Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft (raw, json)
Hash identifier:          udepLqRq6Nsn6QnaiLXKD05MOex7Ymi8W+sgI/L0nbA=
Subject key identifier:   E0:87:FA:A9:0F:2F:F2:19:35:2D:C0:D8:27:14:8D:90:F0:DD:2A:DE
Authority key identifier: BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Certificate issuer:       /CN=F36E084CAF/serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
Certificate serial:       0869
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
Manifest number:          0863
Signing time:             Sat 09 Aug 2025 01:46:32 +0000
Manifest this update:     Sat 09 Aug 2025 01:46:31 +0000
Manifest next update:     Mon 11 Aug 2025 01:46:31 +0000
Files and hashes:         1: u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl (hash: KKt3arDYpK4MBax9iqGEvE4264p9CA88C4bBax5WftY=)
                          2: 86921EA0A38311EBBE2DD613F8AEA228.roa (hash: Qdm1jwSuwMkCRXEjG6ft+SApHF6cYD5AROgyucfXjCM=)
                          3: C2A79C94A38311EB9FD81C14F8AEA228.roa (hash: wCi/saeIICAwOHNLZFRK/7Rxl1hUxRkLtU6ihyqYm9U=)
                          4: 09404144A38211EB9403A411F8AEA228.roa (hash: XszKqqcugifGQ7P7cFMGaXWJ1rKb7154oh90pRoXSnM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Validity
            Not Before: Aug  9 01:46:31 2025 GMT
            Not After : Aug 11 01:46:31 2025 GMT
        Subject: CN=6896a878-de4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:48:4d:d2:71:6e:c4:9a:48:80:64:3a:1a:
                    cd:74:d3:47:73:bd:ce:76:98:a9:6f:57:de:52:1a:
                    a5:44:f2:9a:43:b0:42:17:72:73:8f:9e:18:93:4b:
                    f4:cf:69:37:96:0f:1b:aa:87:49:fd:2f:99:d7:8d:
                    e0:1f:35:b1:7a:c5:da:fa:44:34:bf:92:6b:40:db:
                    79:76:59:ce:66:7a:2e:d1:d8:e4:0d:3c:98:b6:f4:
                    8f:25:4e:c9:d8:8d:66:24:a9:fc:be:cf:07:b9:0b:
                    c9:a6:cf:69:67:8a:b4:17:04:58:73:94:24:f4:9e:
                    76:e9:22:22:02:a9:c6:5a:bd:72:0c:22:98:1b:76:
                    8a:ad:0d:8a:9a:7d:99:5c:a6:37:b2:64:4b:5a:53:
                    ad:c2:a3:e7:20:bb:9b:17:1a:7f:88:64:af:0a:e6:
                    6f:20:28:b8:09:2a:6a:06:33:0b:a6:3a:40:9b:fb:
                    04:68:e9:60:33:91:2a:fe:bd:76:4b:35:6d:3e:5d:
                    1e:17:a6:c8:d3:17:18:84:dc:dc:4c:cd:69:46:d9:
                    ea:3d:2d:89:07:16:18:01:87:bb:2a:4f:c7:c0:98:
                    c1:c7:38:11:f0:88:69:6f:36:14:66:53:cf:fa:b7:
                    93:4b:94:03:e0:dd:cb:26:15:c5:b6:63:53:7e:e3:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:87:FA:A9:0F:2F:F2:19:35:2D:C0:D8:27:14:8D:90:F0:DD:2A:DE
            X509v3 Authority Key Identifier:
                keyid:BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:47:25:81:04:99:c1:d2:3b:dc:fe:a2:61:18:bc:a9:0b:
         be:15:ac:82:e6:a7:33:f6:df:8a:7a:5f:6a:f6:3b:ff:2b:65:
         2a:97:b3:82:34:f7:cc:a8:6a:6f:3c:57:c6:16:9b:c1:b6:50:
         c6:cb:9a:20:9b:7a:45:62:a9:88:d5:7f:3b:f9:c4:8a:6f:6e:
         30:88:bb:7d:50:38:58:28:91:c0:5c:e9:5e:eb:55:6f:40:ae:
         7f:56:69:18:85:1a:b8:89:ff:34:0e:ca:de:32:18:73:f0:32:
         7f:d8:6c:21:3e:90:07:dd:a6:70:ca:eb:58:42:7a:e7:6e:65:
         79:57:72:cc:d7:c6:55:a5:7b:bb:bd:d8:e3:8e:6b:ea:1e:c8:
         4d:98:77:ca:4a:61:32:de:3d:52:19:91:18:cb:26:b3:4b:ea:
         6f:fd:36:3a:21:f1:03:ea:0a:06:b4:16:6c:fe:30:bd:94:0b:
         3e:79:70:7c:ed:c5:cc:02:2e:a7:c6:e0:52:c5:cf:bd:79:5d:
         a3:e0:91:39:d8:95:5c:e2:06:5e:ca:44:11:f4:3a:6b:f0:f6:
         2d:47:11:f8:fb:68:8c:2d:19:bf:f8:08:58:b6:36:b5:c4:9b:
         2c:d0:a8:77:82:dd:fc:95:27:ac:75:68:b9:c3:b7:4f:4b:a1:
         8a:33:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:22 2025 by rpki-client