Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          bYnT7J3/ckwIjIi4ZziLsTDy0jh//9rMR2G64dl6IhQ=
Subject key identifier:   65:7B:1C:A1:F8:82:59:5F:05:52:FE:34:38:73:CF:64:BC:8F:40:DA
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0750
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          06D9
Signing time:             Tue 05 Aug 2025 02:13:03 +0000
Manifest this update:     Tue 05 Aug 2025 02:13:02 +0000
Manifest next update:     Thu 07 Aug 2025 02:13:02 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: L6lNpqARQ76SRRTh4eJXMx27zW4I76o7XjqekrTDatg=)
                          2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          3: 5F979E9070A411F08F4A2B88DAE4EC9C.roa (hash: oNqByPhBBJ1htVBkc+f7x31T+TEkAn2zK+9I2YYhDCM=)
                          4: F4BCC95070A411F0BBDB9A8CDAE4EC9C.roa (hash: 83F8y3L0D+zHhgnFhLiisgnDmRUE03Z7p+znIjRXZf4=)
                          5: 88CC23B4E20911EFAA4FEA71762E951A.roa (hash: qKFGTwFhsiiCCXBqchw56kIQ8Z0gTmXSHl71yzG85Xg=)
                          6: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          7: 0CA767AC70A811F0896F719EDAE4EC9C.roa (hash: SP0RSUZ6bVUNGUKHrurAD/wGVrwxMlkmsVFklO79tfM=)
                          8: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          9: 40BD1AEA710811F0BBFCC79FDAE4EC9C.roa (hash: 0kr/kH4+wxBld2vJuwRH1Iwyn6s6iUt+vPvZo3OMSa4=)
                          10: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=)
                          11: D08D8404E20911EFB7BBBB72762E951A.roa (hash: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=)
                          12: DBDA3FB470A711F0B88B119EDAE4EC9C.roa (hash: axiTfA/diVYZQy4/dHV87nWcafawVELUdWWjzoPj6fs=)
                          13: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=)
                          14: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          15: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          16: E4D6EBE870A811F09D8BE6A2DAE4EC9C.roa (hash: KhPzOb5Q/r1I/qMg4YpHuENyqA7i6YjES8U96N77LE4=)
                          17: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=)
                          18: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          19: F5E0077470A511F0A28E6091DAE4EC9C.roa (hash: olkTbE4QbxbPkWlsZsWQVx1rik/z1UUUs7RwAguoeD8=)
                          20: 43B0C19E70A811F0BD8ABE9EDAE4EC9C.roa (hash: kpNIWqGT4YJ8C+vpdAQD9jq8+Ez+Gm5AkhIfWGQ3IsA=)
                          21: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=)
                          22: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 Aug 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Aug  5 02:13:02 2025 GMT
            Not After : Aug  7 02:13:02 2025 GMT
        Subject: CN=689168af-6af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:86:ed:d1:a9:71:5f:58:49:bc:03:d1:6b:
                    44:8a:4d:24:0e:83:09:c0:bc:60:4b:18:a0:5b:8f:
                    63:51:f3:39:34:b2:c9:24:c3:56:84:41:32:65:e2:
                    87:87:26:b8:7f:37:c4:3a:89:7b:da:cb:27:1c:cc:
                    2f:b4:45:da:02:a0:94:84:31:6a:7a:bb:b5:f2:15:
                    8d:0a:91:32:d3:c8:9e:3f:38:ae:4b:1c:6b:c4:1b:
                    68:db:99:85:d1:b2:77:67:ab:a6:09:88:92:49:44:
                    9b:41:22:10:6b:46:d1:84:0e:28:d0:3e:98:1c:82:
                    77:fd:26:f0:e1:11:ff:7f:7c:f5:22:4a:d7:0b:f3:
                    ac:c1:85:90:4d:51:71:3d:1c:21:be:c9:ec:cd:4b:
                    40:29:0c:55:1a:86:45:3b:6a:ff:23:28:9c:8b:43:
                    1e:0d:21:64:8f:49:c7:38:50:38:fd:b6:e8:d0:3f:
                    5d:88:f2:8b:ea:4d:8f:6b:a8:bf:40:a6:4b:30:2b:
                    06:fc:84:7a:96:db:e6:63:f4:fe:ba:98:6b:6e:3f:
                    12:53:8f:e7:71:4c:e2:9e:22:74:cb:88:45:e7:67:
                    79:d8:0b:ff:d5:ef:e6:21:ac:ed:26:37:23:cd:b8:
                    33:e9:6b:41:80:41:83:3a:53:91:f8:3a:1e:d7:13:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:1C:A1:F8:82:59:5F:05:52:FE:34:38:73:CF:64:BC:8F:40:DA
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:13:fb:dc:54:8e:3c:96:e9:5c:d1:c9:47:da:fc:25:c5:a9:
         74:7b:7e:1e:c8:90:28:c7:f3:8e:e2:2b:e8:cd:76:50:49:9a:
         0a:a3:bb:e6:e2:5e:b8:98:2a:20:a7:f0:5d:ba:e6:6f:1d:a8:
         2f:d2:42:dc:3e:36:91:79:a2:4f:f1:b8:be:67:6e:04:a9:ac:
         b2:07:da:65:14:17:b6:01:ee:96:64:ef:0e:c5:92:38:1f:3a:
         62:14:11:8c:26:b1:ae:80:ac:a9:fd:a5:07:b3:1e:a9:ee:f6:
         eb:c7:d8:93:88:67:41:64:82:b2:f1:c1:fd:9d:dd:9e:2f:fa:
         41:37:c5:e5:52:90:ac:58:8b:ee:44:1e:c5:c1:04:b8:7d:73:
         a1:d3:0e:52:2f:46:1b:9f:66:be:2d:a8:59:f6:0a:29:71:fb:
         5c:6f:a0:ee:17:e6:2d:73:21:8a:b9:98:18:2d:ac:42:30:90:
         f1:39:63:77:b1:44:d1:95:4e:42:5e:1a:ab:3a:38:fb:47:e0:
         3b:85:86:a9:01:57:2c:cc:5a:f1:6f:50:ad:a2:3f:ea:68:3b:
         d1:3e:72:88:7b:84:a0:07:39:72:1d:49:b7:44:dd:b9:1b:b5:
         cb:63:83:86:ae:7f:64:bc:b5:7b:f8:64:0a:ee:27:d6:1c:97:
         a0:a7:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:46 2025 by rpki-client