Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier:          Kf1ZIcCdwR931xmyT0Ba1Y1JW1ReG9HQ1lc1YjibfjE=
Subject key identifier:   02:AF:D3:C6:A5:46:8E:6D:42:3D:2B:17:79:F1:EF:30:F2:1A:E6:39
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer:       /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial:       0199
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number:          0197
Signing time:             Sat 09 Aug 2025 04:50:40 +0000
Manifest this update:     Sat 09 Aug 2025 04:50:39 +0000
Manifest next update:     Mon 11 Aug 2025 04:50:39 +0000
Files and hashes:         1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: JDcieCc/qIkmy1DyrDcEZn/ND0uda0oSqI8yuxH7OCc=)
                          2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
                          3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 04:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Validity
            Not Before: Aug  9 04:50:39 2025 GMT
            Not After : Aug 11 04:50:39 2025 GMT
        Subject: CN=6896d3a0-1e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:e2:f4:07:c6:72:ce:96:c0:d2:5f:bb:87:
                    d3:c1:c8:77:cb:f2:7c:46:cd:34:1f:99:41:28:15:
                    43:fa:60:23:31:b2:3a:a6:b1:34:5d:9d:3f:f7:ab:
                    b8:2d:17:39:44:32:9a:7f:36:42:1a:4c:60:88:97:
                    b9:19:b6:ca:64:3d:7b:d5:b4:71:27:c4:40:e9:04:
                    6f:94:ad:53:12:66:ef:70:d0:c3:a1:6b:44:8d:6a:
                    91:1c:bb:49:e3:15:0f:23:e5:82:ff:8c:29:40:14:
                    68:25:63:f8:2f:e1:dd:3c:04:59:1f:3c:0a:29:7b:
                    96:06:68:55:b2:2f:f9:44:90:0d:80:2e:80:d5:10:
                    96:70:4c:0f:89:8f:fc:1c:77:72:c9:aa:e5:1a:32:
                    e6:1b:a8:a9:76:23:df:7d:d4:36:00:77:17:56:42:
                    f5:08:e6:d2:db:13:82:33:34:b1:92:f3:fd:3f:e7:
                    44:91:28:61:30:03:a8:6c:69:c8:8b:5a:7d:79:56:
                    36:62:c8:7c:37:82:b2:dc:80:1a:00:cb:42:91:55:
                    37:05:25:5d:fa:57:65:6f:c6:5b:07:0b:60:14:2f:
                    4c:5d:76:27:27:d9:ef:0f:c5:7f:31:ec:97:b2:c2:
                    57:05:80:84:fe:3d:2c:1b:2e:34:39:c3:3f:42:3c:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:D3:C6:A5:46:8E:6D:42:3D:2B:17:79:F1:EF:30:F2:1A:E6:39
            X509v3 Authority Key Identifier:
                keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:e2:7d:5d:10:ca:15:56:8c:d4:b2:a8:48:c5:2d:63:6b:
         5a:a6:52:33:d0:a7:65:0b:7a:eb:b1:85:ef:7e:b2:cc:91:cd:
         8c:25:24:b6:95:85:92:1b:84:3b:40:09:74:62:81:86:30:07:
         82:c0:5a:8e:b3:57:48:1b:44:82:e0:78:da:a3:c4:ac:b8:f5:
         ed:27:9a:f1:23:d1:2e:40:27:2d:f7:a8:a0:ac:44:81:81:ac:
         dc:ac:8a:a7:d9:78:04:d6:12:ef:65:83:25:25:64:ce:b8:69:
         1b:d6:4c:0d:91:cd:31:e4:1c:77:a4:a3:7f:6f:13:19:bb:3f:
         19:cc:d6:ef:69:a0:d8:b9:18:b5:22:74:bb:00:0d:2d:0a:33:
         64:a6:50:fc:e6:90:e9:da:e9:cc:80:42:03:88:c6:75:92:d8:
         f6:32:26:f9:f5:ed:83:57:5d:ed:2c:13:cb:5c:43:53:2f:09:
         ad:01:11:6a:f4:56:fa:b7:f1:f3:af:3f:56:e5:aa:8f:9f:fa:
         80:d3:91:4c:01:f8:e9:b0:1d:3b:66:94:09:aa:64:fe:d1:88:
         34:c6:91:6d:29:fe:5b:b1:d9:40:5d:94:5e:dc:aa:f9:09:65:
         ca:3e:5b:35:ae:d7:cc:0d:71:f4:a5:de:0e:73:04:9d:7c:2b:
         3f:a1:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:08 2025 by rpki-client