Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          ZgaZPADOn0lqZ3rc2XxlB+YneDj8mxtu3WVtcZvtIbQ=
Subject key identifier:   F3:12:33:A1:11:44:9D:98:C1:1F:73:11:A5:F4:C9:E0:63:8C:E8:8D
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       0701
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          06F8
Signing time:             Wed 13 Aug 2025 02:04:24 +0000
Manifest this update:     Wed 13 Aug 2025 02:04:23 +0000
Manifest next update:     Fri 15 Aug 2025 02:04:23 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: uzjSi8hOojOo3C6ogBjGSPTioWikYEfEqORP3BVptW0=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1793 (0x701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Aug 13 02:04:23 2025 GMT
            Not After : Aug 15 02:04:23 2025 GMT
        Subject: CN=689bf2a8-d1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:ed:df:b2:94:e5:86:dd:02:50:5d:54:2f:
                    6c:1c:5f:bc:c4:ad:e4:0c:c0:72:67:e2:aa:92:c1:
                    5a:8c:e2:40:eb:68:08:21:5e:cf:48:83:6d:bc:b9:
                    b3:f0:d3:4b:42:71:9a:30:19:5a:a7:7d:a5:4b:b5:
                    16:81:d7:2f:f3:24:43:19:48:09:22:23:84:d8:4c:
                    28:48:dd:00:d2:96:ab:28:05:8e:06:74:bc:a3:36:
                    8b:3d:e0:94:3d:8a:c7:81:ed:1d:4a:93:f9:f7:81:
                    82:c6:a2:f3:2d:61:74:6d:6f:13:4f:47:6c:23:de:
                    f4:7b:37:25:4a:f5:93:b0:48:39:91:42:16:af:62:
                    e4:5b:f4:b5:07:99:57:24:36:b2:97:65:10:90:3f:
                    90:53:a7:c5:9b:cc:8b:f7:4d:8f:e7:0d:ff:40:fa:
                    da:b9:82:42:17:46:86:9b:64:dc:7a:5e:7b:00:a5:
                    2b:b3:11:72:d5:dc:db:c3:38:59:44:58:2b:4b:16:
                    af:d3:1f:f6:f3:ae:40:25:21:0a:d5:ee:ae:7b:23:
                    f8:a4:0a:11:33:47:3f:32:8c:98:e5:69:ea:92:92:
                    c7:c4:23:3b:3d:af:ff:2d:93:44:f6:2f:d5:eb:7e:
                    7f:d8:27:ae:17:06:fd:3a:67:19:b8:e4:3a:5c:11:
                    47:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:12:33:A1:11:44:9D:98:C1:1F:73:11:A5:F4:C9:E0:63:8C:E8:8D
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:cc:0e:59:75:a5:35:58:e4:5f:b0:01:63:93:6f:73:5a:
         1d:aa:9f:00:87:d5:43:04:aa:98:7d:25:3e:c0:fb:ab:db:18:
         f1:a7:3e:9f:2a:65:23:20:77:19:38:6b:98:d8:63:47:b6:67:
         d6:f5:c2:ff:82:6a:f8:1c:b0:bd:98:41:0b:d4:87:e2:72:48:
         e1:79:37:dc:e3:04:c3:74:fa:45:2d:24:b5:4a:7e:ff:d4:55:
         81:36:bc:68:bd:9a:d5:58:d3:21:bf:44:d0:f5:55:66:a7:78:
         91:8d:66:e4:9e:24:eb:cb:bb:b3:86:04:77:fd:6a:35:97:78:
         94:2c:b9:e6:49:0e:83:e8:92:eb:b8:c4:0d:8c:52:87:91:a2:
         b6:00:8e:ff:bb:7b:87:ba:cd:87:21:07:4c:5a:ef:fc:aa:da:
         88:35:b3:26:9e:b9:93:b8:0a:5e:48:f4:ed:d5:27:3c:91:a5:
         6d:e1:48:42:fb:3e:41:9f:92:43:e7:5e:02:1c:3c:3f:6b:c9:
         1b:53:30:b4:fe:16:ec:e8:93:7d:c4:37:0f:6d:de:83:a1:61:
         37:3b:b2:c6:6f:18:dc:68:7c:37:49:dc:8e:f3:d5:83:84:4a:
         80:1b:09:64:ea:26:f4:51:9a:6d:60:e9:4e:07:2c:ce:ab:81:
         81:5b:4d:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yNTA4MTMwMjA0MjNaFw0yNTA4MTUwMjA0MjNaMBgxFjAU
BgNVBAMTDTY4OWJmMmE4LWQxYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3xO3fspTlht0CUF1UL2wcX7zEreQMwHJn4qqSwVqM4kDraAghXs9Ig228
ubPw00tCcZowGVqnfaVLtRaB1y/zJEMZSAkiI4TYTChI3QDSlqsoBY4GdLyjNos9
4JQ9iseB7R1Kk/n3gYLGovMtYXRtbxNPR2wj3vR7NyVK9ZOwSDmRQhavYuRb9LUH
mVckNrKXZRCQP5BTp8WbzIv3TY/nDf9A+tq5gkIXRoabZNx6XnsApSuzEXLV3NvD
OFlEWCtLFq/TH/bzrkAlIQrV7q57I/ikChEzRz8yjJjlaeqSksfEIzs9r/8tk0T2
L9Xrfn/YJ64XBv06Zxm45DpcEUeLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8xIz
oRFEnZjBH3MRpfTJ4GOM6I0wHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ0RjEvMEIyODY5ODQzNThBMTFFQkEzREU2NzcyRjhB
RUEyMjgvaGJDeGlqR09XblhRVFJvS3AzN19sUVVpaVNRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTxswOWXWlNVjkX7ABY5Nvc1odqp8A
h9VDBKqYfSU+wPur2xjxpz6fKmUjIHcZOGuY2GNHtmfW9cL/gmr4HLC9mEEL1Ifi
ckjheTfc4wTDdPpFLSS1Sn7/1FWBNrxovZrVWNMhv0TQ9VVmp3iRjWbkniTry7uz
hgR3/Wo1l3iULLnmSQ6D6JLruMQNjFKHkaK2AI7/u3uHus2HIQdMWu/8qtqINbMm
nrmTuApeSPTt1Sc8kaVt4UhC+z5Bn5JD514CHDw/a8kbUzC0/hbs6JN9xDcPbd6D
oWE3O7LGbxjcaHw3SdyO89WDhEqAGwlk6ib0UZptYOlOByzOq4GBW01P
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:31:54 2025 by rpki-client