Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/eoXJDqCjZibbdtCBhBlxf1BSqXQ.mft
File:                     eoXJDqCjZibbdtCBhBlxf1BSqXQ.mft (raw, json)
Hash identifier:          yeEvRkU/IS5SBIIvx3mafNgKjpJxYi+RCKdO6T4on1I=
Subject key identifier:   05:0C:4C:CC:D5:4F:1E:65:7C:B0:AB:F2:B5:73:C3:98:E6:D1:DE:6B
Authority key identifier: 7A:85:C9:0E:A0:A3:66:26:DB:76:D0:81:84:19:71:7F:50:52:A9:74
Certificate issuer:       /CN=F3668DF0AF/serialNumber=7A85C90EA0A36626DB76D0818419717F5052A974
Certificate serial:       064A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eoXJDqCjZibbdtCBhBlxf1BSqXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/eoXJDqCjZibbdtCBhBlxf1BSqXQ.mft
Manifest number:          0647
Signing time:             Mon 11 Aug 2025 02:20:08 +0000
Manifest this update:     Mon 11 Aug 2025 02:20:07 +0000
Manifest next update:     Wed 13 Aug 2025 02:20:07 +0000
Files and hashes:         1: eoXJDqCjZibbdtCBhBlxf1BSqXQ.crl (hash: zqr+bbZxH4+2h+NHA1ScbK+6wKownugfhI7wrArQ95A=)
                          2: B513DD4EB12811EE845B43A3775412E6.roa (hash: 23iFyGrEDIoBPKpQ2K34ubdkhxpq5BHCXQKYTlSc7hU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/eoXJDqCjZibbdtCBhBlxf1BSqXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/eoXJDqCjZibbdtCBhBlxf1BSqXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eoXJDqCjZibbdtCBhBlxf1BSqXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668DF0AF, serialNumber=7A85C90EA0A36626DB76D0818419717F5052A974
        Validity
            Not Before: Aug 11 02:20:07 2025 GMT
            Not After : Aug 13 02:20:07 2025 GMT
        Subject: CN=68995358-8871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:99:22:36:d9:d4:e2:cd:79:63:ba:2c:f7:df:
                    a6:89:df:11:34:58:de:c2:8c:22:dc:05:03:eb:d7:
                    05:f7:b3:14:a3:16:5a:1e:31:2c:d6:82:32:b3:f8:
                    4f:e7:a6:7c:11:78:f3:e2:da:09:41:fa:6f:d0:86:
                    6c:b1:a8:8c:73:a9:ec:ee:3e:12:6f:5f:33:d1:4e:
                    28:af:31:b1:3d:cb:ed:07:6c:d2:61:54:33:4f:eb:
                    d2:85:5d:03:62:38:f5:ce:d1:77:00:7f:27:39:62:
                    7b:71:9b:e5:cf:06:8b:1f:76:47:78:67:35:ab:14:
                    15:38:d7:bf:0c:3b:83:42:c5:30:71:28:50:1c:40:
                    b5:88:ac:a2:13:69:bc:65:0c:bc:8e:34:6c:5d:24:
                    c4:0a:7d:d4:68:f3:92:10:67:91:16:0f:87:6d:a9:
                    60:29:b3:74:b8:ff:9f:98:a4:08:ad:d3:65:f2:bf:
                    7e:ab:ff:bb:0e:fb:44:f8:eb:90:86:45:86:35:20:
                    db:a7:bc:9a:7d:02:17:8f:96:ab:f7:08:9c:9f:14:
                    2c:6a:4d:20:9b:4a:5f:b4:fc:02:33:cf:05:a4:80:
                    e3:df:13:e5:23:e8:82:c8:d9:04:0c:66:17:63:5b:
                    ee:32:2b:ed:54:d5:05:aa:e7:3d:2e:96:d6:4f:76:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:4C:CC:D5:4F:1E:65:7C:B0:AB:F2:B5:73:C3:98:E6:D1:DE:6B
            X509v3 Authority Key Identifier:
