Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
File:                     7XZlKQ0TEj69LBHPCH2D_1DLck8.mft (raw, json)
Hash identifier:          TdU5AAtbIWUbo5KF9Qr9mfObHUHxkJxSAsgccNRlZ6I=
Subject key identifier:   51:A1:C6:82:E6:08:D4:EE:A1:D9:11:DE:A3:0B:1A:A8:DD:F4:46:F1
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Certificate issuer:       /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial:       033F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
Manifest number:          033C
Signing time:             Wed 13 Aug 2025 03:46:02 +0000
Manifest this update:     Wed 13 Aug 2025 03:46:01 +0000
Manifest next update:     Fri 15 Aug 2025 03:46:01 +0000
Files and hashes:         1: 7XZlKQ0TEj69LBHPCH2D_1DLck8.crl (hash: hxL9LsWr64/JBHMweRHdVHCX2Y9jWZ+KibnboG28314=)
                          2: 4B8EEDB40A2F11EEA86653594AD9E6FC.roa (hash: XtlDMiWVbKF1PyU7Dxovz8F8BLVHU9h4HjWuTp4MLtA=)
                          3: D7EB6984752A11EEB254CC514AD9E6FC.roa (hash: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=)
                          4: 8E2AFAC4048E11EEA671536C4AD9E6FC.roa (hash: 6Jqn2aGmjDcmImvw5mjB/z8k1HYXJolq+lf84m8vfCY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C329AF, serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
        Validity
            Not Before: Aug 13 03:46:01 2025 GMT
            Not After : Aug 15 03:46:01 2025 GMT
        Subject: CN=689c0a79-7967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:39:19:ad:69:ba:94:5e:e2:1e:58:58:79:
                    e3:ca:20:28:74:5b:a6:60:18:c6:65:79:78:2e:9c:
                    77:a2:4d:20:81:a4:1e:b4:9d:2f:b1:b7:10:7d:68:
                    dc:d8:88:d1:7c:c5:79:d2:de:63:2a:a6:00:5c:2e:
                    0b:6a:a9:ef:9a:c0:26:47:09:58:c9:68:b4:c3:73:
                    85:24:0e:a4:7c:95:60:fc:2f:be:06:eb:fa:8a:d9:
                    99:9c:6b:91:85:cd:56:f4:18:a7:8a:16:dc:7a:fe:
                    d1:03:c9:fa:37:c4:2b:15:32:b0:0f:85:12:21:90:
                    be:bd:cd:7d:d3:a9:b2:a2:b6:11:6b:d2:a4:81:da:
                    05:65:b1:a6:5c:68:df:6a:7b:20:1e:cd:89:97:db:
                    fb:03:2c:de:ae:03:4f:36:0a:e8:58:46:d2:1f:a6:
                    b6:60:fa:90:cc:d8:32:7f:7e:c6:a2:84:15:ca:f6:
                    2a:69:55:c7:7b:55:a7:15:c7:a1:07:2b:58:67:66:
                    55:8a:54:98:6a:f2:a9:6d:4d:91:d7:bb:8d:1e:ec:
                    8d:f7:62:3b:d7:4c:d2:58:5a:2d:eb:92:85:95:f0:
                    0a:30:1c:49:d2:fb:b4:70:67:52:7f:b7:5b:bd:3d:
                    53:55:2b:bd:29:ea:33:7c:b2:2d:3a:12:c2:04:bf:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:C6:82:E6:08:D4:EE:A1:D9:11:DE:A3:0B:1A:A8:DD:F4:46:F1
