Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          vbLp9mqeuKc4G2QXivGsqBXBexljYAJUtBSrGbO4Acc=
Subject key identifier:   08:BF:67:1B:D4:DA:F3:8A:9B:45:36:32:FC:7D:05:20:21:54:A5:3F
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       03DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          03D7
Signing time:             Tue 12 Aug 2025 03:22:09 +0000
Manifest this update:     Tue 12 Aug 2025 03:22:09 +0000
Manifest next update:     Thu 14 Aug 2025 03:22:08 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: VQp41KhP0zInauLT7kdJ9EWVFZl5d6Ad/lNBTt5/qes=)
                          2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
                          3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Aug 12 03:22:09 2025 GMT
            Not After : Aug 14 03:22:08 2025 GMT
        Subject: CN=689ab361-3b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:38:2d:ee:2c:f5:17:34:88:0c:a4:2c:76:
                    2b:34:70:1b:93:3e:94:f0:4a:06:2a:38:a0:4c:64:
                    44:eb:c3:ac:ea:7e:fb:89:64:cc:12:90:e8:4c:ac:
                    e0:7c:ba:15:62:b0:f5:f0:cb:01:d4:3c:64:2b:27:
                    78:9f:ee:29:b6:4b:01:f4:8d:48:35:a4:d9:52:f4:
                    4f:45:ce:75:2a:f4:b1:6f:11:61:64:2b:a2:4c:0b:
                    11:6b:8f:9b:a3:e0:c2:77:ac:64:ed:45:5b:72:7a:
                    5a:00:80:38:7d:85:aa:2a:2d:dc:ed:7a:53:38:d0:
                    b8:77:be:8b:d8:ce:04:d7:41:31:59:8c:5a:20:ab:
                    b8:93:0d:9d:04:bc:8f:ad:f4:70:9f:5d:bf:11:79:
                    f5:42:2c:62:68:67:50:5a:1e:91:09:8f:9d:38:51:
                    7b:e3:a4:37:94:c7:c8:54:b6:52:31:52:a9:0b:aa:
                    b9:f4:7f:53:a7:3c:8a:fa:de:7f:f4:f3:76:02:54:
                    e5:5c:73:94:94:a6:b7:fe:92:90:65:57:a7:d9:19:
                    0b:ab:7b:df:91:82:b5:ae:38:8c:89:de:7b:a5:e0:
                    48:d8:cd:d0:55:d1:b6:6a:13:c9:e0:a5:a7:e0:a1:
                    66:fd:5b:ad:5f:b9:8c:53:35:0c:61:34:34:d5:1a:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BF:67:1B:D4:DA:F3:8A:9B:45:36:32:FC:7D:05:20:21:54:A5:3F
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:77:d9:31:62:cd:b1:58:b5:8d:9c:fa:3f:bc:f7:e3:c5:d0:
         bb:8c:d6:96:35:da:9a:01:13:f9:40:85:b9:60:f3:65:5d:ae:
         a9:98:0c:e6:6c:1a:79:26:70:13:2a:74:28:37:04:76:46:ff:
         89:e9:96:10:b8:7d:d6:f8:2d:a6:1f:61:bc:63:49:4d:d2:b6:
         f4:e9:bb:a8:65:cb:46:97:88:28:1d:b1:8b:0b:70:ac:c2:ce:
         10:c5:87:69:31:a3:0c:0c:c2:6c:8c:f8:44:41:14:7b:6d:cb:
         53:5f:1d:9d:66:a1:28:43:fc:c9:13:75:d6:58:59:bf:bb:87:
         fe:66:cb:20:02:de:c9:7b:57:dc:cf:86:b0:f1:66:51:34:53:
         bf:c6:44:ab:2c:7e:b8:8d:af:ae:22:32:bb:7e:a7:ff:f3:fa:
         4d:f7:fd:cb:d9:aa:b6:4a:9d:aa:ac:c3:e5:25:e9:a4:b3:0d:
         54:d8:75:5d:18:01:8a:dc:81:3c:87:6b:d2:7e:4b:0e:e1:13:
         3f:87:eb:a1:6d:b8:9a:c3:3d:1c:a3:21:8a:a8:c7:5a:e3:fa:
         b7:f3:93:e4:40:74:b1:c5:3e:39:10:f3:0c:dd:dc:dc:97:42:
         f0:cd:33:20:bf:0b:4b:af:75:55:ca:97:76:20:a0:c7:00:a9:
         87:c2:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 12:18:22 2025 by rpki-client