Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File:                     KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier:          T3by4eKU3f8xKRHtWgynV5LnMj2rgTOCwkoD7L8RoVw=
Subject key identifier:   B2:FF:95:A1:5C:BA:71:B6:C2:8A:7A:92:14:61:D3:FA:12:CC:2E:4B
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer:       /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial:       0140
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number:          013F
Signing time:             Fri 25 Apr 2025 04:35:50 +0000
Manifest this update:     Fri 25 Apr 2025 04:35:49 +0000
Manifest next update:     Sun 27 Apr 2025 04:35:49 +0000
Files and hashes:         1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: ag/q/HhEFPfpAo2WAv37sY4MCUZ/Arj03MPT/KKNpXw=)
                          2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
        Validity
            Not Before: Apr 25 04:35:49 2025 GMT
            Not After : Apr 27 04:35:49 2025 GMT
        Subject: CN=680b1126-2c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:1a:e9:a2:f2:df:59:c9:ff:0a:83:e3:ec:
                    c8:66:82:04:d9:d6:b2:64:60:a0:17:24:a6:c4:c9:
                    69:60:64:14:3c:4c:d6:a1:2f:12:d1:86:9d:0b:cf:
                    cd:45:1d:98:5d:12:5a:f5:25:05:0f:cf:8a:22:f4:
                    d2:ae:3e:4b:a1:72:70:1c:f2:83:78:b8:ba:5d:2f:
                    41:fd:bf:0f:38:49:90:ad:6a:a8:f8:15:dd:dd:ae:
                    3f:89:a3:f8:2b:b3:3b:b5:c4:c6:c3:eb:cd:c6:09:
                    5d:08:c1:63:19:25:be:93:be:18:75:da:1e:9c:37:
                    41:6b:4c:43:14:7e:b8:01:16:14:3a:18:58:d9:c6:
                    95:88:18:ae:86:18:41:64:3c:ed:ad:44:74:6b:0c:
                    8d:a9:81:37:0a:48:3f:2d:df:8c:52:ff:a2:49:08:
                    e3:3c:49:ff:b1:c7:83:e8:1b:43:9a:62:5b:5a:4f:
                    e9:0f:49:23:53:11:bb:26:c4:d4:3c:f7:34:2a:f3:
                    2b:45:ed:25:d0:a3:df:66:a8:07:db:07:79:12:c7:
                    5c:ff:7e:4c:f9:c5:e2:05:b2:c8:dd:db:ec:f3:d5:
                    23:91:ff:b2:13:e3:27:99:41:fe:30:c4:3f:a8:a2:
                    41:e5:20:99:18:e2:20:31:f9:93:f4:60:5f:a7:da:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FF:95:A1:5C:BA:71:B6:C2:8A:7A:92:14:61:D3:FA:12:CC:2E:4B
            X509v3 Authority Key Identifier:
                keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:45:24:c2:63:b7:46:63:ce:ca:14:6f:35:ff:18:05:07:6e:
         2e:00:ea:ca:fb:41:fe:71:cf:18:45:ff:78:d8:3e:f5:65:9f:
         ee:4a:4d:d2:a8:21:90:71:2b:7a:50:6a:89:42:af:31:5d:19:
         f5:5d:a9:98:9a:13:3f:ee:39:e6:83:cf:6f:27:b1:e2:b2:e3:
         c5:e3:7a:94:e3:ba:ed:72:ec:a4:d6:98:5f:97:ac:ec:af:ce:
         40:8a:58:cf:a1:1d:c7:b9:dc:d4:71:0a:f3:e4:81:08:93:92:
         1f:c2:67:47:46:2a:90:5a:90:b1:25:80:33:ad:d0:a0:b3:d2:
         dc:17:67:84:ce:0d:f7:d3:82:bc:c6:4c:82:53:e9:22:e0:6c:
         ad:20:70:f6:b9:92:07:0e:ee:24:b5:68:a0:36:84:09:02:2a:
         1c:29:d1:71:2d:ae:68:8b:0f:9c:5f:da:e9:e1:6c:e6:35:35:
         95:eb:da:6e:78:04:05:f2:db:fa:5b:b4:dd:9d:48:f6:75:2b:
         38:b4:7b:59:b3:f6:0a:12:68:31:c4:5d:6a:d2:3b:45:fd:05:
         15:d7:03:47:6a:8f:05:09:8c:5a:52:e3:34:1a:74:db:60:a7:
         a5:de:bd:63:0e:db:90:48:5e:e6:ec:a0:fc:b0:fd:e7:99:b0:
         b4:8d:99:49
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODlGNjlBRjExMC8GA1UEBRMoMjg1RjYxQThGNTIzMzA2NDUzNzg2NTkyNzQ0NkEw
MDUwMkUxMUVCRjAeFw0yNTA0MjUwNDM1NDlaFw0yNTA0MjcwNDM1NDlaMBgxFjAU
BgNVBAMTDTY4MGIxMTI2LTJjNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmrhrpovLfWcn/CoPj7MhmggTZ1rJkYKAXJKbEyWlgZBQ8TNahLxLRhp0L
z81FHZhdElr1JQUPz4oi9NKuPkuhcnAc8oN4uLpdL0H9vw84SZCtaqj4Fd3drj+J
o/grszu1xMbD683GCV0IwWMZJb6Tvhh12h6cN0FrTEMUfrgBFhQ6GFjZxpWIGK6G
GEFkPO2tRHRrDI2pgTcKSD8t34xS/6JJCOM8Sf+xx4PoG0OaYltaT+kPSSNTEbsm
xNQ89zQq8ytF7SXQo99mqAfbB3kSx1z/fkz5xeIFssjd2+zz1SOR/7IT4yeZQf4w
xD+ookHlIJkY4iAx+ZP0YF+n2synAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsv+V
oVy6cbbCinqSFGHT+hLMLkswHwYDVR0jBBgwFoAUKF9hqPUjMGRTeGWSdEagBQLh
Hr8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg5RjY5L0I2QjVBNDhDMkZDNDExRUZBMDRDREE4RDc2MkU5NTFBL0tGOWhx
UFVqTUdSVGVHV1NkRWFnQlFMaEhyOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tGOWhxUFVqTUdSVGVHV1NkRWFnQlFMaEhyOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODlGNjkvQjZCNUE0OEMyRkM0MTFFRkEwNENEQThENzYy
RTk1MUEvS0Y5aHFQVWpNR1JUZUdXU2RFYWdCUUxoSHI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAURSTCY7dGY87KFG81/xgFB24uAOrK
+0H+cc8YRf942D71ZZ/uSk3SqCGQcSt6UGqJQq8xXRn1XamYmhM/7jnmg89vJ7Hi
suPF43qU47rtcuyk1phfl6zsr85AiljPoR3HudzUcQrz5IEIk5IfwmdHRiqQWpCx
JYAzrdCgs9LcF2eEzg3304K8xkyCU+ki4GytIHD2uZIHDu4ktWigNoQJAiocKdFx
La5oiw+cX9rp4WzmNTWV69pueAQF8tv6W7TdnUj2dSs4tHtZs/YKEmgxxF1q0jtF
/QUV1wNHao8FCYxaUuM0GnTbYKel3r1jDtuQSF7m7KD8sP3nmbC0jZlJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:28 2025 by rpki-client on console.sobornost.net