Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
File:                     AaNx1Ie11VLkTUu-yVarlsMlge0.mft (raw, json)
Hash identifier:          XMv2vpJWn4JTY7b3GsrW6oi1zpzqC7dIyzIf/Ykf5JQ=
Subject key identifier:   2F:61:B0:CB:4C:9F:53:EA:0D:C8:74:B7:5D:D6:52:8D:0C:FE:5C:7F
Authority key identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
Certificate issuer:       /CN=F36DCAE3AF/serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
Certificate serial:       04A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
Manifest number:          04A1
Signing time:             Sat 09 Aug 2025 03:04:03 +0000
Manifest this update:     Sat 09 Aug 2025 03:04:02 +0000
Manifest next update:     Mon 11 Aug 2025 03:04:02 +0000
Files and hashes:         1: AaNx1Ie11VLkTUu-yVarlsMlge0.crl (hash: lsnBor3lQ85RIc5v7mkRVQgUD8QVfxXo4KiLuzuxJqU=)
                          2: 91DA0C3CF08F11ECA3387197F1222468.roa (hash: m3NCW8i2F16lSabUpSi4fXD8AQaLmw9scRn5comU59s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DCAE3AF, serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
        Validity
            Not Before: Aug  9 03:04:02 2025 GMT
            Not After : Aug 11 03:04:02 2025 GMT
        Subject: CN=6896baa3-fc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:5c:39:ba:2e:4a:35:e1:ff:4e:dd:62:f2:
                    d3:58:9f:7a:c2:f3:2d:95:1f:22:9c:5f:ed:f7:42:
                    1c:73:9c:03:49:62:b9:ec:6a:f6:d7:7d:c6:0a:b9:
                    71:c7:0f:ee:28:7a:ef:88:0e:dd:ad:2e:2d:2b:49:
                    2b:42:1a:57:6e:53:7a:b1:cc:8d:04:cf:12:82:9e:
                    60:5a:8b:07:4e:82:89:d5:5b:2b:52:56:77:3a:7c:
                    73:8a:82:a5:23:8f:22:90:a5:ce:81:93:83:00:aa:
                    88:ee:e3:92:39:a4:09:1b:fa:a7:30:7c:31:6d:73:
                    12:dd:fe:ce:95:15:59:d1:7b:78:1c:99:bd:e9:25:
                    40:b6:2d:f2:65:14:05:75:f6:11:90:e7:7c:f9:df:
                    1e:29:1d:79:c3:fb:f7:02:a2:11:a7:b2:a8:3b:c1:
                    11:8d:2a:f3:1a:49:ad:b4:62:fb:61:03:61:b1:2e:
                    45:33:7c:c7:0f:d2:a1:90:0d:a3:21:a9:58:39:c8:
                    2d:9a:e5:d4:c9:e0:08:6c:68:a8:db:bd:4e:e3:7c:
                    9e:15:4b:70:16:63:65:22:b6:26:57:a7:7a:b2:18:
                    7f:64:a7:c9:3f:47:82:9d:6f:ca:dd:bb:f4:96:86:
                    7e:e5:a6:27:db:6f:a5:7b:b4:ea:b6:f1:b6:2f:08:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:B0:CB:4C:9F:53:EA:0D:C8:74:B7:5D:D6:52:8D:0C:FE:5C:7F
            X509v3 Authority Key Identifier:
                keyid:01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:c7:0d:37:fe:41:98:53:39:9d:54:59:da:47:c1:a3:33:
         df:95:3c:36:a8:e8:3d:60:3d:d9:ca:3d:f3:65:a7:14:b9:65:
         07:5f:51:84:ba:16:11:12:f9:ce:a7:8c:c9:75:86:04:3a:b6:
         be:74:d2:06:32:58:57:1b:9d:eb:97:01:45:c3:8a:c8:5f:6b:
         1c:03:ca:2a:72:4c:30:24:e1:49:c8:3b:a9:f4:65:82:ec:ac:
         80:2d:e4:a1:aa:0d:30:f3:fa:dc:4c:08:59:f6:ce:25:ca:2f:
         8b:7c:98:8c:14:21:b6:91:f3:a2:23:fe:a5:1c:1c:61:7a:98:
         f3:12:5e:76:69:e4:a4:f1:f4:12:bb:4b:cb:24:28:9f:94:f2:
         27:36:1d:64:32:9e:62:75:cd:d3:99:47:91:3b:3f:3e:c6:02:
         84:ec:e7:b6:89:60:5a:0b:af:62:9f:4e:98:fb:c0:df:6a:a0:
         df:fc:5d:60:25:ef:b4:33:59:4e:c2:c7:3f:69:f5:5f:ef:a0:
         3d:ee:25:52:e5:e9:02:0f:13:cb:c5:fa:49:1b:69:50:49:63:
         dd:a5:53:81:19:c6:8a:c7:36:2b:10:35:95:d2:ce:11:49:62:
         3d:94:b0:92:f7:16:2b:05:07:e9:5a:64:7f:46:f3:04:f3:a8:
         ba:13:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:36 2025 by rpki-client