Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
File:                     XriN9L-QidcEmh--gAXmIequhis.mft (raw, json)
Hash identifier:          gTJFf1IbT6wxamOcdEEz+2kH0qp1LP8VDYkHmGSk1Z4=
Subject key identifier:   A9:DC:BE:24:4B:DC:10:78:08:13:CB:E0:C4:98:06:44:CD:A1:E9:42
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Certificate issuer:       /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial:       083B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
Manifest number:          0824
Signing time:             Sat 09 Aug 2025 01:49:58 +0000
Manifest this update:     Sat 09 Aug 2025 01:49:57 +0000
Manifest next update:     Mon 11 Aug 2025 01:49:57 +0000
Files and hashes:         1: XriN9L-QidcEmh--gAXmIequhis.crl (hash: ZYXO5aB8JmbfVnBPyAtnlVDV7iMEhyFBrqD6ba5/i08=)
                          2: 6E72E470BB7711EA81C17268F8AEA228.roa (hash: COX4w/jxxz6FilKDwda77AXXF6hQ4KkSqj9A8makL9E=)
                          3: 4240206CB6A811EAB1BB832FF8AEA228.roa (hash: iCq6/gFL3W7WK6Z6bjLnYmu6Mw0Dp25G63lqs3EndEM=)
                          4: C63C8128B69711EA97FF0A1FF8AEA228.roa (hash: bIk7dIWbWl/XKAWXBSykBpufOHSJfKEIhHA3UnMJ3FA=)
                          5: ACEC39FEAF0111EABB62A281F8AEA228.roa (hash: Rvipb3RZAvyR06O0oS0eT7H0auR1Anu2PCQQtZz6wt4=)
                          6: 1E44EE7CB6A811EAA1B84B2FF8AEA228.roa (hash: zEtnwOQxp1tgJgoUqxYeV/ZfUYlwTe3GM5ZvpJND5Xo=)
                          7: CB0FA5F6F2BB11EC8A4DDD82F1222468.roa (hash: lxEMymTJPboRJ7EWX4tzQoZnRdc9Q6NShyvK1e1Jd3w=)
                          8: 9ABA216AF2BB11EC81733F82F1222468.roa (hash: 6FiCP8b3kWEY92TY9AhpbuVK5DAe1gKHF9Zfm6ybL6Q=)
                          9: 65660562B69811EAAC26BF1FF8AEA228.roa (hash: VIH+Uyp2iRMbrGnCMTVkoGZ68i3KOd6ztZgLPY+SoCA=)
                          10: 84EB4824B6A811EA9608C52FF8AEA228.roa (hash: sbZkg63w3bwQ28mfw2+1rFKNpRezwNvC/sHtAA39z5o=)
                          11: 0C030AA8C75311EF963E0590762E951A.roa (hash: bNMA6PZ1v1d52Zo3rBQ17thuGGh+4io0kA8gWh05KQo=)
                          12: 61A57F42B6A811EA8F77A82FF8AEA228.roa (hash: Vv24BsCUqeaHub4gOsUG210bOUJYooPQGDyZsC9Xk6w=)
                          13: 9FEAD93C759E11EF89A6AD67762E951A.roa (hash: ivnmKqYJqB476OpSS3/VFXK0kDuTC5Zwz92WOyZCMeU=)
                          14: 19804272F4B911EDB9B23E4B4AD9E6FC.roa (hash: TWFrU0yfEzXK68AK6K9dPpBTBdlS/QVZnYBhV0AEQDo=)
                          15: 577AF7EE169A11EFAF5B8016017001B1.roa (hash: ebHFPBVFI6FEnS8auwZ3hkJ3n12esrKQ6jhZHxu6AUo=)
                          16: 2F5F631AB69711EABAA2731EF8AEA228.roa (hash: IqUUMgldL8ngf2evOYR523Esg7wYavO99U4lFQ/hYmM=)
