Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          EwAu+v7LDHp9DPmlRKvsrqusGMdXVim4bPB5J47kWOU=
Subject key identifier:   44:6D:BD:F8:99:7B:DD:55:C0:6E:31:95:6D:2A:0F:A7:E7:C4:33:F2
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       08F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          08F2
Signing time:             Mon 11 Aug 2025 01:38:39 +0000
Manifest this update:     Mon 11 Aug 2025 01:38:38 +0000
Manifest next update:     Wed 13 Aug 2025 01:38:38 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: 5hwAKauveeN0LzeT8BcvUNN8uq5+XlU7H5hjbNp0YzQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Aug 11 01:38:38 2025 GMT
            Not After : Aug 13 01:38:38 2025 GMT
        Subject: CN=6899499f-b5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f5:fb:b0:96:d6:ec:ea:83:8b:99:b8:63:79:
                    12:fb:b7:b3:07:e6:70:49:d8:4a:1e:61:fc:24:58:
                    f1:7d:7f:3a:ef:79:29:2a:a6:d3:dd:03:f4:d6:83:
                    c8:fa:0b:5d:50:cf:79:64:09:ba:cc:2d:77:43:2d:
                    f2:09:d6:a6:d6:a4:b9:60:37:df:d0:2f:75:ed:8d:
                    f9:7b:17:81:c7:e7:28:82:db:1a:93:23:90:56:11:
                    e1:b1:fa:87:90:ef:f7:00:cf:70:90:ed:98:80:db:
                    f7:d0:ab:54:f3:a2:ea:db:8e:3f:11:26:17:68:0c:
                    e7:58:6f:9f:b7:b5:b0:aa:f3:b2:43:ab:44:4b:4d:
                    e9:35:fb:97:f9:96:1b:1b:8e:ba:a6:b3:46:f2:9f:
                    8a:a7:f3:4c:d7:34:de:24:7f:0f:21:4f:39:8f:b9:
                    1e:3f:6a:d1:5d:cf:01:c8:6f:e1:6a:bd:75:b4:2a:
                    31:8d:c5:2e:27:c4:3f:fb:7a:f0:05:6f:64:56:92:
                    fb:17:d6:b2:14:c5:33:06:b3:bc:d2:d7:01:29:f8:
                    b4:33:5c:30:09:dd:1a:9b:32:b4:e5:5b:da:e2:74:
                    ea:07:07:b5:41:97:c0:d6:24:c2:fd:f6:07:5a:7f:
                    47:06:c9:4e:88:e4:91:84:4b:02:3a:cb:b3:02:ca:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6D:BD:F8:99:7B:DD:55:C0:6E:31:95:6D:2A:0F:A7:E7:C4:33:F2
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:12:93:5d:3f:d2:cb:88:12:ef:a2:98:fa:42:cb:41:b2:b6:
         24:03:64:52:a7:a8:1d:0c:53:f9:48:77:77:80:93:1b:b1:4a:
         78:b9:24:29:0a:b7:b2:18:8a:6a:90:41:06:99:00:18:50:48:
         30:31:84:a4:6c:43:e9:f8:f2:98:73:68:fd:5d:91:4c:e8:7c:
         55:f4:48:af:c3:97:82:25:66:f7:8d:49:27:5f:7e:dd:3a:e6:
         d2:3c:f3:b9:c8:6c:45:c5:84:33:9d:a2:86:a4:9c:5e:7e:34:
         13:1c:5a:3a:73:92:dd:18:49:33:de:6f:82:fa:40:2a:37:12:
         87:24:b0:d0:93:df:6b:8f:6a:34:32:db:91:90:18:57:58:c1:
         90:cd:f8:74:47:e4:4a:95:49:a7:f3:01:b3:63:a5:02:8c:9c:
         0f:11:0a:b0:c6:13:e8:82:1a:62:2f:5b:b2:a2:20:62:da:c5:
         09:9b:69:8b:85:d0:dc:cb:74:ef:0a:0f:ec:30:3a:43:43:31:
         7f:c4:ad:10:aa:43:5d:43:13:15:2d:e2:74:94:92:72:72:49:
         fe:e5:35:68:46:41:fb:8c:f2:ce:2e:4e:00:6a:be:98:8a:2a:
         01:42:76:d5:89:e6:ac:6c:4c:2d:e5:92:0c:ea:0d:d0:d0:5d:
         f1:15:36:0d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjBDMTRBRjExMC8GA1UEBRMoQUUxNUU2MzU1QjA4NEE5M0VCQTIxQzRBOURENjFC
Q0RDMjU4QjU5RTAeFw0yNTA4MTEwMTM4MzhaFw0yNTA4MTMwMTM4MzhaMBgxFjAU
BgNVBAMTDTY4OTk0OTlmLWI1YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDP9fuwltbs6oOLmbhjeRL7t7MH5nBJ2EoeYfwkWPF9fzrveSkqptPdA/TW
g8j6C11Qz3lkCbrMLXdDLfIJ1qbWpLlgN9/QL3Xtjfl7F4HH5yiC2xqTI5BWEeGx
+oeQ7/cAz3CQ7ZiA2/fQq1Tzourbjj8RJhdoDOdYb5+3tbCq87JDq0RLTek1+5f5
lhsbjrqms0byn4qn80zXNN4kfw8hTzmPuR4/atFdzwHIb+FqvXW0KjGNxS4nxD/7
evAFb2RWkvsX1rIUxTMGs7zS1wEp+LQzXDAJ3RqbMrTlW9ridOoHB7VBl8DWJML9
9gdaf0cGyU6I5JGESwI6y7MCygglAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURG29
+Jl73VXAbjGVbSoPp+fEM/IwHwYDVR0jBBgwFoAUrhXmNVsISpProhxKndYbzcJY
tZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYwQzE0L0NBRDVGMzYyOUJGQTExRTlCMUJGQzE3OUY4QUVBMjI4L3JoWG1O
VnNJU3BQcm9oeEtuZFliemNKWXRaNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JoWG1OVnNJU3BQcm9oeEtuZFliemNKWXRaNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjBDMTQvQ0FENUYzNjI5QkZBMTFFOUIxQkZDMTc5RjhB
RUEyMjgvcmhYbU5Wc0lTcFByb2h4S25kWWJ6Y0pZdFo0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfEpNdP9LLiBLvopj6QstBsrYkA2RS
p6gdDFP5SHd3gJMbsUp4uSQpCreyGIpqkEEGmQAYUEgwMYSkbEPp+PKYc2j9XZFM
6HxV9Eivw5eCJWb3jUknX37dOubSPPO5yGxFxYQznaKGpJxefjQTHFo6c5LdGEkz
3m+C+kAqNxKHJLDQk99rj2o0MtuRkBhXWMGQzfh0R+RKlUmn8wGzY6UCjJwPEQqw
xhPoghpiL1uyoiBi2sUJm2mLhdDcy3TvCg/sMDpDQzF/xK0QqkNdQxMVLeJ0lJJy
ckn+5TVoRkH7jPLOLk4Aar6YiioBQnbVieasbEwt5ZIM6g3Q0F3xFTYN
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:42 2025 by rpki-client