Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File:                     aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier:          InMfXAeFpMI6wTOqNU3m3Ofdu6AlOhdHiFfmbwLP1y4=
Subject key identifier:   CF:F3:BB:98:00:93:E1:7B:85:D7:A4:64:1A:B1:58:87:61:D1:80:46
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer:       /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial:       060F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number:          060F
Signing time:             Wed 17 Sep 2025 02:18:20 +0000
Manifest this update:     Wed 17 Sep 2025 02:18:19 +0000
Manifest next update:     Fri 19 Sep 2025 02:18:19 +0000
Files and hashes:         1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: LmqLQTf1wXZQ2iPQLqqj00PI0jflQLcc5ejoy89gY0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826AF, serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
        Validity
            Not Before: Sep 17 02:18:19 2025 GMT
            Not After : Sep 19 02:18:19 2025 GMT
        Subject: CN=68ca1a6c-8bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:0d:56:63:c6:3a:1d:a2:05:35:a5:1a:fb:
                    a1:81:32:00:46:1a:5b:e1:08:89:8d:33:97:12:7a:
                    25:b8:7f:9c:cf:dd:59:46:88:8d:b1:35:18:d2:83:
                    75:1a:80:d8:d9:06:99:51:72:82:bd:f9:6e:7b:ab:
                    89:18:02:fe:79:a0:61:a2:08:0f:48:1a:ed:d6:c7:
                    8a:64:ee:fd:c1:97:0b:0f:60:c4:ec:fc:ed:69:bd:
                    4e:86:12:09:ea:6f:6f:91:a5:d7:66:f2:2d:b8:da:
                    25:76:1e:3f:bd:5d:0e:20:ce:90:db:70:3e:12:90:
                    99:20:d9:ab:ab:91:d5:45:b2:d5:0e:2f:30:b3:d0:
                    47:bf:a1:ab:22:a5:14:3d:46:9a:07:d1:74:ad:35:
                    be:67:2b:45:38:cc:36:f8:d9:0e:9c:20:82:b5:61:
                    d0:d5:28:59:71:61:93:62:8b:d3:1b:60:35:df:5d:
                    6f:a9:85:f1:5d:56:95:42:72:3f:5c:bf:fc:c8:85:
                    b1:b5:68:47:7e:6a:7a:f3:ee:f1:10:48:28:8e:e9:
                    8f:ca:6b:0b:d6:50:5b:53:ba:72:5d:d0:9b:5a:2c:
                    f3:a7:2b:7f:26:6c:1c:6e:d2:e6:a5:ac:b5:fa:87:
                    e4:bb:cc:34:8a:9d:0f:b5:27:37:bb:d2:a5:7c:3a:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F3:BB:98:00:93:E1:7B:85:D7:A4:64:1A:B1:58:87:61:D1:80:46
            X509v3 Authority Key Identifier:
                keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:0d:c3:15:f3:84:fe:b7:8a:d7:46:4c:af:a0:86:a7:7d:0f:
         3e:4c:23:c8:8c:d1:3b:96:e2:0f:b9:44:45:76:a2:07:07:46:
         fb:42:08:fa:e0:81:a3:7e:39:88:fa:9f:f1:5c:5a:96:2f:f5:
         86:fa:5e:0c:a5:3f:b7:bc:4a:3b:cb:e5:72:57:90:e5:16:30:
         8d:9d:68:01:91:4b:ca:4b:6e:e9:1d:c6:ad:7d:3a:04:9f:b4:
         9f:81:0b:06:42:53:7b:6e:a1:5e:b5:11:49:ee:b7:4a:d6:5a:
         73:51:49:46:63:6f:fa:01:d8:5a:55:af:d7:ab:dc:c4:c8:9e:
         ce:9e:45:48:6e:ce:71:1b:73:85:05:64:cd:b0:1e:10:e3:7f:
         33:fb:fd:50:a7:aa:ec:7d:a0:47:92:1f:80:1f:1c:70:0e:9f:
         25:81:eb:30:41:e4:44:32:97:85:22:2e:46:10:e2:78:61:cb:
         b4:20:83:b2:d4:b0:d1:8c:85:79:c0:82:d6:b1:3c:47:0c:6b:
         23:66:bc:80:65:ee:54:fd:aa:65:3e:f8:05:71:95:24:9f:45:
         4e:b4:74:d6:08:92:c2:3d:03:1d:73:68:cd:86:21:fe:24:ba:
         d2:2c:d9:3f:cc:e9:4e:1d:4e:90:25:03:d9:45:e6:16:b4:ca:
         af:c3:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:24:31 2025 by rpki-client