Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
File:                     Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft (raw, json)
Hash identifier:          2qFo02XU+QZ2z3pHH4IVDDWDYVObhne5Tlk/qK4Gxv0=
Subject key identifier:   7E:80:03:32:9D:80:72:7D:5B:64:EE:01:86:3D:E0:13:C5:24:B3:F6
Authority key identifier: 41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A
Certificate issuer:       /CN=F36FDB6DAF/serialNumber=41BE93666AA3C889C6A9ED25AFFF6B865C81E80A
Certificate serial:       067B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
Manifest number:          067A
Signing time:             Mon 11 Aug 2025 02:14:16 +0000
Manifest this update:     Mon 11 Aug 2025 02:14:16 +0000
Manifest next update:     Wed 13 Aug 2025 02:14:16 +0000
Files and hashes:         1: Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl (hash: 3zTw7+2VvdEz0rrSuyY4CeDNiL4oYU39yg6FRvBsqOQ=)
                          2: 4FD4A210816F11EBA2DB5E5CF8AEA228.roa (hash: Q9H2lKyBkMfTg6cpSiTvID4Cv4tNB4YcVP+ZoFDWIJk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDB6DAF, serialNumber=41BE93666AA3C889C6A9ED25AFFF6B865C81E80A
        Validity
            Not Before: Aug 11 02:14:16 2025 GMT
            Not After : Aug 13 02:14:16 2025 GMT
        Subject: CN=689951f8-358f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:50:51:cf:6e:41:b3:f7:40:dd:78:95:df:
                    f0:11:7a:f9:00:50:98:ff:50:09:ef:e2:d3:e2:14:
                    7c:5b:39:d3:15:a1:6e:f1:ae:95:cd:1f:ea:72:df:
                    21:13:31:e7:34:72:4e:74:e4:2d:1e:69:70:e5:f1:
                    02:17:8c:00:4a:57:72:fb:d0:cf:aa:9d:03:28:9f:
                    fc:24:93:27:47:e5:69:60:90:b3:fd:db:81:93:a9:
                    80:d2:68:9c:2a:14:20:b7:f9:80:d4:5e:40:82:99:
                    4c:ae:d7:4f:9c:23:b8:38:79:59:cf:82:d8:7d:83:
                    83:3e:f1:ab:0c:e1:65:df:c1:90:0b:d3:a6:77:ca:
                    db:b2:49:b8:98:fc:d5:29:ce:0f:a4:74:f1:c2:fb:
                    87:99:a5:d4:59:32:59:95:d7:22:26:d6:06:ac:d7:
                    9c:dd:a8:1d:53:48:7e:d1:db:42:56:7e:d5:b8:0d:
                    90:ae:3b:9f:40:ab:28:c5:78:31:61:55:55:48:50:
                    0e:d4:7e:e8:cc:6c:52:10:ba:7a:c8:e5:2d:ef:d1:
                    dc:9e:ee:ad:e0:13:60:9f:d5:78:b5:a8:09:71:29:
                    09:0a:93:03:d6:a8:7e:43:c5:f7:b0:81:d8:c8:d8:
                    f6:e9:45:43:5b:21:82:46:68:d3:b3:31:ec:79:3f:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:03:32:9D:80:72:7D:5B:64:EE:01:86:3D:E0:13:C5:24:B3:F6
            X509v3 Authority Key Identifier:
