Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File:                     XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier:          Jauw7ifxyBnVJX4wcjpoGW1m8Hr4yPSMLuh7fGZ90CY=
Subject key identifier:   82:A6:C0:26:6A:80:AC:3E:65:0B:D3:D2:2B:6E:EB:B8:BB:4C:8F:52
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer:       /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial:       047A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number:          0478
Signing time:             Thu 31 Jul 2025 03:09:39 +0000
Manifest this update:     Thu 31 Jul 2025 03:09:39 +0000
Manifest next update:     Sat 02 Aug 2025 03:09:39 +0000
Files and hashes:         1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: klfyDs29OhqAh8ysQzGEj1cPrNasoTc+9sbbKZcRmCw=)
                          2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361174DAF, serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
        Validity
            Not Before: Jul 31 03:09:39 2025 GMT
            Not After : Aug  2 03:09:39 2025 GMT
        Subject: CN=688ade73-1beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:58:ad:48:c1:86:31:07:98:8f:87:45:2d:28:
                    2d:94:f9:82:92:cb:df:34:16:c1:88:6e:e4:ce:58:
                    5e:2e:eb:c5:c8:71:d8:67:4f:7f:8b:42:ff:3d:f5:
                    22:e0:77:80:b9:3e:de:e9:34:fe:4c:78:76:32:d5:
                    c5:fb:6f:40:2a:76:40:0d:d9:ba:87:58:bc:f7:b8:
                    85:75:60:20:81:a3:f1:aa:d8:35:0f:74:e6:35:f2:
                    ae:ab:48:fe:c5:00:cd:40:25:21:05:cb:81:d3:dd:
                    7f:60:8b:62:84:b2:9b:78:cc:29:48:1f:51:f9:7e:
                    c0:9f:4d:17:18:b9:cc:db:ad:ca:26:4a:27:a6:da:
                    bd:7c:14:00:75:b5:c7:74:28:37:34:e4:94:f0:2f:
                    38:7f:55:18:4f:35:4f:83:fd:6c:94:d1:a2:b1:20:
                    dc:94:6e:4d:e4:dd:a4:2c:83:fc:7f:48:ab:5b:41:
                    e6:fc:6e:bc:49:73:01:23:59:c2:11:ab:aa:f3:48:
                    95:7c:4a:d3:75:11:9a:08:15:80:69:5f:a0:3c:26:
                    7c:fc:53:c1:d3:0f:a0:2d:41:77:71:15:43:44:20:
                    51:6f:a7:65:a9:57:ae:5c:3d:a9:98:3e:eb:41:cb:
                    79:34:2a:46:46:ef:18:24:d7:c4:2c:96:74:ff:03:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:C0:26:6A:80:AC:3E:65:0B:D3:D2:2B:6E:EB:B8:BB:4C:8F:52
            X509v3 Authority Key Identifier:
                keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1d:05:72:62:35:a9:09:02:4f:dc:6c:4f:cc:52:33:01:8f:
         27:a6:3c:a0:03:02:84:c2:1c:20:ec:e6:9a:7d:1c:5d:96:eb:
         fe:27:b9:0a:70:e8:d2:50:3e:fe:f7:f3:4b:ea:ef:79:1f:d7:
         45:5e:40:30:33:1f:48:fb:31:93:f7:e8:0d:27:30:05:9b:ff:
         76:00:05:df:88:1f:c1:2d:d9:4b:7e:da:ee:2a:c3:23:93:7d:
         52:92:75:23:eb:65:23:67:29:ee:51:e6:1f:7f:6a:4e:a0:cc:
         bd:86:7f:97:1d:76:be:9b:bb:d0:16:04:b7:fd:6b:8f:97:8e:
         ec:99:46:89:d2:6a:72:96:54:49:5a:e9:fd:d1:1f:91:c4:2a:
         14:0d:90:68:fb:1f:6f:af:e0:80:33:c5:4c:9e:06:c9:d1:68:
         cd:cb:45:f1:67:49:f9:f7:fc:bd:e6:8e:a6:1f:ef:fe:54:a3:
         f6:b8:4f:99:11:47:d5:85:f5:7e:25:f8:70:84:4e:cd:37:11:
         9d:3d:45:89:af:0e:53:5c:22:8c:51:81:9e:fb:0b:8d:7d:aa:
         64:da:41:88:09:57:f9:c7:8f:53:49:0b:60:56:a7:00:5c:c0:
         63:73:21:0a:e7:33:da:4e:83:2f:60:f3:a6:dd:0c:80:3c:39:
         d8:8d:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:54 2025 by rpki-client