Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File:                     PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier:          BtUZTdLR2MotYTePTWF43BjJj/PtsGEeDL9RqpbV+KU=
Subject key identifier:   90:7A:DC:19:F8:BF:26:8A:F7:BD:F9:C6:E5:F8:56:A7:0F:2F:6A:B5
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       04BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number:          04B9
Signing time:             Wed 06 Aug 2025 02:57:00 +0000
Manifest this update:     Wed 06 Aug 2025 02:56:59 +0000
Manifest next update:     Fri 08 Aug 2025 02:56:59 +0000
Files and hashes:         1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: pqCX9syhzutRIzDjlyirOOWVh4FE6UcuaDsvuWVvBqI=)
                          2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 00:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: Aug  6 02:56:59 2025 GMT
            Not After : Aug  8 02:56:59 2025 GMT
        Subject: CN=6892c47c-b19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:cc:b1:26:38:94:bf:cb:ce:73:c4:90:c9:
                    b7:71:6b:99:a4:8d:93:0c:66:3a:e9:f3:8b:32:8f:
                    dc:f4:ac:50:4b:89:08:b7:9e:13:72:65:a8:5b:dd:
                    e9:3b:88:e4:cc:fa:16:50:2d:8e:71:51:0b:4d:37:
                    ee:e6:c7:f6:98:04:89:22:58:76:cf:01:06:00:e5:
                    b9:7e:a0:01:46:5b:4c:30:5b:fc:5a:c2:d7:5c:5d:
                    84:49:39:db:69:2a:30:ff:2f:8c:b6:94:72:d6:c2:
                    32:84:e3:f4:9c:38:8b:83:66:f4:24:47:5a:c5:8a:
                    c7:b9:67:b3:87:79:70:c2:df:83:97:b8:37:34:c5:
                    77:06:a7:33:b2:2c:64:d0:d4:eb:a4:56:82:cf:47:
                    f3:f0:2f:8b:97:36:ef:1d:8f:fb:43:6b:2d:8d:41:
                    aa:50:5c:0b:0b:14:2b:83:ad:97:69:4e:93:e2:c5:
                    8e:de:7c:3c:ff:d1:92:97:ca:bd:20:43:40:8f:31:
                    49:d2:c8:91:68:d4:cf:c9:2a:61:d4:0e:79:4d:7f:
                    bd:fa:29:00:d5:fd:d6:74:ba:77:7e:aa:30:8b:96:
                    0a:5a:eb:9d:da:76:55:27:53:b7:1b:22:49:ab:50:
                    3d:52:7a:bd:40:37:e7:cb:f5:65:f0:40:39:05:e8:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7A:DC:19:F8:BF:26:8A:F7:BD:F9:C6:E5:F8:56:A7:0F:2F:6A:B5
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e1:f4:2f:a5:9c:5d:95:d3:43:54:c8:bf:97:ba:c4:0a:9c:
         ce:f7:d3:1e:1b:ed:3a:01:e5:d4:bd:c6:d6:a5:ea:6a:8d:5f:
         a0:28:83:84:b4:17:e9:60:74:27:f0:97:45:72:80:d8:5b:a7:
         e7:17:36:db:22:0e:ec:df:0f:00:f3:86:88:f8:0b:0b:af:17:
         d4:f3:1f:15:f6:93:40:82:ae:25:2d:4a:5f:fb:77:dd:be:40:
         3a:fe:6b:6d:e5:99:98:88:be:9d:28:92:58:64:fa:95:a8:be:
         cf:82:6d:f3:ab:97:e9:f3:4c:6a:db:9e:15:3b:d4:76:56:a2:
         2c:59:d6:4f:44:4d:aa:32:77:e9:d7:0b:d5:d6:10:a3:dc:d0:
         a8:a2:d9:fd:b6:ff:b1:4e:e3:d7:93:00:9b:55:73:3b:9c:12:
         30:1c:a2:12:88:44:10:e0:0f:c2:31:a4:ff:6a:5e:50:fe:7b:
         2d:d2:a7:06:ed:15:9b:14:20:b2:61:c7:35:59:0d:72:96:58:
         e6:f0:23:58:01:a5:69:a5:ef:62:04:75:69:63:5b:da:ab:1b:
         4b:71:fe:74:a0:9f:3f:c1:14:ea:37:03:37:75:e7:0f:4a:3c:
         7f:3e:93:09:5c:d1:47:52:ec:ef:ea:9b:7f:ac:ab:c8:45:a6:
         ba:68:b6:74
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTk4RjVBRjExMC8GA1UEBRMoM0Q0QTRFRkQwMjlBMTEyRUI4OUFBQzhFQ0E5RDkx
N0E0N0NCNkM1QzAeFw0yNTA4MDYwMjU2NTlaFw0yNTA4MDgwMjU2NTlaMBgxFjAU
BgNVBAMTDTY4OTJjNDdjLWIxOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqcsyxJjiUv8vOc8SQybdxa5mkjZMMZjrp84syj9z0rFBLiQi3nhNyZahb
3ek7iOTM+hZQLY5xUQtNN+7mx/aYBIkiWHbPAQYA5bl+oAFGW0wwW/xawtdcXYRJ
OdtpKjD/L4y2lHLWwjKE4/ScOIuDZvQkR1rFise5Z7OHeXDC34OXuDc0xXcGpzOy
LGTQ1OukVoLPR/PwL4uXNu8dj/tDay2NQapQXAsLFCuDrZdpTpPixY7efDz/0ZKX
yr0gQ0CPMUnSyJFo1M/JKmHUDnlNf736KQDV/dZ0und+qjCLlgpa653adlUnU7cb
IkmrUD1Ser1AN+fL9WXwQDkF6PI5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkHrc
Gfi/Jor3vfnG5fhWpw8varUwHwYDVR0jBBgwFoAUPUpO/QKaES64mqyOyp2RekfL
bFwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5OEY1L0E0MTBEMzUwREMwMjExRUM5OUUzNjE4OEYxMjIyNDY4L1BVcE9f
UUthRVM2NG1xeU95cDJSZWtmTGJGdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BVcE9fUUthRVM2NG1xeU95cDJSZWtmTGJGdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTk4RjUvQTQxMEQzNTBEQzAyMTFFQzk5RTM2MTg4RjEy
MjI0NjgvUFVwT19RS2FFUzY0bXF5T3lwMlJla2ZMYkZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAF4fQvpZxdldNDVMi/l7rECpzO99Me
G+06AeXUvcbWpepqjV+gKIOEtBfpYHQn8JdFcoDYW6fnFzbbIg7s3w8A84aI+AsL
rxfU8x8V9pNAgq4lLUpf+3fdvkA6/mtt5ZmYiL6dKJJYZPqVqL7Pgm3zq5fp80xq
254VO9R2VqIsWdZPRE2qMnfp1wvV1hCj3NCootn9tv+xTuPXkwCbVXM7nBIwHKIS
iEQQ4A/CMaT/al5Q/nst0qcG7RWbFCCyYcc1WQ1ylljm8CNYAaVppe9iBHVpY1va
qxtLcf50oJ8/wRTqNwM3decPSjx/PpMJXNFHUuzv6pt/rKvIRaa6aLZ0
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:44 2025 by rpki-client