Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
File:                     ePCj07rEmhSIR2PZN9PKGSCVOxU.mft (raw, json)
Hash identifier:          K3XgP080BiV1tH66CEaNaugqhakkJXn5tAOeowR9kuE=
Subject key identifier:   85:B0:56:83:B5:94:59:2E:76:D9:92:BD:87:AA:47:31:FF:4B:4F:D0
Authority key identifier: 78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Certificate issuer:       /CN=F36FF74CAF/serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
Certificate serial:       01C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
Manifest number:          01C1
Signing time:             Tue 12 Aug 2025 04:36:30 +0000
Manifest this update:     Tue 12 Aug 2025 04:36:30 +0000
Manifest next update:     Thu 14 Aug 2025 04:36:30 +0000
Files and hashes:         1: ePCj07rEmhSIR2PZN9PKGSCVOxU.crl (hash: 3ePwG4Le5jxcQbeF4GbDP1Vz0PKmk0Uitu7K0mqOcPA=)
                          2: 6883EC322C8211EF82CEC0ED7CDC24C2.roa (hash: Al+25UVZ/TGZulMqlsc3cCdFsOzq/5m8B34hb4F8eiM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 04:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF74CAF, serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
        Validity
            Not Before: Aug 12 04:36:30 2025 GMT
            Not After : Aug 14 04:36:30 2025 GMT
        Subject: CN=689ac4ce-db16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:35:9f:b3:90:0b:c8:36:e9:da:b0:fb:2f:
                    21:0a:10:3f:a4:2d:1b:72:6d:6d:09:4a:d4:ff:11:
                    23:1b:01:e8:e4:fc:3e:c6:ff:db:72:aa:8f:2e:6a:
                    63:c0:9e:e6:29:86:ca:e0:f8:fc:a0:b2:08:a9:92:
                    6b:ec:12:14:ea:9e:e1:5b:d2:48:f2:42:e8:6e:f4:
                    3f:9f:66:9c:b4:1c:e8:5f:a3:f9:8c:56:78:65:02:
                    0c:24:24:57:00:04:8c:cd:95:f8:2d:4e:4c:08:17:
                    8c:72:14:21:54:bc:ed:1e:c1:1d:7d:d1:03:b8:1e:
                    65:4e:47:a1:a6:f4:40:af:d7:84:af:c1:ce:f1:b0:
                    a8:40:92:c0:1f:64:58:73:fc:e1:3a:13:90:dd:e9:
                    ee:54:1e:28:8e:37:97:0d:2a:42:55:88:de:37:9e:
                    58:bd:d9:83:a2:6b:ee:c9:d9:9f:12:ad:19:45:47:
                    42:f4:41:c4:7f:c3:ce:6e:63:58:4a:f5:4e:d1:c3:
                    99:94:ed:55:d9:e1:d7:fd:12:c2:89:32:e3:db:3e:
                    dd:70:e9:b9:56:e2:4e:4d:4f:09:1e:e1:db:a2:2a:
                    74:4b:31:97:c7:8f:63:8f:c9:e4:74:8b:9a:b0:f1:
                    2c:cc:56:18:12:1d:76:66:7f:f3:48:60:76:78:e8:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:56:83:B5:94:59:2E:76:D9:92:BD:87:AA:47:31:FF:4B:4F:D0
            X509v3 Authority Key Identifier:
                keyid:78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4b:28:12:8f:91:4d:1f:06:8d:4c:de:e8:a5:20:f2:dc:f2:
         72:23:e4:32:47:d3:b5:69:83:04:36:69:90:68:87:bf:16:ca:
         d1:46:5f:24:d6:c7:28:3e:3a:b9:6f:1c:cd:36:d2:9c:8a:a6:
         e8:89:9e:6d:1c:bf:20:f2:c6:ab:ec:2e:26:a6:6f:be:8c:fd:
         01:12:03:49:15:b4:30:71:19:c3:2c:0d:50:d7:91:f9:30:91:
         0c:ff:d6:5e:ab:a8:fd:0d:82:c5:c6:e0:6d:5c:ee:d1:93:21:
         ce:29:80:7b:7e:cb:82:73:5a:0a:80:4d:bf:21:1c:1f:ff:15:
         5c:5e:ee:95:df:09:19:9b:90:f9:cb:01:b4:3e:02:99:96:62:
         b7:d6:74:3b:a2:3f:af:fa:41:55:50:dd:56:95:85:af:4d:aa:
         0a:2a:85:7c:64:46:dd:b5:1b:49:10:d3:35:25:70:10:2e:60:
         14:30:6c:10:b2:29:ef:99:dc:d0:57:32:d0:db:76:99:b7:99:
         bd:4e:bd:bd:2c:bb:f7:62:a9:27:ba:dc:d4:79:55:e8:b2:a1:
         38:57:62:dc:fa:96:83:f0:dc:a3:56:af:ee:e0:1a:82:21:8c:
         7e:6f:d6:cf:f5:7d:a2:96:6d:be:59:28:ab:bf:ef:48:fd:b9:
         40:a4:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:31 2025 by rpki-client