Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          QOkVc6UJcoi0kS2goi31uUxQVR8pIszgMfarM4ZftJo=
Subject key identifier:   51:54:4E:D1:5A:BF:90:53:9C:31:BC:90:7B:B3:AB:F8:3D:BA:F5:F6
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       07A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          07A1
Signing time:             Wed 18 Jun 2025 08:50:30 +0000
Manifest this update:     Wed 18 Jun 2025 08:50:30 +0000
Manifest next update:     Fri 20 Jun 2025 08:50:30 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: FCaV31AoyZ2B6v7ft4JIS8P4LLGbzaxPsH8YdOhbtrY=)
                          2: C7468CE2E77811EEA1A05FC9775412E6.roa (hash: /c7WzEE1XWOd4nr8e22x2r+tmERk1nvGspmezFZ5FXU=)
                          3: 323F5EAC7AEF11EABF68BC13F8AEA228.roa (hash: cAtHhpCyL7sXJPk4hLfJU0qk1+tqkF5Y8qrGns8hrrg=)
                          4: 94A8D362E77811EE9100CFC8775412E6.roa (hash: PQ9VdjuHSh6kOFkT99/RDdKUFZgKf41yYceEmNn3R/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 08:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Jun 18 08:50:30 2025 GMT
            Not After : Jun 20 08:50:30 2025 GMT
        Subject: CN=68527dd6-17f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:37:a4:4a:ee:a4:98:19:c9:78:2f:47:8e:
                    c2:40:a3:d7:14:62:0d:51:7d:89:dd:7c:06:00:c6:
                    b0:df:40:4b:93:b6:20:ca:aa:ce:75:82:a8:a0:9e:
                    ef:ab:3e:c0:f2:42:ac:10:a4:97:44:4a:c0:70:1f:
                    2c:eb:5b:6b:7a:17:c1:e5:ea:c9:dc:9c:0d:76:b2:
                    6e:ac:21:f1:62:d6:2b:ed:8c:73:43:e3:2b:d3:95:
                    aa:46:9f:8e:e4:54:87:79:31:83:fb:82:c6:d2:89:
                    c2:26:8c:66:b2:fc:71:6d:82:fb:95:75:67:d9:e2:
                    3b:b2:9e:12:7b:33:fd:44:50:69:e9:88:b4:0e:26:
                    c3:8a:b4:d2:74:9c:69:83:60:c9:12:bf:14:34:cd:
                    20:dd:0b:b7:c5:5f:b2:31:25:bf:eb:54:f0:5d:35:
                    63:13:77:31:83:ab:1c:b4:1a:2b:22:24:2f:a2:76:
                    0b:80:99:07:40:d4:e3:74:17:5d:91:67:0b:88:b9:
                    7b:a6:9e:0f:67:cd:47:fe:2d:b8:03:39:f5:19:62:
                    f3:2f:47:0b:56:6a:40:ca:99:94:68:9c:cf:f6:cb:
                    a6:39:58:f6:38:d4:19:3a:2b:68:6b:22:7a:2b:b4:
                    6c:ba:fc:de:1b:ff:8c:2d:e7:b5:d6:d6:49:1b:72:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:54:4E:D1:5A:BF:90:53:9C:31:BC:90:7B:B3:AB:F8:3D:BA:F5:F6
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:c5:8e:3c:9b:bd:69:67:27:a2:d5:d1:1c:69:56:8f:81:
         81:71:a6:ef:2b:14:47:4f:b4:f9:66:89:40:48:a3:b4:bc:c2:
         96:98:91:8a:83:d2:17:26:8a:49:20:51:21:a3:eb:e5:f8:93:
         92:52:66:f2:e0:7e:6b:1e:81:dc:08:c5:8e:aa:c0:1f:72:81:
         ac:13:c9:f7:54:05:9b:33:e0:65:ed:d5:25:5d:02:5b:ad:75:
         b4:aa:b7:a3:d9:f5:7d:90:dd:ec:0d:5d:01:46:7a:a7:a9:87:
         76:13:89:b9:1d:b7:aa:6f:91:d9:99:55:ec:12:db:8b:9b:b5:
         79:dd:f7:1d:50:52:82:a9:d9:e8:ab:a6:65:db:93:1e:82:5f:
         14:ff:61:23:d0:07:ee:4c:a5:9f:1e:1e:da:03:4d:e6:06:16:
         ab:ab:97:9f:27:eb:a4:79:c7:c7:1d:11:10:9d:2b:6c:c7:d3:
         b1:92:02:7f:1b:c8:3b:58:d7:06:09:9f:8c:20:37:49:63:e1:
         8f:fa:e7:65:7b:78:a0:55:48:ba:a0:dd:6a:8d:56:06:41:5b:
         09:0a:5c:88:03:90:6b:19:c3:88:37:68:e5:b4:d5:11:73:69:
         0c:54:88:26:68:c6:77:b0:e5:d0:0a:c5:bc:24:c1:f8:4d:1d:
         02:e9:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:05:38 2025 by rpki-client