Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          3u1jTz73bXo1zgEXGlR5Nqo4FnbbpPjGmKtds7DhMrg=
Subject key identifier:   49:8E:1B:AA:6C:B8:92:BB:4E:E3:81:7B:9C:93:26:1C:B3:6F:23:25
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       0130
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          012F
Signing time:             Mon 16 Jun 2025 04:53:16 +0000
Manifest this update:     Mon 16 Jun 2025 04:53:15 +0000
Manifest next update:     Wed 18 Jun 2025 04:53:15 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: 2cVsekXGxMgMv/4mQUYitd5qJDGAsw1XwY/89WzqSc8=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Jun 16 04:53:15 2025 GMT
            Not After : Jun 18 04:53:15 2025 GMT
        Subject: CN=684fa33c-76c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:3a:71:ee:3f:c4:4a:a2:f8:37:25:13:1b:
                    fb:0a:53:ac:92:3d:ac:45:b9:ff:0d:ab:f7:7e:c9:
                    c4:e9:29:62:d2:f3:72:27:51:7c:e4:bd:cb:8c:d1:
                    47:c5:ac:5d:77:ea:56:10:2b:21:19:c6:3f:28:d5:
                    5e:b8:38:de:cc:44:4c:ab:12:ea:e7:62:ec:ce:64:
                    73:d3:7d:ff:0f:e0:a7:c8:0b:d4:95:9d:52:63:86:
                    83:18:42:17:21:8a:13:a3:e5:d8:05:97:50:ec:8e:
                    d0:9d:55:ca:46:4d:60:78:4f:94:8c:c9:9b:c4:7f:
                    10:b5:b1:03:bf:4b:d4:39:76:d4:31:02:7a:c0:f8:
                    99:00:ec:f9:6f:c1:20:12:06:25:64:5e:32:38:73:
                    ba:d6:4b:c6:05:5b:f3:94:a2:20:ab:10:98:e6:a1:
                    f8:fe:18:8e:70:42:f3:00:b5:ba:f5:46:31:d4:d5:
                    38:f9:55:85:8e:48:bb:91:0b:52:e9:7b:dc:2b:9d:
                    82:9b:fa:05:55:e3:93:17:c3:1b:35:28:37:6d:ba:
                    09:e6:27:c4:3c:1a:f4:a1:1c:10:28:02:7a:2d:82:
                    d3:02:7d:4f:a3:94:e3:08:3f:f4:a9:f8:49:69:18:
                    f2:43:8a:3b:ee:07:01:fc:f5:13:4f:f7:61:9a:db:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8E:1B:AA:6C:B8:92:BB:4E:E3:81:7B:9C:93:26:1C:B3:6F:23:25
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:cb:27:47:d3:89:8d:b1:9c:ef:66:2e:d2:65:9b:02:2f:
         8d:b9:01:6f:5c:38:7f:5a:5c:3a:42:c6:ed:85:9e:4b:c9:91:
         33:b5:c7:97:f0:ab:55:54:a1:c6:a4:ef:c1:4b:13:9d:88:b2:
         55:fa:42:0d:75:47:29:e3:56:8f:48:96:ec:f1:5e:37:17:76:
         8e:0c:4b:5f:69:c2:c0:21:cf:f5:da:e1:84:9e:cc:e9:1e:4c:
         f3:6f:75:93:81:37:8a:3c:ea:3d:68:ab:45:b6:be:1f:eb:08:
         44:b5:d7:53:ca:43:5e:d8:93:16:36:ae:d6:79:04:59:90:05:
         30:ee:f1:a1:54:aa:89:d4:9d:5f:2a:a0:2c:97:d2:5d:14:f7:
         65:e8:24:30:0b:0a:9b:5f:70:87:06:2d:1c:99:e5:f6:aa:a7:
         ad:e4:20:d8:d8:1a:7d:a2:45:6c:41:3a:01:97:87:bc:0e:14:
         34:6a:e2:b5:97:ff:0e:7c:cf:19:43:36:b4:3f:60:20:4d:3f:
         31:a9:41:ae:bd:e9:11:71:f4:dc:5e:1a:6b:80:29:d8:5f:a0:
         aa:33:b2:21:a4:1e:b3:14:ef:38:2d:3c:7b:58:4a:72:9d:0d:
         35:5f:b1:f2:81:c6:aa:75:93:45:30:3a:c4:fa:ea:1c:09:97:
         32:f1:37:a9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTY4MDJBRjExMC8GA1UEBRMoNjhCRDM0M0MxRDlGNzA0NkM2MkY5NTVGODY3MzE5
RDg1MkIxNEExMDAeFw0yNTA2MTYwNDUzMTVaFw0yNTA2MTgwNDUzMTVaMBgxFjAU
BgNVBAMTDTY4NGZhMzNjLTc2YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe4Tpx7j/ESqL4NyUTG/sKU6ySPaxFuf8Nq/d+ycTpKWLS83InUXzkvcuM
0UfFrF136lYQKyEZxj8o1V64ON7MREyrEurnYuzOZHPTff8P4KfIC9SVnVJjhoMY
QhchihOj5dgFl1DsjtCdVcpGTWB4T5SMyZvEfxC1sQO/S9Q5dtQxAnrA+JkA7Plv
wSASBiVkXjI4c7rWS8YFW/OUoiCrEJjmofj+GI5wQvMAtbr1RjHU1Tj5VYWOSLuR
C1Lpe9wrnYKb+gVV45MXwxs1KDdtugnmJ8Q8GvShHBAoAnotgtMCfU+jlOMIP/Sp
+ElpGPJDijvuBwH89RNP92Ga29cXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSY4b
qmy4krtO44F7nJMmHLNvIyUwHwYDVR0jBBgwFoAUaL00PB2fcEbGL5VfhnMZ2FKx
ShAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2ODAyL0Y2QUE2RUU4NjUzRDExRUY4NDRCMjY4RTc2MkU5NTFBL2FMMDBQ
QjJmY0ViR0w1VmZobk1aMkZLeFNoQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FMMDBQQjJmY0ViR0w1VmZobk1aMkZLeFNoQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTY4MDIvRjZBQTZFRTg2NTNEMTFFRjg0NEIyNjhFNzYy
RTk1MUEvYUwwMFBCMmZjRWJHTDVWZmhuTVoyRkt4U2hBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDqcsnR9OJjbGc72Yu0mWbAi+NuQFv
XDh/Wlw6QsbthZ5LyZEztceX8KtVVKHGpO/BSxOdiLJV+kINdUcp41aPSJbs8V43
F3aODEtfacLAIc/12uGEnszpHkzzb3WTgTeKPOo9aKtFtr4f6whEtddTykNe2JMW
Nq7WeQRZkAUw7vGhVKqJ1J1fKqAsl9JdFPdl6CQwCwqbX3CHBi0cmeX2qqet5CDY
2Bp9okVsQToBl4e8DhQ0auK1l/8OfM8ZQza0P2AgTT8xqUGuvekRcfTcXhprgCnY
X6CqM7IhpB6zFO84LTx7WEpynQ01X7HygcaqdZNFMDrE+uocCZcy8Tep
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:58:41 2025 by rpki-client