Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
File:                     h-G7jI0reZLqTr7rMz_hQp5w7po.mft (raw, json)
Hash identifier:          LN1SXQ5+m9gtqQ6BeSf8CD21SOQnWQBdH4t1DWzS2m0=
Subject key identifier:   7A:88:B8:01:A1:89:FC:4A:94:AE:31:F6:76:B2:18:E8:DA:2C:19:75
Authority key identifier: 87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
Certificate issuer:       /CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Certificate serial:       04F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
Manifest number:          04F1
Signing time:             Wed 13 Aug 2025 02:51:23 +0000
Manifest this update:     Wed 13 Aug 2025 02:51:22 +0000
Manifest next update:     Fri 15 Aug 2025 02:51:22 +0000
Files and hashes:         1: h-G7jI0reZLqTr7rMz_hQp5w7po.crl (hash: rp1t1xZLOIUf7lxWvFJjdk0+I/EsLLqaGRrs90LCyGY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAF, serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
        Validity
            Not Before: Aug 13 02:51:22 2025 GMT
            Not After : Aug 15 02:51:22 2025 GMT
        Subject: CN=689bfdab-3a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:ca:50:33:43:5b:16:67:8d:74:d3:17:ef:
                    7c:22:19:d5:89:75:2c:66:27:27:33:35:e1:05:17:
                    cf:68:7c:1a:aa:4f:10:78:02:4f:9b:cf:f4:8c:ab:
                    3e:89:a9:32:07:53:d2:b4:88:83:40:9a:f8:eb:4f:
                    b9:ab:79:13:ab:02:86:74:3d:7c:df:77:07:6d:65:
                    27:08:07:e0:9f:68:6d:80:69:94:fe:04:20:c2:76:
                    5c:65:c9:35:d5:fb:2f:1f:2d:8f:dc:7c:20:ee:0a:
                    50:e1:f8:0d:a8:2c:50:39:58:c3:0d:8f:25:c2:65:
                    f0:1c:f6:19:75:9a:ea:76:d4:f2:21:44:ae:ea:76:
                    25:6f:bd:e6:7a:39:b4:64:c4:d5:89:9f:7c:8e:46:
                    eb:d2:51:74:da:f0:99:f8:d5:b9:d6:dd:1b:2c:ba:
                    f4:64:8d:da:ef:b5:7c:2b:87:2e:8d:53:5c:35:3e:
                    a9:89:93:f0:f3:c7:cf:db:54:16:59:ca:24:e8:b1:
                    b7:23:0a:ba:49:68:90:ef:49:80:4f:1c:80:57:e3:
                    24:4b:74:4c:51:8c:bc:83:4f:be:36:46:a0:36:3c:
                    65:fb:bc:e0:11:63:f2:eb:62:e1:e7:cc:f0:93:14:
                    bf:66:73:77:66:99:10:97:94:da:7c:30:0c:02:22:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:88:B8:01:A1:89:FC:4A:94:AE:31:F6:76:B2:18:E8:DA:2C:19:75
            X509v3 Authority Key Identifier:
                keyid:87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:86:5c:fe:23:ef:9d:7e:32:7f:57:fa:28:ac:ac:d6:d3:ea:
         ce:95:6e:0b:3a:97:44:73:37:65:7a:26:ab:59:f2:3b:9e:1d:
         70:65:f5:08:31:55:d0:ff:f7:95:97:f8:bd:0e:49:5d:26:78:
         54:ac:92:35:76:fc:50:d4:e1:31:7e:13:e7:ea:03:21:ef:8e:
         86:66:63:fb:2b:c0:6e:0e:5e:7a:37:83:a6:db:e0:8c:b8:00:
         d1:76:5f:44:a0:39:bf:c4:09:e4:0a:d6:1b:a1:e1:ea:40:ba:
         0d:6a:57:13:b8:44:21:41:84:2c:58:a9:f5:4c:c1:8e:34:d2:
         b6:b7:ad:b1:ac:ea:21:33:0f:1d:ce:f2:32:82:fe:4e:86:d1:
         f1:65:48:eb:14:88:aa:1a:5c:d8:a2:8b:f3:d0:43:55:e3:83:
         28:77:3e:c3:3c:93:a9:5e:67:7f:d5:c6:e2:ee:bc:6e:e5:d0:
         2b:f5:8b:3f:0c:02:18:c0:6d:b3:c5:cd:23:2a:f1:5c:22:1f:
         02:2e:ce:66:8d:7f:55:df:2f:05:10:04:f8:71:e3:c3:e4:52:
         37:6d:3a:9c:4d:a5:95:6b:2e:44:57:bb:55:10:9b:b3:ce:08:
         cd:24:a0:a4:77:9b:9c:74:94:23:e7:33:b2:ec:2a:d6:4f:77:
         f8:96:4e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:10 2025 by rpki-client