Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
File:                     KT5c_1MDCLfw9rieE_cMZPXhCZo.mft (raw, json)
Hash identifier:          1NAaqcwvZXy5AY6VmeXAg2IOVvidsIJHwc9VAWdglZI=
Subject key identifier:   89:EB:A5:A4:81:6B:8C:49:01:82:33:F8:28:52:0F:AF:68:EF:52:45
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Certificate issuer:       /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial:       03FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
Manifest number:          03EA
Signing time:             Sat 09 Aug 2025 03:33:19 +0000
Manifest this update:     Sat 09 Aug 2025 03:33:18 +0000
Manifest next update:     Mon 11 Aug 2025 03:33:18 +0000
Files and hashes:         1: KT5c_1MDCLfw9rieE_cMZPXhCZo.crl (hash: Qy082p3AbCA7m4BYYeQVpqtu3qsud+fCmvmtGnPf5SY=)
                          2: 014D9F22138611F08CEB12BD762E951A.roa (hash: 3WBCc9Mw2euZmXqLJL3f0+GBqig/a8uYef5+QkHenxY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1022 (0x3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B583CAF, serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
        Validity
            Not Before: Aug  9 03:33:18 2025 GMT
            Not After : Aug 11 03:33:18 2025 GMT
        Subject: CN=6896c17f-289f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6a:6d:f0:b6:04:6e:74:ad:ac:6b:0b:5b:ad:
                    b2:c6:19:96:3e:f6:0c:56:a9:6c:eb:ef:02:cf:17:
                    96:7d:3c:9b:1b:41:ec:6d:86:cd:51:ba:9a:d4:41:
                    ce:02:34:02:9d:1c:48:37:a5:f4:3e:80:e8:85:ed:
                    e3:23:f6:f5:85:5a:5e:99:fe:59:f5:bb:e2:ae:43:
                    d1:df:90:d8:37:d0:85:b0:21:48:6d:25:d9:ae:9a:
                    40:29:1f:e2:96:5b:0e:57:fa:c0:dd:d6:62:ed:c5:
                    e6:1e:07:fd:0e:e4:df:50:fd:52:4e:63:0c:27:a4:
                    bd:60:75:89:58:a0:0c:4a:32:5f:c9:18:a9:67:f7:
                    49:34:f3:04:72:90:78:9a:2c:b6:b7:f7:2f:7a:60:
                    3d:3d:37:4a:db:7d:eb:84:e8:fc:b6:45:2f:19:14:
                    97:f6:4d:e8:c8:c8:ca:31:a1:69:e4:c0:fb:97:7e:
                    00:49:ea:1c:18:5f:13:b5:15:b5:47:60:ae:74:90:
                    2a:92:44:e1:f2:98:b9:65:38:7b:85:dd:3c:98:f0:
                    cb:cb:e0:1e:d6:46:91:f6:91:be:35:53:6d:e4:e3:
                    d0:bd:c4:f9:11:13:95:0c:2f:2f:33:d4:91:c4:22:
                    a3:27:10:5c:fb:7c:2b:16:43:8d:80:91:ea:c7:7a:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:A5:A4:81:6B:8C:49:01:82:33:F8:28:52:0F:AF:68:EF:52:45
            X509v3 Authority Key Identifier:
                keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:a9:fd:6b:21:2d:84:a3:92:9e:1d:b7:63:73:e0:b1:82:
         80:50:e4:aa:47:f6:a6:9a:00:8e:44:08:b8:60:a6:f0:73:d1:
         ee:c4:7f:e7:7d:50:0c:9d:e3:1e:9b:03:5f:87:81:8a:82:22:
         7b:7c:8a:48:09:20:4c:3e:c6:0f:aa:51:81:d5:04:82:fd:a1:
         ee:1c:f1:4c:5e:22:36:c4:ac:bc:e6:da:89:bd:0d:57:8b:37:
         c7:72:39:64:57:71:94:df:ab:94:56:2f:a3:94:66:f4:10:7e:
         ac:09:2f:9c:20:f8:74:16:30:21:d8:2c:0e:9a:de:33:16:22:
         80:7f:4c:5a:98:b5:56:50:8c:fe:67:b3:96:aa:36:8a:80:26:
         30:bf:8b:f7:26:d6:92:04:60:37:71:8f:7e:4e:bd:c4:f7:02:
         a3:c0:0d:ae:9d:48:94:87:70:53:6a:37:d0:05:ab:9b:40:2b:
         8a:5e:ce:ca:23:04:24:66:13:ea:a1:c2:4c:cd:53:08:7f:9f:
         1f:7a:37:06:81:14:7b:3e:95:67:e5:2a:87:c2:e3:73:9a:82:
         92:06:10:f8:2f:73:34:32:fb:05:90:db:77:7f:b8:2f:18:d1:
         66:f6:ee:53:52:1c:f0:11:99:f4:82:3b:79:3d:2a:34:fc:92:
         be:39:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:47 2025 by rpki-client