Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369859B/87161A82241511EFB0FE6B347DDC24C2/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.mft
File:                     pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.mft (raw, json)
Hash identifier:          +kVJ1pDZVPVajoab53Uis6vcSD3e3tyJWbMlRDgBa1s=
Subject key identifier:   CE:22:31:C9:AC:0B:DA:F4:AE:52:A6:3F:16:C4:F7:61:12:A0:06:4D
Authority key identifier: A6:BF:90:F2:E5:7C:EC:9C:3B:0D:99:BE:E2:D2:9D:D0:18:6D:8F:8B
Certificate issuer:       /CN=F369859BAF/serialNumber=A6BF90F2E57CEC9C3B0D99BEE2D29DD0186D8F8B
Certificate serial:       01BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/87161A82241511EFB0FE6B347DDC24C2/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.mft
Manifest number:          01BC
Signing time:             Wed 13 Aug 2025 04:36:39 +0000
Manifest this update:     Wed 13 Aug 2025 04:36:39 +0000
Manifest next update:     Fri 15 Aug 2025 04:36:39 +0000
Files and hashes:         1: pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.crl (hash: LkuJRq+MURwJz6qvyDAbT+JjAAnM2UZc7Z3d1lfzT7M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/87161A82241511EFB0FE6B347DDC24C2/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/87161A82241511EFB0FE6B347DDC24C2/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAF, serialNumber=A6BF90F2E57CEC9C3B0D99BEE2D29DD0186D8F8B
        Validity
            Not Before: Aug 13 04:36:39 2025 GMT
            Not After : Aug 15 04:36:39 2025 GMT
        Subject: CN=689c1657-2b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:5a:f9:82:a4:cf:d3:f6:ab:07:61:fe:b0:
                    47:c6:f3:66:3b:98:8b:e0:b6:b2:8c:06:f3:69:46:
                    d6:99:fc:47:61:61:e7:21:9d:39:92:fc:0d:de:dc:
                    a6:14:75:15:94:ae:90:a0:b7:c5:d3:21:15:8e:7a:
                    56:b8:95:8f:a9:33:4b:30:25:d0:45:d8:71:6f:a5:
                    c5:05:b6:b8:d4:36:5f:96:b2:88:13:40:14:6b:1b:
                    5e:01:a7:61:75:bc:1e:b0:ad:92:b9:70:58:35:51:
                    14:48:0f:35:a2:9d:9a:86:2f:f5:8e:d6:c8:88:11:
                    1c:73:07:0c:fa:c6:16:61:d5:0b:ee:41:7d:b8:fb:
                    5d:e7:02:78:99:51:9e:e3:01:a3:72:9c:13:9c:8d:
                    f0:39:6c:d3:7b:3a:0b:63:b5:5b:d1:5a:7f:d7:17:
                    18:89:40:cd:df:7f:56:07:e4:7a:3c:86:81:dd:fe:
                    2f:3a:e3:e0:70:6c:22:a6:fc:a8:ca:27:fc:b4:c2:
                    b5:3f:e1:48:5e:10:fe:f3:be:ce:02:75:10:70:b1:
                    b2:35:94:9a:3d:64:f0:ab:80:17:44:c7:b0:1d:bd:
                    16:c5:f2:07:0a:d7:f6:26:38:95:0c:e9:46:bb:f4:
                    7c:2e:c0:38:13:0f:c2:10:b9:0a:f1:23:e8:9a:9f:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:31:C9:AC:0B:DA:F4:AE:52:A6:3F:16:C4:F7:61:12:A0:06:4D
            X509v3 Authority Key Identifier:
                keyid:A6:BF:90:F2:E5:7C:EC:9C:3B:0D:99:BE:E2:D2:9D:D0:18:6D:8F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/87161A82241511EFB0FE6B347DDC24C2/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/87161A82241511EFB0FE6B347DDC24C2/pr-Q8uV87Jw7DZm-4tKd0Bhtj4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:46:07:9d:ee:89:1f:03:79:6a:8c:71:35:ea:c1:80:08:
         1e:dd:cf:7e:e0:18:64:c3:68:1a:d0:b4:49:1f:62:6b:b7:89:
         76:1a:7c:a0:ac:e7:6a:a8:50:fa:64:85:7a:57:ce:03:ac:6b:
         7a:c6:45:d9:ab:36:a2:37:e9:f4:c5:70:9f:bf:41:c7:93:5c:
         36:b6:01:50:b3:7b:93:37:63:72:e2:01:12:33:6f:eb:92:4f:
         c5:15:fa:02:c0:ff:d6:03:33:d5:f0:4b:f8:1c:8d:74:2c:f3:
         05:d3:57:c5:3c:20:f7:76:c2:b1:89:c3:46:9e:84:da:cb:04:
         31:7e:13:bb:db:7b:c2:67:61:dc:f8:4d:9d:16:f0:2a:12:00:
         8e:59:12:90:6f:5f:29:8a:24:aa:ea:04:fd:47:cf:d3:48:13:
         bf:52:af:2f:fc:ae:24:4d:cd:3e:3d:cf:9e:ff:19:4c:65:e2:
         9a:fb:b3:82:3b:d2:c5:be:27:84:7b:df:74:8c:aa:bc:96:29:
         aa:b1:fd:22:b7:87:52:cb:a9:f6:1d:58:50:9b:7e:50:d7:00:
         3a:de:c6:57:88:cd:47:70:cb:d3:0e:d1:0e:af:d1:d8:f1:22:
         03:8b:ce:b8:7e:fb:d3:b3:ab:1e:db:5b:47:2d:74:4a:a2:c1:
         07:1e:53:c2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTg1OUJBRjExMC8GA1UEBRMoQTZCRjkwRjJFNTdDRUM5QzNCMEQ5OUJFRTJEMjlE
RDAxODZEOEY4QjAeFw0yNTA4MTMwNDM2MzlaFw0yNTA4MTUwNDM2MzlaMBgxFjAU
BgNVBAMTDTY4OWMxNjU3LTJiNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYpFr5gqTP0/arB2H+sEfG82Y7mIvgtrKMBvNpRtaZ/EdhYechnTmS/A3e
3KYUdRWUrpCgt8XTIRWOela4lY+pM0swJdBF2HFvpcUFtrjUNl+WsogTQBRrG14B
p2F1vB6wrZK5cFg1URRIDzWinZqGL/WO1siIERxzBwz6xhZh1QvuQX24+13nAniZ
UZ7jAaNynBOcjfA5bNN7OgtjtVvRWn/XFxiJQM3ff1YH5Ho8hoHd/i864+BwbCKm
/KjKJ/y0wrU/4UheEP7zvs4CdRBwsbI1lJo9ZPCrgBdEx7AdvRbF8gcK1/YmOJUM
6Ua79HwuwDgTD8IQuQrxI+ian5dTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUziIx
yawL2vSuUqY/FsT3YRKgBk0wHwYDVR0jBBgwFoAUpr+Q8uV87Jw7DZm+4tKd0Bht
j4swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4NTlCLzg3MTYxQTgyMjQxNTExRUZCMEZFNkIzNDdEREMyNEMyL3ByLVE4
dVY4N0p3N0RabS00dEtkMEJodGo0cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ByLVE4dVY4N0p3N0RabS00dEtkMEJodGo0cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTg1OUIvODcxNjFBODIyNDE1MTFFRkIwRkU2QjM0N0RE
QzI0QzIvcHItUTh1Vjg3Snc3RFptLTR0S2QwQmh0ajRzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfO0YHne6JHwN5aoxxNerBgAge3c9+
4Bhkw2ga0LRJH2Jrt4l2GnygrOdqqFD6ZIV6V84DrGt6xkXZqzaiN+n0xXCfv0HH
k1w2tgFQs3uTN2Ny4gESM2/rkk/FFfoCwP/WAzPV8Ev4HI10LPMF01fFPCD3dsKx
icNGnoTaywQxfhO723vCZ2Hc+E2dFvAqEgCOWRKQb18piiSq6gT9R8/TSBO/Uq8v
/K4kTc0+Pc+e/xlMZeKa+7OCO9LFvieEe990jKq8limqsf0it4dSy6n2HVhQm35Q
1wA63sZXiM1HcMvTDtEOr9HY8SIDi864fvvTs6se21tHLXRKosEHHlPC
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:38:09 2025 by rpki-client