                keyid:7A:85:C9:0E:A0:A3:66:26:DB:76:D0:81:84:19:71:7F:50:52:A9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/eoXJDqCjZibbdtCBhBlxf1BSqXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eoXJDqCjZibbdtCBhBlxf1BSqXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/eoXJDqCjZibbdtCBhBlxf1BSqXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ad:e9:45:4e:fd:53:51:77:56:89:96:2e:b4:57:07:e8:ae:
         ab:54:d4:b1:93:c4:06:13:9e:1c:50:8b:62:da:70:ce:76:8e:
         24:4a:75:5c:40:b7:f4:6c:4d:35:a1:03:8e:cf:07:38:56:6d:
         61:39:90:dc:56:37:30:b0:47:28:2c:4b:b9:a7:54:37:eb:d0:
         88:cc:4d:96:72:56:48:3b:23:11:91:12:95:60:0a:c2:80:40:
         26:4a:24:22:f0:a7:8a:6c:f9:eb:dc:2f:77:b0:68:55:af:dd:
         63:d2:88:47:44:38:49:ae:cb:f6:91:2c:ed:e0:14:1d:b1:8f:
         cc:01:fb:6f:f8:a3:00:b4:f3:ec:e3:de:d0:f1:34:a2:b2:2c:
         ec:5c:dd:aa:7b:6e:c9:47:27:5d:b1:aa:ae:0a:24:10:83:a4:
         ac:65:d4:43:cc:b7:91:3c:8a:88:f2:7b:e9:ea:91:03:64:e4:
         3e:fd:d3:5b:50:bf:d2:5a:98:83:21:da:bb:98:b9:62:24:2b:
         e0:9e:2f:5d:b9:fa:79:82:5c:ba:79:be:3b:e7:9f:f0:0e:5b:
         df:7a:da:ce:dd:95:eb:c5:20:da:88:0d:fb:ca:ec:59:d1:8d:
         b9:40:b6:ee:7f:22:48:48:ab:15:65:1f:43:a3:af:62:a8:0f:
         9f:4e:d4:a8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBkowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhERjBBRjExMC8GA1UEBRMoN0E4NUM5MEVBMEEzNjYyNkRCNzZEMDgxODQxOTcx
N0Y1MDUyQTk3NDAeFw0yNTA4MTEwMjIwMDdaFw0yNTA4MTMwMjIwMDdaMBgxFjAU
BgNVBAMTDTY4OTk1MzU4LTg4NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDomSI22dTizXljuiz336aJ3xE0WN7CjCLcBQPr1wX3sxSjFloeMSzWgjKz
+E/npnwRePPi2glB+m/QhmyxqIxzqezuPhJvXzPRTiivMbE9y+0HbNJhVDNP69KF
XQNiOPXO0XcAfyc5Yntxm+XPBosfdkd4ZzWrFBU4178MO4NCxTBxKFAcQLWIrKIT
abxlDLyONGxdJMQKfdRo85IQZ5EWD4dtqWAps3S4/5+YpAit02Xyv36r/7sO+0T4
65CGRYY1INunvJp9AhePlqv3CJyfFCxqTSCbSl+0/AIzzwWkgOPfE+Uj6ILI2QQM
ZhdjW+4yK+1U1QWq5z0ultZPdmYJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBQxM
zNVPHmV8sKvytXPDmObR3mswHwYDVR0jBBgwFoAUeoXJDqCjZibbdtCBhBlxf1BS
qXQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4REYwLzBEQ0QwRjJBQUNCNjExRUI5OTlEQzAxM0Y4QUVBMjI4L2VvWEpE
cUNqWmliYmR0Q0JoQmx4ZjFCU3FYUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VvWEpEcUNqWmliYmR0Q0JoQmx4ZjFCU3FYUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjhERjAvMERDRDBGMkFBQ0I2MTFFQjk5OURDMDEzRjhB
RUEyMjgvZW9YSkRxQ2paaWJiZHRDQmhCbHhmMUJTcVhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFrelFTv1TUXdWiZYutFcH6K6rVNSx
k8QGE54cUIti2nDOdo4kSnVcQLf0bE01oQOOzwc4Vm1hOZDcVjcwsEcoLEu5p1Q3
69CIzE2WclZIOyMRkRKVYArCgEAmSiQi8KeKbPnr3C93sGhVr91j0ohHRDhJrsv2
kSzt4BQdsY/MAftv+KMAtPPs497Q8TSisizsXN2qe27JRyddsaquCiQQg6SsZdRD
zLeRPIqI8nvp6pEDZOQ+/dNbUL/SWpiDIdq7mLliJCvgni9dufp5gly6eb4755/w
DlvfetrO3ZXrxSDaiA37yuxZ0Y25QLbufyJISKsVZR9Do69iqA+fTtSo
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:22 2025 by rpki-client