Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File:                     fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier:          stMNq4sZ7cj2Vk2EP8KktnJd44x4g1tXTnILyvsIVhU=
Subject key identifier:   60:E1:68:7B:8D:DC:A7:63:B0:70:C0:51:E1:AE:8B:10:B0:4A:DC:A4
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer:       /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial:       D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number:          D7
Signing time:             Tue 12 Aug 2025 05:08:42 +0000
Manifest this update:     Tue 12 Aug 2025 05:08:41 +0000
Manifest next update:     Thu 14 Aug 2025 05:08:41 +0000
Files and hashes:         1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: zIkfZoltGS89B68bjU0y7xpMs0oVCjtOVMeT5Nqa6E4=)
                          2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 05:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640C3CAF, serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
        Validity
            Not Before: Aug 12 05:08:41 2025 GMT
            Not After : Aug 14 05:08:41 2025 GMT
        Subject: CN=689acc5a-e902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:88:e4:95:8c:ea:b4:c1:fd:8a:88:9e:dd:
                    f1:db:d5:f2:67:f2:9b:d6:1f:91:87:af:b2:d6:90:
                    fc:60:e9:c6:03:9f:00:6e:8d:b4:72:a3:85:cd:41:
                    35:c6:80:30:f0:02:44:36:87:65:bf:5f:9b:54:b3:
                    ff:17:f5:4f:25:99:4e:0c:ae:45:ae:2d:93:eb:db:
                    ce:27:c6:e1:0f:9a:22:a6:10:58:20:61:2b:75:46:
                    66:0f:d1:8e:d5:72:f8:0a:3f:02:a1:92:29:7a:d8:
                    c4:9f:50:38:ad:79:2e:09:21:3e:a6:e3:05:66:d0:
                    a3:94:1c:77:55:fa:d3:d1:f6:63:3e:bd:65:75:6b:
                    66:2f:78:3c:c2:59:4a:b5:ca:ed:19:8b:c8:80:b7:
                    40:c1:f8:8c:ee:86:c6:c7:8e:20:cd:75:de:d0:b3:
                    97:53:57:22:59:ff:3c:63:3d:83:d2:eb:e6:17:61:
                    a9:83:c4:a9:84:ba:b6:01:ca:c1:85:eb:78:4f:c5:
                    9a:dc:50:43:6b:f2:19:fa:eb:08:0c:de:eb:e4:66:
                    be:a0:f1:01:11:ad:5e:ef:cc:38:37:34:4c:f3:a9:
                    d7:f3:cd:ee:61:a9:a6:37:ae:4c:95:2b:1b:cd:a5:
                    db:96:30:59:e4:ed:cd:2c:75:49:3d:8f:21:e9:34:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E1:68:7B:8D:DC:A7:63:B0:70:C0:51:E1:AE:8B:10:B0:4A:DC:A4
            X509v3 Authority Key Identifier:
                keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:d7:2a:16:48:b7:2f:b9:6e:13:75:4a:9f:17:75:f3:69:
         77:61:7a:e5:07:dd:80:a0:b4:26:6c:c0:fb:5c:b5:41:dd:42:
         f7:81:09:12:30:0b:d8:1d:0d:c2:43:07:3e:6b:b3:0f:44:e8:
         45:8f:79:8f:9f:3a:eb:7f:8d:5a:1e:16:be:ce:60:b5:5d:0c:
         3f:55:4f:95:7d:bb:71:cb:10:2f:50:97:ca:f4:5e:45:c5:7d:
         7a:1b:b1:7e:3f:b9:d3:9b:69:a3:48:0e:92:71:26:fd:23:d7:
         94:77:66:44:7f:80:d7:d6:3e:5d:a5:a5:1d:84:f9:74:80:f6:
         c4:0e:75:31:81:69:4f:43:50:7c:31:06:08:96:83:47:ca:97:
         05:50:4c:f8:7d:6b:16:d5:9d:ac:dc:cb:23:6f:15:7e:0a:66:
         e1:4d:90:38:c0:b3:8b:03:57:81:74:ca:4a:97:fe:67:cb:06:
         19:cf:50:4c:92:72:8a:5e:5b:df:54:dd:85:cd:ae:76:16:2e:
         fd:91:8b:af:b4:01:02:92:a6:fe:da:d5:a8:ff:48:04:37:50:
         b7:d1:4f:81:45:ea:aa:95:c7:ff:0f:d3:b6:3f:b4:4b:b5:94:
         f2:2d:57:27:9f:41:2d:69:1f:53:41:e9:4c:ac:20:77:c1:58:
         0e:ce:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:30 2025 by rpki-client