Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          jyEeL56D0Tfm5rLStoHO1zlOJEh6bR3s9U88U6XVIsA=
Subject key identifier:   39:08:BB:69:BD:5C:9E:83:61:A8:68:3D:39:C3:EC:FF:D0:4B:52:7A
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       0902
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          0901
Signing time:             Wed 13 Aug 2025 01:35:05 +0000
Manifest this update:     Wed 13 Aug 2025 01:35:04 +0000
Manifest next update:     Fri 15 Aug 2025 01:35:04 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: W1ScDmPMGqz8IthGf8aGlAnWUMHGAanyqXOdnktytvo=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF, serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Aug 13 01:35:04 2025 GMT
            Not After : Aug 15 01:35:04 2025 GMT
        Subject: CN=689bebc9-2b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:86:df:b0:11:5d:36:62:cb:7d:e6:19:18:
                    09:37:26:a7:57:22:08:be:1f:e8:f8:77:a3:bd:cd:
                    11:dd:53:64:c7:ed:9a:b6:37:74:d0:61:19:bd:fe:
                    32:ef:bd:c3:c4:7c:ab:c6:2a:88:35:78:76:5a:4d:
                    dc:63:22:30:54:55:dc:fa:4a:2e:d8:c2:a3:57:d5:
                    3d:65:68:58:34:16:48:72:de:bf:23:ac:36:d3:52:
                    a2:00:90:c7:11:ac:4a:33:40:a7:52:60:d3:d7:b6:
                    82:9c:72:86:5b:e0:a8:e3:99:43:58:da:f6:42:ee:
                    6e:de:46:bb:b0:e6:88:d2:d7:2d:79:5e:40:4a:bd:
                    3a:04:76:16:04:88:94:59:ef:ed:4a:d7:e6:6a:79:
                    ce:26:d7:34:30:b2:46:a4:48:f2:8b:dc:09:5c:f6:
                    29:05:d6:fb:98:1e:ec:61:02:8a:e1:a7:39:e5:5a:
                    06:3a:b1:dc:92:d4:95:fe:55:28:38:af:2d:e2:ab:
                    14:c7:a8:5e:47:20:3b:b7:70:c5:c3:c3:32:99:38:
                    35:10:04:00:ca:a1:03:cc:58:82:fd:f1:34:51:26:
                    cb:cd:fe:4a:3b:fd:c4:eb:f7:1c:43:ff:71:1f:16:
                    bc:87:94:3d:00:3d:07:af:cc:66:89:ce:77:0c:28:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:08:BB:69:BD:5C:9E:83:61:A8:68:3D:39:C3:EC:FF:D0:4B:52:7A
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:18:ea:bc:2f:69:e2:af:7f:a8:da:7e:ec:00:9d:1d:de:f9:
         f2:0a:0b:b7:5a:fa:1a:f2:25:27:7b:a8:38:6a:3c:92:a7:96:
         9d:bf:6b:c4:68:ad:df:59:a2:ed:38:e0:eb:1f:7c:d8:ef:c2:
         12:59:f5:ca:63:4c:7d:c5:34:0e:0c:0a:4b:e6:1c:15:0d:d2:
         82:21:e5:82:d5:df:43:df:85:f3:18:06:7f:36:ae:3d:f1:5f:
         24:50:3c:ad:47:1b:54:b5:07:62:41:bf:36:ea:00:44:7d:9a:
         6d:74:37:d8:43:3c:c6:c6:a4:3e:82:14:a5:a4:32:39:6a:b5:
         09:7a:72:eb:e2:f9:60:71:c6:22:42:fa:6b:9b:39:21:f9:7a:
         2f:fb:99:32:0a:93:d0:c7:d6:77:c0:64:45:d1:32:5b:32:4b:
         29:c0:43:3f:91:a6:43:64:9e:ed:1a:97:76:8b:7f:2e:95:7c:
         cd:3b:56:21:ef:4a:8c:d1:35:43:d7:25:ec:49:5e:4c:25:c6:
         4b:ad:a0:42:af:72:9f:65:c7:75:43:04:79:29:79:c7:be:77:
         20:42:5f:c0:27:25:08:7a:26:5f:be:dc:c3:8b:0c:ab:38:1f:
         e4:5e:46:c7:1d:a0:e2:a4:19:96:cf:82:e6:a3:62:d9:03:a8:
         4e:15:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:58:34 2025 by rpki-client