Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
File:                     FrjfWzvnTBrmjjHBcBFapze9XnA.mft (raw, json)
Hash identifier:          tWb85tDjoGH88ca+azNA9rkUrxhuirFfUJyBoQqekp4=
Subject key identifier:   4B:CF:A7:1E:92:A4:DA:A4:8B:EC:6B:CC:61:44:7A:D7:0C:4D:EC:0E
Authority key identifier: 16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
Certificate issuer:       /CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
Certificate serial:       057D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
Manifest number:          057C
Signing time:             Thu 19 Jun 2025 02:35:31 +0000
Manifest this update:     Thu 19 Jun 2025 02:35:30 +0000
Manifest next update:     Sat 21 Jun 2025 02:35:30 +0000
Files and hashes:         1: FrjfWzvnTBrmjjHBcBFapze9XnA.crl (hash: ySGMXDC9llYUzYWAoDInBvWPdYjMeZm8LTQzvYSr1rc=)
                          2: DF0B42061D3011ECBD63FB02D8A014CE.roa (hash: /YQXCdcgCrNhLL360EhRhY7BDY5J8NgmUeOOyfGlQ8Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Jun 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668A5FAF, serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
        Validity
            Not Before: Jun 19 02:35:30 2025 GMT
            Not After : Jun 21 02:35:30 2025 GMT
        Subject: CN=68537773-038d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:51:9a:bd:6d:e2:15:5d:3c:c0:86:db:da:
                    c7:ee:41:72:aa:55:c0:03:a5:f0:ff:02:ac:9d:84:
                    d4:01:d7:4c:7b:7a:39:28:89:e0:e9:7e:a8:e9:76:
                    41:55:c8:9f:4f:36:55:29:b8:8e:46:0d:a2:2d:f4:
                    7b:b4:8f:d8:57:60:4b:c4:82:bc:7d:d1:ce:54:6f:
                    b5:a3:cb:e7:86:d8:f5:db:97:6c:cc:54:91:75:b0:
                    ab:eb:25:0b:1e:dd:62:4c:a9:89:38:e8:27:a7:68:
                    e0:14:bd:87:ac:bb:b9:a8:d9:5e:8c:83:85:a9:4e:
                    f9:38:03:02:8d:31:5b:67:16:9d:ae:3c:43:45:99:
                    83:9b:52:35:a9:68:cf:5c:76:6e:31:a6:ee:70:42:
                    5f:9b:8a:9d:fc:30:97:fa:93:1b:30:ae:9f:c9:2d:
                    de:c9:c0:c2:c4:1c:5f:f9:51:cd:9f:c7:c8:63:60:
                    7d:3f:a5:ca:a3:72:6c:a9:8d:eb:c0:0e:3b:e2:ff:
                    73:00:48:0b:ee:4d:e3:02:62:d0:c6:df:da:57:e0:
                    16:fc:43:73:b2:12:a6:41:31:da:f3:4f:83:56:db:
                    53:62:5f:5d:8d:ba:58:0a:eb:5a:2c:23:65:c2:b2:
                    a0:55:dc:de:e1:31:7d:de:ac:ed:dc:e3:ad:66:3a:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:A7:1E:92:A4:DA:A4:8B:EC:6B:CC:61:44:7A:D7:0C:4D:EC:0E
            X509v3 Authority Key Identifier:
                keyid:16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c4:2f:c5:e2:54:fc:6c:13:e0:65:d3:6f:91:a0:d9:66:21:
         dc:84:d2:65:42:94:af:ba:7d:26:b8:24:2e:7d:77:80:27:1d:
         ef:02:78:1d:5c:6a:80:d0:9a:3d:7b:89:e7:a1:79:ae:b5:4b:
         d9:f0:b0:8f:89:1d:79:d2:dc:29:48:5b:2f:f6:da:60:c8:b3:
         b3:29:f4:42:2d:87:12:34:38:d6:24:bc:76:c3:2d:ce:50:83:
         84:12:28:44:ec:48:b1:7d:5e:f2:5e:47:15:91:38:ce:5c:e8:
         d3:50:fa:01:af:b2:ea:c1:4d:af:77:45:ab:72:7a:74:2c:7a:
         40:cb:12:87:2b:8b:ae:c9:01:33:74:7b:76:7f:60:4e:9a:03:
         6c:78:11:4d:f6:a4:ac:b4:96:23:14:87:2d:51:cb:3d:99:f8:
         8d:7a:72:35:c1:63:ea:ca:0b:df:69:a1:fe:db:a9:18:11:ee:
         c9:b4:02:ae:c3:9f:c3:c2:58:a1:e4:b2:f6:3f:28:29:e8:c1:
         1c:7c:b8:bc:26:fd:ee:ef:56:51:34:87:b1:94:c8:4a:da:20:
         07:d0:15:89:b1:f5:1a:b3:19:a6:6e:59:25:47:92:2a:c4:c4:
         60:06:15:e1:41:f4:2a:2e:60:5c:96:64:75:27:df:cd:b9:aa:
         53:74:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:14:12 2025 by rpki-client