Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
File:                     GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft (raw, json)
Hash identifier:          Z27oR1Takibkaz8jPye/xe9CowP5rImSww9SbwNvIxM=
Subject key identifier:   6D:B8:E4:5B:B0:1A:22:81:89:25:83:AA:74:3E:8D:05:FD:42:61:F9
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Certificate issuer:       /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial:       0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
Manifest number:          0E
Signing time:             Mon 04 Aug 2025 05:31:22 +0000
Manifest this update:     Mon 04 Aug 2025 05:31:21 +0000
Manifest next update:     Wed 06 Aug 2025 05:31:21 +0000
Files and hashes:         1: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl (hash: WXvo0+CJr2yD9ktQ9GYqC7B6cf+WOLNQGhkpAXt+j2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
        Validity
            Not Before: Aug  4 05:31:21 2025 GMT
            Not After : Aug  6 05:31:21 2025 GMT
        Subject: CN=689045aa-609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:cf:f9:93:b6:17:99:e4:72:18:b5:6f:de:
                    0b:e5:7d:6e:64:f3:9b:6a:ed:22:45:ea:d4:f6:fe:
                    39:96:3f:f6:88:79:7a:77:f5:de:0f:06:62:a1:8c:
                    3e:46:c3:7b:fd:52:02:50:08:f9:16:92:ca:96:79:
                    3e:ff:30:49:de:3c:cb:a4:c2:de:5b:36:08:23:a9:
                    eb:e3:93:69:50:70:4d:c4:fa:0d:00:34:40:a8:c7:
                    64:5b:e4:a9:aa:65:b8:86:08:e9:79:d9:02:49:5a:
                    14:55:49:82:67:71:40:6c:da:4b:7e:e8:dd:ab:4d:
                    e3:ba:3d:fd:eb:cb:ac:a3:05:99:3b:ef:6a:f1:ab:
                    11:13:0a:16:aa:1d:b3:77:84:1d:a2:76:55:2c:5a:
                    9f:a3:a7:28:30:cb:5b:1a:54:b2:c3:ee:e5:65:9c:
                    3f:16:53:59:dc:5e:a7:c3:52:92:54:dc:89:bd:b2:
                    78:8e:d2:9a:31:9d:51:e0:68:cb:d8:92:b4:6d:5b:
                    2c:ef:bc:29:e8:52:a0:94:ca:c4:07:9f:c9:f3:3a:
                    46:3b:e6:c1:6f:24:3f:d3:35:ec:8b:82:a0:6b:c4:
                    f8:ac:e2:74:3a:5e:00:d3:8f:44:0a:76:d6:81:f5:
                    9a:52:53:e6:92:7b:33:b5:2d:04:38:5a:84:70:36:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B8:E4:5B:B0:1A:22:81:89:25:83:AA:74:3E:8D:05:FD:42:61:F9
            X509v3 Authority Key Identifier:
                keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:34:18:f5:08:8d:2d:d5:76:93:e0:71:e5:3b:80:e7:5d:c7:
         05:1a:55:c1:ed:64:47:ed:b4:c6:98:56:dc:66:16:03:ca:1c:
         ae:2c:fb:b4:3e:1d:1f:23:f3:05:cd:df:7c:51:cc:7c:04:7c:
         ad:33:2a:69:c6:57:4c:9b:42:9e:de:e7:4e:8f:da:f1:e7:0c:
         3a:54:43:eb:da:15:db:d7:d0:52:7a:83:d8:71:56:95:b0:3b:
         9c:6a:a4:bb:e8:5b:eb:d8:fe:f9:e8:a8:89:e9:f9:af:d3:83:
         36:33:9c:68:fb:9d:f5:06:bb:62:17:f6:c0:ab:4d:0a:e2:0a:
         8f:bf:c1:62:2f:77:98:23:6b:91:63:d0:d0:6b:e7:92:81:ef:
         3d:72:69:7b:62:1d:0a:c3:c1:ce:10:b4:3a:c6:28:36:e5:e9:
         d6:26:76:cc:3e:c0:71:bb:7f:ae:c3:ed:30:46:a6:90:ae:03:
         7a:07:46:6c:fa:d2:84:86:e8:5f:f8:7c:1f:5b:c9:a5:0e:7a:
         87:42:39:76:4c:f2:fa:aa:34:2f:7c:1a:aa:cc:ed:fe:92:41:
         84:a1:41:59:82:6e:ff:b7:ca:8c:af:68:30:91:93:90:c8:58:
         0d:9b:21:e1:d5:02:c1:39:79:a8:2f:90:89:b8:b2:2c:6c:80:
         ca:3b:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:00 2025 by rpki-client