            X509v3 Authority Key Identifier:
                keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:ce:ea:dc:b2:f3:d7:56:21:76:1d:8a:2b:82:2e:dc:82:
         3b:06:44:e5:23:80:94:c5:20:1e:4d:6d:fc:ee:c0:78:af:2f:
         ce:aa:1a:c0:3a:b3:81:8b:b7:22:c5:9d:e4:50:c8:a4:b5:ea:
         8e:fc:22:fe:de:7a:6f:f2:fc:42:29:70:7e:c3:a4:67:ee:82:
         7f:51:2a:3e:c6:0a:b9:e6:b4:9f:86:a0:ac:09:37:5d:29:37:
         e5:06:77:ec:af:7d:8d:81:cd:1b:95:c1:ee:bf:b3:b2:a0:ad:
         b4:10:67:e8:25:c7:37:74:97:b7:9d:88:99:1d:40:0d:64:60:
         7a:b0:b8:93:6d:7f:12:6f:39:4c:ed:86:05:15:05:53:08:66:
         73:c4:42:46:2d:01:06:f1:09:58:1c:7c:9e:bb:f7:7b:39:8e:
         b7:5d:ca:c3:5b:f9:03:cd:92:8e:94:47:8d:6b:8a:00:56:b1:
         06:bf:05:d9:79:fa:7f:de:62:d3:ee:80:98:e5:83:4e:17:68:
         0c:17:02:75:ac:31:f1:76:8c:e6:77:8c:7d:c7:1d:c9:f6:bc:
         ad:ad:44:82:2f:3c:4e:a1:50:68:04:8d:cf:7f:32:33:40:07:
         5d:0f:9d:7c:f8:37:f9:9b:06:5e:a9:75:d0:45:b4:f9:17:36:
         60:2b:75:32
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEMzMjlBRjExMC8GA1UEBRMoRUQ3NjY1MjkwRDEzMTIzRUJEMkMxMUNGMDg3RDgz
RkY1MENCNzI0RjAeFw0yNTA4MTMwMzQ2MDFaFw0yNTA4MTUwMzQ2MDFaMBgxFjAU
BgNVBAMTDTY4OWMwYTc5LTc5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPxjkZrWm6lF7iHlhYeePKICh0W6ZgGMZleXgunHeiTSCBpB60nS+xtxB9
aNzYiNF8xXnS3mMqpgBcLgtqqe+awCZHCVjJaLTDc4UkDqR8lWD8L74G6/qK2Zmc
a5GFzVb0GKeKFtx6/tEDyfo3xCsVMrAPhRIhkL69zX3TqbKithFr0qSB2gVlsaZc
aN9qeyAezYmX2/sDLN6uA082CuhYRtIfprZg+pDM2DJ/fsaihBXK9ippVcd7VacV
x6EHK1hnZlWKVJhq8qltTZHXu40e7I33YjvXTNJYWi3rkoWV8AowHEnS+7RwZ1J/
t1u9PVNVK70p6jN8si06EsIEv4wJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUaHG
guYI1O6h2RHeowsaqN30RvEwHwYDVR0jBBgwFoAU7XZlKQ0TEj69LBHPCH2D/1DL
ck8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRDMzI5L0UzODNBNEUwMDQ4RDExRUVBMzlCNEM2QTRBRDlFNkZDLzdYWmxL
UTBURWo2OUxCSFBDSDJEXzFETGNrOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdYWmxLUTBURWo2OUxCSFBDSDJEXzFETGNrOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEMzMjkvRTM4M0E0RTAwNDhEMTFFRUEzOUI0QzZBNEFE
OUU2RkMvN1habEtRMFRFajY5TEJIUENIMkRfMURMY2s4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3987q3LLz11Yhdh2KK4Iu3II7BkTl
I4CUxSAeTW387sB4ry/OqhrAOrOBi7cixZ3kUMikteqO/CL+3npv8vxCKXB+w6Rn
7oJ/USo+xgq55rSfhqCsCTddKTflBnfsr32Ngc0blcHuv7OyoK20EGfoJcc3dJe3
nYiZHUANZGB6sLiTbX8SbzlM7YYFFQVTCGZzxEJGLQEG8QlYHHyeu/d7OY63XcrD
W/kDzZKOlEeNa4oAVrEGvwXZefp/3mLT7oCY5YNOF2gMFwJ1rDHxdozmd4x9xx3J
9rytrUSCLzxOoVBoBI3PfzIzQAddD518+Df5mwZeqXXQRbT5FzZgK3Uy
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:15 2025 by rpki-client