Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
File:                     _p4BMgoOlVJFOamGqPA_ketPwy0.mft (raw, json)
Hash identifier:          mqpMWJixga64+qYzWnSnoGoHnbxvCkXniPMd3FvpHI4=
Subject key identifier:   05:BA:3D:F9:73:E0:06:6F:8C:CB:97:E1:A2:07:39:6D:DF:E1:B9:AE
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Certificate issuer:       /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
Manifest number:          01F7
Signing time:             Tue 17 Jun 2025 04:22:46 +0000
Manifest this update:     Tue 17 Jun 2025 04:22:45 +0000
Manifest next update:     Thu 19 Jun 2025 04:22:45 +0000
Files and hashes:         1: _p4BMgoOlVJFOamGqPA_ketPwy0.crl (hash: PqTa7AtjrbvgrfRkFgABOh8M5KuZn6q00p3o8mdpGE0=)
                          2: 311C4904CA4B11EEB1A20B86775412E6.roa (hash: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=)
                          3: DC6D06E4CBEB11EEA9655CAB775412E6.roa (hash: rI3Z0thMS8kcuZHwZrlMXa6Fqk3EKGjdiGllXF+/6As=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
        Validity
            Not Before: Jun 17 04:22:45 2025 GMT
            Not After : Jun 19 04:22:45 2025 GMT
        Subject: CN=6850ed95-da2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:35:a8:a5:19:c2:8f:be:e1:a3:3b:21:0d:
                    21:a4:38:a3:c7:87:bd:54:9d:50:b5:7c:f9:71:47:
                    39:55:2d:e3:8c:c4:18:8d:11:68:67:18:c3:87:21:
                    74:91:e2:a3:4d:05:c2:57:55:80:74:fa:9a:a8:3f:
                    56:cb:ac:26:52:5f:48:6f:74:63:96:04:76:d6:09:
                    ed:f8:a2:af:d1:ee:b0:a5:ab:28:91:43:95:92:60:
                    4b:90:b0:8b:fa:35:61:d3:b2:f0:c8:79:42:91:77:
                    c9:a7:c4:3a:38:da:25:89:81:90:ab:ca:db:99:c9:
                    43:0f:7c:2d:45:66:e8:6b:d7:3c:32:87:51:43:5e:
                    55:de:2e:eb:d2:24:4d:8f:7f:a6:f1:1e:2f:d9:cc:
                    ee:b9:bd:75:a0:7a:86:24:45:16:af:bb:c1:af:2f:
                    62:52:f7:2a:5c:20:70:cc:43:0e:2b:01:89:51:83:
                    59:e5:20:c3:a9:5e:55:96:ea:5b:c8:87:60:bb:a5:
                    97:19:27:69:e0:27:11:3e:ec:c8:a3:d7:d0:05:f0:
                    87:e9:ad:30:ac:e2:fc:cf:74:9d:d1:35:49:7b:fd:
                    08:3e:99:26:a2:eb:20:e1:4a:ac:0b:3c:17:0f:7d:
                    b1:66:9a:12:b9:f1:d6:12:c6:95:26:0b:a4:b3:aa:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BA:3D:F9:73:E0:06:6F:8C:CB:97:E1:A2:07:39:6D:DF:E1:B9:AE
            X509v3 Authority Key Identifier:
                keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b0:5b:17:75:a3:f5:7b:e0:fb:f6:e8:05:3a:31:cb:c5:4a:
         3a:c9:06:1f:2d:02:9c:69:ba:6d:b2:22:bf:81:d6:92:94:79:
         c9:08:57:71:53:5a:d5:92:66:2c:e6:bd:46:18:bb:b8:f1:a6:
         0f:ca:a0:d8:fe:36:e8:64:98:21:11:5c:d7:68:d2:24:15:d6:
         72:7d:9b:e6:86:f9:af:c2:1f:ab:70:5c:d9:17:03:11:30:aa:
         c0:43:8f:47:d6:0e:44:24:e3:54:a9:f6:bb:89:fa:12:9e:79:
         08:6b:cc:bc:7d:32:c0:c1:fe:d3:33:49:a0:bb:31:1f:12:a7:
         69:d8:c3:78:37:7c:a8:c0:9f:46:1b:af:66:23:ec:c8:c4:39:
         61:0f:2d:89:50:e4:37:81:15:91:b8:42:8d:48:e7:8f:b3:2c:
         9c:82:08:8c:71:49:34:9d:6b:51:81:93:a5:a2:66:9c:d3:3a:
         0c:2f:11:87:40:c9:de:3e:63:10:ea:fb:c5:36:52:bc:67:92:
         73:40:4a:5a:45:0e:e9:6b:eb:27:0e:b7:41:64:ea:2e:2f:81:
         c8:83:cc:2e:be:be:6c:01:5c:b1:ea:a8:7f:16:1a:eb:c6:52:
         62:9d:7f:fb:8a:71:d1:9a:6b:1c:02:5f:a6:8d:e9:6e:fa:e5:
         33:48:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:57:31 2025 by rpki-client