Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File:                     62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier:          cJWu25ZUT/UXhl2ynjNXNRFAfTAOJEnFU/9eyCcR1xI=
Subject key identifier:   AB:F2:AA:54:20:9E:7A:76:FF:12:22:0A:85:94:25:BC:7B:92:E7:C6
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer:       /CN=AfriNIC-Root-Certificate
Certificate serial:       58
Authority info access:    rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access:      rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number:          C5
Signing time:             Wed 10 Sep 2025 08:00:19 +0000
Manifest this update:     Wed 10 Sep 2025 08:00:19 +0000
Manifest next update:     Fri 17 Oct 2025 08:00:19 +0000
Files and hashes:         1: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
                          2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
                          3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: Q/B2VplXkIk4c6zmZi0CweOvRX1/EaJI52uAmfRA9Fw=)
                          4: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
                          5: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
                          6: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 17 Oct 2025 08:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Sep 10 08:00:19 2025 GMT
            Not After : Oct 17 08:00:19 2025 GMT
        Subject: CN=68c13013-deb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:1b:c0:ff:e8:f9:5d:c4:66:01:d8:67:1e:
                    9c:0e:9b:3a:1f:3e:1f:34:b4:f4:d4:5a:2d:b4:6b:
                    43:d7:43:1d:f7:c1:32:a0:5e:6b:33:41:f4:9e:22:
                    e7:fd:db:83:56:04:74:8d:05:24:20:51:00:8c:ff:
                    e0:00:e8:1b:0d:d1:46:27:6c:ae:d2:0e:36:24:f9:
                    fc:37:35:06:ea:18:b2:dc:19:32:a3:28:d2:e2:c3:
                    3f:ad:55:02:14:56:ab:12:ba:8e:f6:3e:7f:90:20:
                    9a:fc:5a:35:6a:34:bb:7b:fe:a5:83:55:65:56:f5:
                    70:7f:78:fd:e2:9b:a4:80:31:bf:1d:b1:53:49:43:
                    c7:73:de:ad:2b:6b:25:07:13:1c:27:89:04:0b:21:
                    f3:65:9d:1b:cf:8a:7c:3b:5f:6e:bd:0e:5b:37:66:
                    04:7e:36:cd:e4:68:53:a9:8d:ac:72:9d:48:9e:43:
                    32:0c:4e:64:95:d3:70:d7:a1:60:21:e0:13:5a:b3:
                    29:5b:89:05:da:82:9c:b6:34:45:ca:63:2a:59:2a:
                    2b:f8:85:ea:8c:1b:79:20:45:5f:f7:04:7c:76:e6:
                    60:45:d8:bc:69:37:d3:c3:84:b6:e0:04:e0:ed:b8:
                    2f:66:96:cc:52:c7:dc:ba:8f:99:51:f3:ff:bd:c1:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F2:AA:54:20:9E:7A:76:FF:12:22:0A:85:94:25:BC:7B:92:E7:C6
            X509v3 Authority Key Identifier:
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:57:de:6e:83:fc:a8:07:fc:f5:86:bd:94:f6:72:f1:81:5c:
         c3:1c:d0:45:3e:7e:87:5e:48:71:ab:f4:05:15:11:13:24:78:
         de:88:6b:4b:13:e2:9b:ea:c6:12:ac:68:8c:af:73:9c:8c:55:
         a7:1f:a1:ee:d9:d1:94:4e:44:f0:fb:6d:fa:f3:af:a5:2a:d3:
         b4:c8:30:36:cf:a5:fb:ae:24:75:0b:e2:2f:ed:e0:9a:66:5b:
         53:1e:60:78:53:92:78:d5:ab:ad:e9:7d:f7:7c:c1:9e:cc:b4:
         bd:83:73:6a:1b:51:9b:0e:3f:a9:50:64:73:8b:c0:ab:4a:7a:
         dd:ad:0b:0c:8e:98:d6:58:ad:39:a2:1d:81:72:b9:f5:04:1d:
         28:b8:f8:9f:1f:cc:a6:4c:75:b9:05:38:84:d5:b0:27:f9:e1:
         a2:1f:1b:d1:be:1b:76:6e:51:bf:26:d9:0c:8f:04:87:9f:ce:
         b5:c5:4c:84:5b:33:d5:6f:c0:13:ac:79:ce:a6:43:4f:7e:41:
         a3:a1:85:5a:29:90:c6:cc:86:d3:0e:a9:88:1d:6e:9c:88:64:
         9d:97:c7:0a:2e:c3:ad:09:aa:90:04:bc:7b:34:3c:55:70:86:
         81:39:1f:67:c9:ed:25:9a:db:b9:58:1c:c9:1f:bf:a2:4b:f6:
         0b:0e:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:41:47 2025 by rpki-client