Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          vBxG6nXO0mx4lBrY0kytIjGPyYMSKHBb2dYqI0QCi1E=
Subject key identifier:   9C:A1:37:DC:B0:5F:66:0A:28:13:64:C0:9E:33:63:06:53:1D:6C:43
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       0753
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          0753
Signing time:             Mon 04 Aug 2025 02:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:51 +0000
Manifest next update:     Wed 06 Aug 2025 02:00:51 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: vqpcRahcD/kEIK/3xknbsixP7h7H6f2q02W6RcZqTyI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875 (0x753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Aug  4 02:00:51 2025 GMT
            Not After : Aug  6 02:00:51 2025 GMT
        Subject: CN=68901454-3a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:df:43:26:83:d8:c1:a8:93:20:8b:86:42:
                    54:d6:78:50:0d:83:5e:0d:77:3d:30:f1:ca:14:8a:
                    f3:c6:aa:38:48:12:a6:6d:95:4b:5b:8f:bb:61:4c:
                    41:02:2d:b8:c1:aa:8d:bd:44:3a:8e:fc:ef:c3:12:
                    ab:65:6f:07:46:6b:b4:e6:e4:20:32:07:1b:b5:42:
                    ac:a1:a0:8d:09:91:78:da:47:5e:30:9f:52:ff:8a:
                    38:7b:9a:b0:01:11:95:23:77:d0:e6:88:d3:80:45:
                    82:fa:05:ac:3f:28:a2:4d:d6:ac:32:70:b4:b5:d7:
                    61:17:05:73:a4:bb:06:4b:32:b3:ce:65:75:16:ed:
                    0d:ae:e0:1d:e5:c1:8b:84:c5:ed:e7:f8:d5:e6:90:
                    86:43:4b:ec:34:56:51:ab:c4:5e:ab:51:87:d2:60:
                    77:07:28:10:f2:07:8c:28:90:b3:e9:dc:15:62:3e:
                    c4:99:3e:31:3e:1d:cd:94:c8:09:1a:9c:b4:b8:86:
                    be:b4:a5:d9:ee:b1:49:49:57:a6:7d:f4:d9:05:8d:
                    61:c7:51:e3:e5:9c:4b:3d:9a:49:9f:95:9b:17:ed:
                    d6:a0:7e:12:4d:fb:9c:a8:e9:6b:6c:9b:e9:a5:e6:
                    6a:d4:42:40:4d:10:74:97:01:63:fb:b1:36:fc:5e:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:37:DC:B0:5F:66:0A:28:13:64:C0:9E:33:63:06:53:1D:6C:43
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a3:a8:75:c6:b1:7e:44:a6:ed:e1:59:32:2f:2a:3c:fa:41:
         d9:e9:c3:2e:5a:1c:55:a2:67:30:20:4c:7f:fe:07:55:9d:ea:
         19:91:9d:6e:27:f0:ab:51:e9:cc:85:4d:ba:74:60:66:68:fc:
         b9:a8:cb:f1:4a:42:34:80:1c:cc:9c:40:79:22:74:9e:6c:1a:
         4b:ad:b5:83:a6:6a:d2:5e:67:71:ee:a9:13:d7:1f:34:33:e7:
         d8:3b:44:03:b9:d5:44:a5:be:61:e3:bc:4e:a8:54:2b:1a:b0:
         1a:b2:70:ce:55:06:b0:20:eb:fd:c4:c4:ba:01:17:74:44:38:
         41:02:82:af:6f:08:d7:2c:c8:ab:20:67:e3:c0:bc:25:53:3e:
         77:21:ac:2e:a0:34:52:41:26:76:14:7a:82:74:30:8c:ed:17:
         cf:60:49:21:37:f9:3b:2b:d8:08:2e:0f:31:7b:a7:0e:09:e5:
         76:35:32:de:85:09:73:0e:b9:7a:78:5c:54:ac:b9:f7:1a:ab:
         8c:db:5f:4d:80:3d:c5:3f:7c:cb:42:ab:7d:4c:40:61:cb:84:
         df:35:4a:4b:80:af:3f:6f:d7:db:da:50:41:8e:be:9f:7e:37:
         86:47:39:9b:4c:c4:aa:a2:04:92:e3:1d:bc:c0:9f:00:7d:5b:
         b3:7d:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:34 2025 by rpki-client