Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          sz0SVGLu/r7obDge0e6CzVyUbLjh6Fb2n4dl/Q646AU=
Subject key identifier:   29:3C:3C:2B:5B:DE:AE:CC:D0:B1:0F:F8:52:05:B9:D6:87:E3:D1:7A
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       0528
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          0526
Signing time:             Mon 04 Aug 2025 02:48:31 +0000
Manifest this update:     Mon 04 Aug 2025 02:48:30 +0000
Manifest next update:     Wed 06 Aug 2025 02:48:30 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: b4IhtbcK3RqJRmJFjNitVFBYG1JBGpIFH8XLnqK/bsY=)
                          2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
                          3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: Aug  4 02:48:30 2025 GMT
            Not After : Aug  6 02:48:30 2025 GMT
        Subject: CN=68901f7f-682f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:aa:de:ac:fb:0a:e8:13:23:af:cc:0a:f1:
                    df:07:b0:c4:54:0c:33:a9:c2:af:57:a8:fd:cf:ab:
                    40:b4:bb:7d:bd:b1:5a:1d:8f:3b:b8:ce:4d:ca:63:
                    a8:96:d4:da:e8:89:11:5e:50:a1:87:72:3a:26:bc:
                    83:60:9f:ad:93:01:58:e7:3c:42:83:d8:a9:5a:f5:
                    a2:3e:64:da:eb:9c:3b:85:bf:e1:d0:4f:f6:0e:14:
                    18:5b:73:83:b3:ea:da:54:c7:2d:e9:3a:28:87:aa:
                    b2:04:e8:af:c9:06:c2:1e:31:2a:68:a0:fe:5c:b0:
                    43:5a:bb:90:86:90:7e:17:c4:6b:9d:a6:6c:78:c1:
                    8a:db:09:08:50:10:03:12:46:5c:03:e0:66:21:a6:
                    59:fe:c9:30:bb:d8:de:91:47:db:9a:85:74:45:c8:
                    e9:51:56:41:a1:09:ae:94:ea:b6:8b:20:b1:1a:b8:
                    17:76:00:8e:14:9a:1c:bb:1a:e3:3e:70:0d:a0:43:
                    b2:37:26:bc:1c:57:0f:13:c3:ae:6a:1c:60:83:b8:
                    f3:f1:95:8d:68:05:b5:4c:4d:25:4a:07:8d:4b:32:
                    a6:7c:c7:17:68:c5:1f:46:63:82:f7:b9:29:a6:30:
                    7f:01:43:c7:c3:64:cb:30:d7:d4:c8:24:78:38:b2:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3C:3C:2B:5B:DE:AE:CC:D0:B1:0F:F8:52:05:B9:D6:87:E3:D1:7A
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:a2:89:2e:c7:7f:6d:16:7e:6a:17:da:b5:d6:fc:20:5e:
         cd:b7:48:f7:a2:64:63:b7:8c:68:48:2d:70:b6:d2:e4:69:3c:
         d8:3c:dd:d4:e6:18:09:54:d9:31:81:f2:72:e8:e8:8f:54:b3:
         a7:c0:39:46:8f:48:45:52:81:60:e9:d6:04:49:76:b6:27:91:
         e8:7f:85:a2:8b:99:60:cf:d1:03:dd:64:1c:2b:a4:67:2d:66:
         13:13:ec:28:ba:44:58:84:77:95:64:ad:e0:41:b5:f4:35:18:
         b7:01:54:3c:9f:05:d0:2c:0b:60:4f:f6:d0:30:ff:86:af:43:
         11:e8:da:4f:be:95:d1:47:a9:e6:1e:76:71:db:87:6c:82:48:
         c4:64:31:7e:6c:24:3f:d6:47:89:da:e5:84:f6:39:d9:4d:9b:
         fd:c7:99:f1:26:c0:eb:d6:63:ab:aa:60:f2:65:66:a3:e4:9b:
         fb:22:a2:2d:7d:d2:9d:ea:32:01:5d:c5:95:45:89:e5:3c:5d:
         8b:1d:df:b7:f2:7e:de:7b:35:1e:a8:ca:e9:ce:41:59:8a:88:
         5d:62:a0:ef:79:2d:1d:59:22:e7:3b:24:2b:ba:98:20:42:d6:
         bd:58:f6:44:19:fe:1f:16:df:43:9c:02:8c:72:1b:3c:0c:2d:
         f6:c9:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:16 2025 by rpki-client