                          17: 8A31DAE8B69711EA8CBAE61EF8AEA228.roa (hash: YU+Via1Ja0ARgovK6C4u9sVVn0Ra7GJCUZol0QFjLLQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AF, serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
        Validity
            Not Before: Aug  9 01:49:57 2025 GMT
            Not After : Aug 11 01:49:57 2025 GMT
        Subject: CN=6896a946-2bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:e4:e6:0f:7c:a7:78:be:87:ec:49:d5:e5:
                    cc:f0:bd:08:7d:48:d5:a9:00:e7:18:c7:7e:bb:52:
                    8e:f2:30:3f:86:59:f5:c1:03:47:1c:08:27:23:e3:
                    e6:db:ab:e1:00:21:14:e0:52:02:76:9f:c1:b1:14:
                    cc:e8:9a:a1:7e:d7:a4:1e:29:b8:cb:22:8e:05:75:
                    f1:bf:61:c7:08:ba:fd:d2:78:78:e0:13:04:bf:00:
                    e1:62:88:3a:25:5b:d8:c6:cf:3a:b6:34:3a:a8:31:
                    3c:aa:e1:7d:53:1b:99:7c:60:4e:f9:fc:9d:a0:d7:
                    e4:ed:20:54:eb:6f:71:b2:9b:02:93:0a:7e:79:77:
                    c1:a7:67:36:51:70:89:3c:7b:12:4f:57:28:c2:03:
                    e4:8d:f0:b2:ae:63:47:29:73:6a:15:07:d3:8c:6b:
                    74:3a:25:02:e1:dc:e8:d2:ba:f5:f3:96:28:a8:72:
                    2b:4a:09:23:ce:8e:42:4a:de:52:89:56:4e:f1:74:
                    8f:08:de:0c:31:97:d8:ea:90:f2:1b:d5:bd:70:a7:
                    64:d3:ef:af:a0:b5:d2:61:fa:a3:d0:d1:dc:98:39:
                    66:65:07:14:46:99:33:7c:a1:7d:40:b8:f5:a0:b3:
                    8f:96:79:66:db:0c:fd:78:b8:b4:ca:2e:d4:b6:96:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:BE:24:4B:DC:10:78:08:13:CB:E0:C4:98:06:44:CD:A1:E9:42
            X509v3 Authority Key Identifier:
                keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:c7:0c:5d:7c:ff:84:a3:5e:0d:7a:ef:7d:76:21:69:c3:
         d5:ad:8e:02:66:42:72:91:4b:b8:e5:aa:7e:eb:5a:71:13:a2:
         ad:e9:23:31:de:52:39:2a:89:fc:b1:91:5d:66:01:0b:30:39:
         60:17:e7:fd:35:a9:71:d2:40:1d:58:f5:e4:78:5c:19:4b:e3:
         5e:bd:48:50:f9:c9:bf:55:3e:fb:b1:f1:c8:a1:d5:5a:bd:f5:
         4d:8c:19:28:cd:e4:16:9d:2c:76:99:23:ab:83:68:10:48:4e:
         0b:09:43:ee:99:10:d3:9f:55:98:98:93:da:db:0d:15:44:cf:
         94:0f:2b:e0:01:2c:b2:73:50:cb:49:0a:b5:55:7e:37:4b:a0:
         1a:03:ea:df:a7:b7:35:fc:81:03:32:96:9e:f1:5e:d9:8b:b1:
         cd:64:cb:9f:81:99:a9:12:f4:8c:28:e8:43:e3:1c:45:9f:2b:
         4f:50:41:1a:bc:84:bc:ca:4a:75:07:05:59:f9:62:a6:17:b9:
         bd:8a:24:42:b1:2a:26:4f:84:ec:d7:0b:1e:47:c9:38:23:c7:
         f0:f9:7f:fd:06:4a:e6:a7:11:4d:41:e7:fc:3d:45:4b:25:89:
         ff:5b:b7:65:d5:c9:0c:f5:8e:76:de:ca:06:5b:16:25:aa:9d:
         72:85:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:26 2025 by rpki-client