Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          wBl0yXPUwNHLyWN/Syaw/Gfoj8iUs8hlcO7MH7JaO08=
Subject key identifier:   97:03:77:B7:F7:8C:C3:E9:44:A3:FE:F0:9C:A9:B3:7B:2F:00:DA:92
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       0182
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          0182
Signing time:             Sun 10 Aug 2025 04:52:49 +0000
Manifest this update:     Sun 10 Aug 2025 04:52:48 +0000
Manifest next update:     Tue 12 Aug 2025 04:52:48 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: O2BRq81PO4F6rLo5J0hRZYAf0Csc8Rg5hqSw4UcYkXU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Aug 10 04:52:48 2025 GMT
            Not After : Aug 12 04:52:48 2025 GMT
        Subject: CN=689825a1-6e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:b8:a7:e4:2e:88:b5:fc:55:58:65:2c:20:
                    dd:03:ec:6d:a2:ea:e6:df:4d:b1:56:91:44:c8:20:
                    de:78:dc:65:58:06:12:fd:71:45:ef:2a:ea:21:c5:
                    7e:ec:4e:d0:3b:0a:0f:f5:3f:bc:02:a5:7d:e8:cb:
                    19:51:26:2f:5a:dc:f7:cd:98:04:be:ba:52:00:40:
                    70:36:35:ec:b8:03:dd:c7:a6:4c:57:6e:f6:8b:3b:
                    b3:7a:61:bc:2f:f0:e8:e5:b2:db:1c:82:31:93:09:
                    00:d1:57:96:5f:f3:67:f8:91:31:7a:34:0c:25:09:
                    44:fc:2c:d3:aa:f5:a9:77:c9:8a:eb:09:36:17:f8:
                    34:57:88:07:a3:89:3f:4b:dc:67:13:fe:54:a7:ea:
                    e2:df:92:e5:08:70:0f:83:f7:84:4e:ab:b3:e6:1b:
                    d2:88:39:17:a5:2c:b5:0e:fe:21:c4:5e:82:22:73:
                    e9:82:6c:c8:0c:da:0e:6b:34:c7:e5:f4:41:93:eb:
                    22:05:02:c4:47:89:bb:cb:fe:ae:90:b4:43:1b:9d:
                    4d:7e:87:49:aa:36:d9:66:47:aa:bf:59:e3:17:8f:
                    34:0b:89:98:10:a6:f4:de:54:fc:93:16:ae:fc:ba:
                    7c:41:b3:64:79:60:cb:48:7d:27:f4:1b:45:85:a6:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:03:77:B7:F7:8C:C3:E9:44:A3:FE:F0:9C:A9:B3:7B:2F:00:DA:92
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b3:1d:2f:08:c0:2e:a4:ca:da:6c:fe:2f:bc:b6:fc:c2:14:
         2f:4a:66:1c:13:f2:ff:cf:12:c9:d5:ae:38:b3:bc:e4:59:18:
         6b:ce:06:12:6b:93:51:5f:e3:00:59:6e:a7:d0:ca:fb:ac:4a:
         5b:f2:41:26:58:eb:e9:ea:9c:21:29:f9:67:69:d3:5e:c7:6c:
         52:08:34:f9:80:56:ca:d3:97:f9:66:08:2d:16:a4:e0:c4:c1:
         c7:45:58:14:da:52:de:be:5c:10:a9:3b:2a:31:11:bb:ec:cd:
         11:5c:b4:19:3b:58:55:ff:2f:ce:fd:30:21:9d:05:7a:6c:70:
         a6:fc:4d:27:3a:8d:d2:51:90:bf:ce:a2:ef:78:48:74:8e:25:
         c9:04:05:4d:f2:db:3b:03:81:a6:49:56:4c:9d:58:5d:db:32:
         ad:78:76:77:c7:b6:81:3e:a6:a0:80:d3:38:58:ee:e2:a9:e4:
         e3:d4:e3:07:c6:cf:82:65:3c:21:58:aa:03:a2:fd:d5:6d:23:
         b6:df:db:0b:5a:d8:43:17:b7:c1:c5:21:96:d8:4b:4b:23:24:
         ea:dc:1f:5b:9c:a5:77:d3:1d:ab:9a:bf:28:57:22:a9:92:5a:
         b6:1f:5a:f3:18:cc:9f:bd:16:bf:dd:5c:95:47:b6:56:30:55:
         10:fe:94:9e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTg1ODNBRjExMC8GA1UEBRMoRkJGNEM3Q0Y1RUM4NjJENDJEQzgxMEEwNDMwMDIx
MUJBMkI3QzUwODAeFw0yNTA4MTAwNDUyNDhaFw0yNTA4MTIwNDUyNDhaMBgxFjAU
BgNVBAMTDTY4OTgyNWExLTZlOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDipbin5C6ItfxVWGUsIN0D7G2i6ubfTbFWkUTIIN543GVYBhL9cUXvKuoh
xX7sTtA7Cg/1P7wCpX3oyxlRJi9a3PfNmAS+ulIAQHA2Ney4A93HpkxXbvaLO7N6
Ybwv8OjlstscgjGTCQDRV5Zf82f4kTF6NAwlCUT8LNOq9al3yYrrCTYX+DRXiAej
iT9L3GcT/lSn6uLfkuUIcA+D94ROq7PmG9KIORelLLUO/iHEXoIic+mCbMgM2g5r
NMfl9EGT6yIFAsRHibvL/q6QtEMbnU1+h0mqNtlmR6q/WeMXjzQLiZgQpvTeVPyT
Fq78unxBs2R5YMtIfSf0G0WFpnGrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlwN3
t/eMw+lEo/7wnKmzey8A2pIwHwYDVR0jBBgwFoAU+/THz17IYtQtyBCgQwAhG6K3
xQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4NTgzLzZFNTU4OTQwNEU0QzExRUZCM0YwNjdBRjc2MkU5NTFBLy1fVEh6
MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1fVEh6MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTg1ODMvNkU1NTg5NDA0RTRDMTFFRkIzRjA2N0FGNzYy
RTk1MUEvLV9USHoxN0lZdFF0eUJDZ1F3QWhHNkszeFFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHsx0vCMAupMrabP4vvLb8whQvSmYc
E/L/zxLJ1a44s7zkWRhrzgYSa5NRX+MAWW6n0Mr7rEpb8kEmWOvp6pwhKflnadNe
x2xSCDT5gFbK05f5ZggtFqTgxMHHRVgU2lLevlwQqTsqMRG77M0RXLQZO1hV/y/O
/TAhnQV6bHCm/E0nOo3SUZC/zqLveEh0jiXJBAVN8ts7A4GmSVZMnVhd2zKteHZ3
x7aBPqaggNM4WO7iqeTj1OMHxs+CZTwhWKoDov3VbSO239sLWthDF7fBxSGW2EtL
IyTq3B9bnKV30x2rmr8oVyKpklq2H1rzGMyfvRa/3VyVR7ZWMFUQ/pSe
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:54 2025 by rpki-client