Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
File:                     -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft (raw, json)
Hash identifier:          onxty49k+iLjriTcKcfucKgLVGaVPshRy8ovMd6qVxY=
Subject key identifier:   1E:10:42:83:07:9A:2C:72:C9:7F:2C:09:D5:E9:81:D2:26:75:8B:C3
Authority key identifier: F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF
Certificate issuer:       /CN=F36EA516AF/serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
Certificate serial:       7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
Manifest number:          7B
Signing time:             Wed 06 Aug 2025 05:18:35 +0000
Manifest this update:     Wed 06 Aug 2025 05:18:34 +0000
Manifest next update:     Fri 08 Aug 2025 05:18:34 +0000
Files and hashes:         1: -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl (hash: /DkAv843x10o3sk/NoPxylAjtTLfwJyK1fJHDI5jwKM=)
                          2: 046CE482147711F0B01A890E6EB8BCC6.roa (hash: 1Ni3jdhyCUqGSNwJUD1MnDgs72urkU8YdE/yCBxVta0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 00:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EA516AF, serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
        Validity
            Not Before: Aug  6 05:18:34 2025 GMT
            Not After : Aug  8 05:18:34 2025 GMT
        Subject: CN=6892e5ab-9158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:92:49:4a:9d:c2:1e:05:7a:8d:2d:f5:87:
                    9e:d2:08:d7:be:a0:30:12:9e:b6:e1:6b:0a:a4:15:
                    19:5d:3a:c2:c3:2e:e9:83:2f:3b:ef:c8:13:91:e2:
                    6f:de:8c:7d:b1:70:84:37:73:24:31:69:8f:59:de:
                    12:20:dc:66:26:9f:25:50:0a:08:1f:ed:77:34:fb:
                    01:e7:af:ba:de:0d:67:36:fd:f5:ce:b6:8e:54:b1:
                    76:ae:bc:4d:b7:0c:6d:4b:45:af:ad:a1:8a:c7:ad:
                    1a:b3:22:4a:48:02:e3:00:3e:89:a3:a1:ce:4a:0e:
                    b9:c0:d8:43:02:6a:3b:47:1e:52:57:3e:6e:a9:d9:
                    a8:26:bf:c7:5c:35:ab:2b:65:9d:60:d6:51:3a:80:
                    2b:48:79:32:d4:83:7f:fa:19:c1:c1:bf:97:a3:40:
                    b8:cf:b7:a1:1f:eb:7f:c7:78:5c:09:e0:30:19:f5:
                    6e:d9:6b:73:20:c4:84:a0:f4:6a:55:6e:6f:44:8a:
                    d3:25:1c:4d:ea:43:21:37:cc:66:59:6f:c6:58:ed:
                    9f:72:c1:b2:fc:64:b4:c7:6d:b1:42:f6:df:e8:5f:
                    71:02:1f:48:4d:a8:5e:dd:70:ec:99:20:f4:6b:00:
                    54:8e:20:bc:18:7f:96:5f:6e:ce:a6:2d:e5:37:9c:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:10:42:83:07:9A:2C:72:C9:7F:2C:09:D5:E9:81:D2:26:75:8B:C3
            X509v3 Authority Key Identifier:
                keyid:F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:99:4c:cd:cc:9e:b6:25:db:5b:26:46:b0:22:28:61:df:
         70:62:b6:49:8d:5f:ce:5d:67:4f:35:e7:fd:62:8f:9d:a7:9f:
         ba:cc:2f:69:86:73:9c:21:7e:8a:68:0d:94:77:f4:06:21:cb:
         3d:69:ad:40:3a:96:fa:9a:a9:67:3b:d4:b4:2e:08:18:f3:82:
         5f:09:49:88:21:6a:6c:9b:fa:d8:e0:7c:ce:ab:06:0a:b2:65:
         7b:a2:09:89:e9:80:85:11:b9:d1:52:0b:44:89:e2:33:cb:0a:
         75:17:d4:69:45:d6:33:c7:4a:95:f3:32:93:9a:88:4a:ef:45:
         b5:83:9c:01:41:b3:a7:d5:a4:65:94:fe:5f:72:d1:d6:9e:0d:
         af:b5:8e:82:3f:b7:5d:11:88:34:18:4f:1a:3b:b6:8e:e3:3b:
         c6:44:8a:2a:3b:23:c2:40:4d:d0:b6:f2:78:94:30:b7:a5:19:
         34:34:00:16:3f:19:25:44:34:6b:84:7f:99:3d:b1:56:5b:71:
         ee:c6:e7:d6:52:76:ce:4e:4c:fd:8f:98:72:14:44:f3:d3:ef:
         29:4a:bf:e8:af:44:a0:2a:b9:ca:59:f5:bf:50:01:14:25:4d:
         17:9a:dc:86:ad:17:99:36:6d:c6:06:ee:e9:e1:40:ae:4f:cc:
         54:3c:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:41 2025 by rpki-client