3jRRxRPuCx6D8VcN5n8r+B+kq1Bu+xubAa8RCROTOKEgPh8ZXLv4GiMF
vddQ0PbXAT6AC4zzkOJVkBL+5Ly3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWsFf
YOYWmvwBDGRmkbdnIJAN9CEwHwYDVR0jBBgwFoAUKyRChIF0qoiURpp3m5/X2klY
xmkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4QUVBMjI4L0t5UkNo
SUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t5UkNoSUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUQyOTkvNDhGMDA4RDg1NkQ1MTFFNTg0NUVGODVDRjhB
RUEyMjgvS3lSQ2hJRjBxb2lVUnBwM201X1gya2xZeG1rLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx0br7BjR48PqmIJ4redkF7aPRs7tt
pyZBudDqZLVWuxUMjvW7VRrkYl9ChBzySQU8ggxytGKDj6IRf4i+m3EW808noESs
/AhUJPDjYbZo/sHz/bru29MR7twPCOXYsLcUAHpnMp8SsBeNRZ/oIw47zv2XtIdp
yqbmMGVrewA7pECdkZ6HCDZNA7/O+xUqwLRO/S1W2v9Q8uQqupmJbGTZarvgCBRw
BPojwbp4H0oTRh93wCFiN+5nEZe8B9BM0Ft+8LPmPX3hCYbSlLIDLZ40M2PBwZuq
4xup/wXD1Dw8zbTbywa2RtTZNg1U200sVJ/LnPhkibwD+hQgDRuay4TI
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:54:23 2025 by rpki-client