                keyid:41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:da:cf:af:6e:da:cb:c6:18:18:b3:15:02:51:69:4d:e1:2e:
         0d:ea:39:21:73:81:b5:c5:f8:d0:a0:01:67:6b:d5:c4:54:d7:
         37:c5:dd:8b:d3:ed:6e:7b:b7:31:7b:b3:81:01:ff:bb:57:61:
         fb:28:e9:ac:fd:cc:0f:81:95:9e:8e:75:2a:06:b6:e6:9a:c6:
         ea:ef:47:0d:1e:03:37:4c:fe:d2:0c:9b:d4:62:e1:01:cb:57:
         9c:e8:e9:2b:00:4c:1a:da:81:93:b0:85:af:bc:7a:13:1b:be:
         55:cb:44:43:b0:a1:b9:fe:95:c7:b2:bd:ba:5b:e7:fd:f8:a6:
         46:83:16:ae:82:d9:a6:de:77:52:a9:f7:15:bb:8c:48:47:dc:
         b4:1d:fe:45:64:56:bc:95:82:d6:ba:ac:ed:9f:83:11:8d:81:
         26:7b:0e:d1:be:7f:a7:ed:01:40:ca:0c:3b:13:59:a8:52:d9:
         0c:3d:dc:5f:e9:6a:d7:a5:7d:e3:4b:0e:b7:5b:43:03:78:c8:
         26:ff:e9:2f:9a:ce:ad:fe:64:95:dd:84:b1:99:c1:07:2e:9d:
         5c:a5:34:ed:36:53:a1:09:0d:54:f4:dd:83:53:9f:23:a0:c4:
         46:11:6f:04:fd:e3:65:ed:d3:92:b5:f0:8e:1d:45:a7:89:6a:
         4a:2f:ed:24
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBnswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkRCNkRBRjExMC8GA1UEBRMoNDFCRTkzNjY2QUEzQzg4OUM2QTlFRDI1QUZGRjZC
ODY1QzgxRTgwQTAeFw0yNTA4MTEwMjE0MTZaFw0yNTA4MTMwMjE0MTZaMBgxFjAU
BgNVBAMTDTY4OTk1MWY4LTM1OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcG1BRz25Bs/dA3XiV3/ARevkAUJj/UAnv4tPiFHxbOdMVoW7xrpXNH+py
3yETMec0ck505C0eaXDl8QIXjABKV3L70M+qnQMon/wkkydH5WlgkLP924GTqYDS
aJwqFCC3+YDUXkCCmUyu10+cI7g4eVnPgth9g4M+8asM4WXfwZAL06Z3ytuySbiY
/NUpzg+kdPHC+4eZpdRZMlmV1yIm1gas15zdqB1TSH7R20JWftW4DZCuO59AqyjF
eDFhVVVIUA7UfujMbFIQunrI5S3v0dye7q3gE2Cf1Xi1qAlxKQkKkwPWqH5Dxfew
gdjI2PbpRUNbIYJGaNOzMex5P/VFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfoAD
Mp2Acn1bZO4Bhj3gE8Uks/YwHwYDVR0jBBgwFoAUQb6TZmqjyInGqe0lr/9rhlyB
6AowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZEQjZELzIzN0E3QkYwODE2RTExRUJBNDdBMjk1QkY4QUVBMjI4L1FiNlRa
bXFqeUluR3FlMGxyXzlyaGx5QjZBby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FiNlRabXFqeUluR3FlMGxyXzlyaGx5QjZBby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkRCNkQvMjM3QTdCRjA4MTZFMTFFQkE0N0EyOTVCRjhB
RUEyMjgvUWI2VFptcWp5SW5HcWUwbHJfOXJobHlCNkFvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCa2s+vbtrLxhgYsxUCUWlN4S4N6jkh
c4G1xfjQoAFna9XEVNc3xd2L0+1ue7cxe7OBAf+7V2H7KOms/cwPgZWejnUqBrbm
msbq70cNHgM3TP7SDJvUYuEBy1ec6OkrAEwa2oGTsIWvvHoTG75Vy0RDsKG5/pXH
sr26W+f9+KZGgxaugtmm3ndSqfcVu4xIR9y0Hf5FZFa8lYLWuqztn4MRjYEmew7R
vn+n7QFAygw7E1moUtkMPdxf6WrXpX3jSw63W0MDeMgm/+kvms6t/mSV3YSxmcEH
Lp1cpTTtNlOhCQ1U9N2DU58joMRGEW8E/eNl7dOStfCOHUWniWpKL+0k
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:51:55 2025 by rpki-client