Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          bsD137j+ugp1aPGH8l5HI+eUSYO59ZnpWqoUATBO7Lk=
Subject key identifier:   64:D9:73:71:70:12:C6:CB:47:6A:8B:D0:56:1C:24:16:00:B4:DA:15
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       0249
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          0249
Signing time:             Wed 17 Sep 2025 04:06:36 +0000
Manifest this update:     Wed 17 Sep 2025 04:06:36 +0000
Manifest next update:     Fri 19 Sep 2025 04:06:36 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: id8lkx4G5phJXLPGNcVaMz6fTlt9RwwydXnhWO9+cQk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Sep 17 04:06:36 2025 GMT
            Not After : Sep 19 04:06:36 2025 GMT
        Subject: CN=68ca33cc-89ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:89:4b:13:50:2a:30:44:c6:b4:18:7d:91:
                    8c:99:9f:61:9c:3d:98:1d:7d:19:27:bb:84:d4:16:
                    b6:8a:6f:b6:39:97:0d:6f:d2:2a:b4:18:7f:e8:29:
                    ee:1a:af:96:b6:40:fd:c8:fd:b1:04:e0:a6:02:97:
                    fb:16:39:ea:4a:99:e7:af:0a:7c:93:53:fb:86:b4:
                    1f:61:8e:27:08:5e:75:13:51:46:10:2b:85:56:ac:
                    51:f2:43:d1:15:d7:8e:be:19:05:32:7e:8d:64:46:
                    4f:5d:08:1a:55:93:e8:be:e6:ac:a4:54:74:e5:e1:
                    3f:7d:86:3f:d6:52:37:8f:f6:4f:06:f6:3e:3e:ae:
                    62:f3:43:6f:6d:09:aa:a8:c0:3a:ad:0e:18:94:4f:
                    99:96:2d:83:e8:91:e9:e2:4e:5a:d2:93:b8:c7:23:
                    48:76:91:c1:14:8b:fb:4f:ea:51:29:c0:a4:3d:a7:
                    44:e7:fc:52:b5:f7:cd:13:9e:72:2d:51:1f:1a:01:
                    a2:64:75:ca:60:f5:c1:b6:ad:8a:5b:11:64:f8:40:
                    e8:85:69:7d:dc:65:db:22:3c:56:76:3c:bb:79:91:
                    92:cc:65:bb:ca:d2:35:be:02:d8:46:91:7a:56:89:
                    f5:13:13:67:2d:cf:d8:84:61:21:2b:1b:a9:95:37:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:73:71:70:12:C6:CB:47:6A:8B:D0:56:1C:24:16:00:B4:DA:15
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:24:03:b4:67:10:93:36:46:99:8e:06:6f:30:ba:6c:9d:e9:
         64:55:ea:df:44:c9:de:74:12:c5:6f:b7:ea:8d:f1:4d:7a:3d:
         f9:16:77:40:33:28:f4:ce:b9:a8:03:40:c2:1e:61:88:b2:e9:
         36:b3:9f:9d:47:b8:78:e2:1a:f9:2f:54:99:1e:c5:bb:3e:d2:
         cf:b2:6c:71:c1:26:15:9a:76:44:da:b6:4b:56:20:cc:ae:8f:
         d5:45:e7:b0:f5:8d:2b:f0:25:da:24:f2:e3:11:49:0a:4e:14:
         c4:29:db:60:d2:50:d4:1d:63:ce:4c:bb:6c:a8:c3:89:43:4c:
         a3:1d:8d:74:36:74:0c:ac:70:50:0b:6c:8b:c8:4a:6f:01:23:
         df:1e:90:aa:96:46:4c:dc:75:8a:0e:81:5f:9a:6a:24:78:8f:
         6d:de:de:9d:b8:e2:ef:1b:5d:a4:6d:c1:67:32:0e:87:39:14:
         22:a1:cc:e1:fa:bc:58:ce:45:11:09:8f:4f:b7:5d:91:12:6e:
         8e:2c:50:7a:dd:70:e6:4e:00:42:92:5d:f5:79:4b:17:ef:dd:
         e6:83:82:48:e8:61:65:3c:e4:35:1e:c7:e9:4c:46:09:96:e1:
         9e:07:9b:04:12:c8:d6:f2:2b:2b:b0:83:83:ac:20:f8:76:5b:
         81:6a:71:54
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTExQzZBRjExMC8GA1UEBRMoNzA5MDA4QURDNzE3OTE4RkRGRkNGMTY3NDFGQjVC
MTMwQkE3QzQzMDAeFw0yNTA5MTcwNDA2MzZaFw0yNTA5MTkwNDA2MzZaMBgxFjAU
BgNVBAMTDTY4Y2EzM2NjLTg5YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0TIlLE1AqMETGtBh9kYyZn2GcPZgdfRknu4TUFraKb7Y5lw1v0iq0GH/o
Ke4ar5a2QP3I/bEE4KYCl/sWOepKmeevCnyTU/uGtB9hjicIXnUTUUYQK4VWrFHy
Q9EV146+GQUyfo1kRk9dCBpVk+i+5qykVHTl4T99hj/WUjeP9k8G9j4+rmLzQ29t
CaqowDqtDhiUT5mWLYPokeniTlrSk7jHI0h2kcEUi/tP6lEpwKQ9p0Tn/FK1980T
nnItUR8aAaJkdcpg9cG2rYpbEWT4QOiFaX3cZdsiPFZ2PLt5kZLMZbvK0jW+AthG
kXpWifUTE2ctz9iEYSErG6mVN1VfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZNlz
cXASxstHaovQVhwkFgC02hUwHwYDVR0jBBgwFoAUcJAIrccXkY/f/PFnQftbEwun
xDAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExMUM2Lzg2QURBODk4RDIyQzExRUU4OTcyMTM2QTc3NTQxMkU2L2NKQUly
Y2NYa1lfZl9QRm5RZnRiRXd1bnhEQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NKQUlyY2NYa1lfZl9QRm5RZnRiRXd1bnhEQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTExQzYvODZBREE4OThEMjJDMTFFRTg5NzIxMzZBNzc1
NDEyRTYvY0pBSXJjY1hrWV9mX1BGblFmdGJFd3VueERBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmJAO0ZxCTNkaZjgZvMLpsnelkVerf
RMnedBLFb7fqjfFNej35FndAMyj0zrmoA0DCHmGIsuk2s5+dR7h44hr5L1SZHsW7
PtLPsmxxwSYVmnZE2rZLViDMro/VReew9Y0r8CXaJPLjEUkKThTEKdtg0lDUHWPO
TLtsqMOJQ0yjHY10NnQMrHBQC2yLyEpvASPfHpCqlkZM3HWKDoFfmmokeI9t3t6d
uOLvG12kbcFnMg6HORQioczh+rxYzkURCY9Pt12REm6OLFB63XDmTgBCkl31eUsX
793mg4JI6GFlPOQ1HsfpTEYJluGeB5sEEsjW8isrsIODrCD4dluBanFU
-----END CERTIFICATE-----
Generated at Thu Sep 18 02:04:15 2025 by rpki-client