Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          5ukYI18XMiv/3GV8i31baFE1QEE5fUfgFWY8h1PoaTQ=
Subject key identifier:   8A:DD:6A:6A:EC:E3:17:C5:2B:96:F9:24:D3:5C:04:60:BD:01:BE:AD
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       04CB
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          04C8
Signing time:             Thu 18 Sep 2025 02:49:44 +0000
Manifest this update:     Thu 18 Sep 2025 02:49:43 +0000
Manifest next update:     Sat 20 Sep 2025 02:49:43 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: 2tpCyIxx8mIEXNNs8+eoYjYTQ0KTpDe+x02DeZsxvIs=)
                          2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=)
                          3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=)
                          4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Sep 18 02:49:43 2025 GMT
            Not After : Sep 20 02:49:43 2025 GMT
        Subject: CN=68cb7348-4788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:78:ba:13:f6:2b:16:c1:a3:2a:3d:ba:d2:
                    db:bd:90:99:56:f3:2a:76:4f:6f:80:7b:5a:b6:a3:
                    36:97:fa:8c:e7:dd:fd:7b:17:1a:10:e9:2b:bd:7d:
                    e5:d0:9f:bf:e7:98:0a:18:67:91:9c:8c:76:8e:3d:
                    70:b5:ab:bb:1f:82:0a:99:b0:cb:71:8b:b5:1f:dd:
                    40:c8:f7:b3:61:53:99:9b:96:6d:b3:90:64:50:ac:
                    90:4d:85:77:cc:a0:41:18:97:7b:25:3c:1a:f3:fa:
                    b6:d5:82:89:11:87:af:21:f9:9a:1b:6b:a3:4a:44:
                    a9:94:3f:63:90:2d:4a:d5:0a:11:59:e7:5d:f6:59:
                    07:be:91:46:a6:19:c1:b1:f7:e0:da:58:39:39:15:
                    09:f6:68:52:4d:75:6b:53:06:8d:72:a2:ab:bc:30:
                    e1:85:39:36:f6:3c:b6:a0:ff:5d:e4:ef:51:61:43:
                    5d:16:32:fc:f6:22:0b:15:3c:10:4c:ef:03:f4:f5:
                    9a:52:d3:f5:66:d6:6e:6a:8d:21:13:e8:16:24:fb:
                    25:bf:86:de:db:f7:00:f4:27:d5:11:c9:a0:17:ea:
                    90:28:97:13:55:36:38:a7:ff:5f:8d:9f:ce:fd:20:
                    1d:1d:e1:05:bd:b1:9b:77:fc:25:b2:78:7c:20:c2:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DD:6A:6A:EC:E3:17:C5:2B:96:F9:24:D3:5C:04:60:BD:01:BE:AD
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:c7:91:32:a2:77:85:b9:6e:11:7b:ef:ac:c3:80:ad:72:
         f9:be:52:70:ce:d1:cb:90:ce:7c:c2:b8:24:bf:96:fd:a8:52:
         dc:29:ca:7f:e3:2a:d7:00:d7:39:ed:ac:15:05:22:89:41:60:
         d9:e4:f4:20:e2:ab:75:6c:90:63:5a:6e:5b:d7:25:d8:23:ef:
         98:0d:a6:90:37:81:30:1b:e9:7c:85:37:a0:c5:0d:54:e1:f9:
         6c:51:e2:40:47:02:f2:b3:56:57:10:52:a2:10:1e:72:b1:16:
         d1:5b:06:ab:b4:13:62:98:c5:7c:04:9f:49:dc:4b:92:08:23:
         b7:21:82:64:bb:a9:a7:70:3c:00:85:4e:eb:cc:10:08:bd:41:
         a0:17:b8:47:25:d2:f8:0d:23:45:28:3d:83:c8:38:6e:7d:c2:
         07:b5:91:db:e1:03:86:7e:b1:cd:ff:2a:72:24:5f:63:ff:30:
         56:9a:fa:b0:8a:06:2f:6b:6b:d5:18:6e:77:35:1b:cc:16:c8:
         79:4d:29:17:b8:58:47:ca:bd:9d:52:24:a4:bc:5f:2b:48:cd:
         19:4f:39:86:45:07:59:04:cd:eb:1e:9d:de:9d:1d:ba:0c:ee:
         86:37:65:ef:5b:61:ef:de:bd:de:5b:00:a1:5a:e2:f0:4b:05:
         aa:d8:c2:65
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc1NjBBUDExMC8GA1UEBRMoNzJGMDg3NDE0Q0UyREY0NEJDNEY0REZGNUJFMTE0
N0E3QTcxQTlBRTAeFw0yNTA5MTgwMjQ5NDNaFw0yNTA5MjAwMjQ5NDNaMBgxFjAU
BgNVBAMTDTY4Y2I3MzQ4LTQ3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxEXi6E/YrFsGjKj260tu9kJlW8yp2T2+Ae1q2ozaX+ozn3f17FxoQ6Su9
feXQn7/nmAoYZ5GcjHaOPXC1q7sfggqZsMtxi7Uf3UDI97NhU5mblm2zkGRQrJBN
hXfMoEEYl3slPBrz+rbVgokRh68h+Zoba6NKRKmUP2OQLUrVChFZ5132WQe+kUam
GcGx9+DaWDk5FQn2aFJNdWtTBo1yoqu8MOGFOTb2PLag/13k71FhQ10WMvz2IgsV
PBBM7wP09ZpS0/Vm1m5qjSET6BYk+yW/ht7b9wD0J9URyaAX6pAolxNVNjin/1+N
n879IB0d4QW9sZt3/CWyeHwgwuVZAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUit1q
auzjF8Urlvkk01wEYL0Bvq0wHwYDVR0jBBgwFoAUcvCHQUzi30S8T03/W+EUenpx
qa4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIyNDY4L2N2Q0hR
VXppMzBTOFQwM19XLUVVZW5weHFhNC5jcmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5p
Yy9jdkNIUVV6aTMwUzhUMDNfVy1FVWVucHhxYTQuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHVBggrBgEFBQcBCwSByDCBxTCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIy
NDY4L2N2Q0hRVXppMzBTOFQwM19XLUVVZW5weHFhNC5tZnQwNQYIKwYBBQUHMA2G
KWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4PHkTKid4W5bhF776zDgK1y+b5ScM7R
y5DOfMK4JL+W/ahS3CnKf+Mq1wDXOe2sFQUiiUFg2eT0IOKrdWyQY1puW9cl2CPv
mA2mkDeBMBvpfIU3oMUNVOH5bFHiQEcC8rNWVxBSohAecrEW0VsGq7QTYpjFfASf
SdxLkggjtyGCZLupp3A8AIVO68wQCL1BoBe4RyXS+A0jRSg9g8g4bn3CB7WR2+ED
hn6xzf8qciRfY/8wVpr6sIoGL2tr1RhudzUbzBbIeU0pF7hYR8q9nVIkpLxfK0jN
GU85hkUHWQTN6x6d3p0dugzuhjdl71th79693lsAoVri8EsFqtjCZQ==
-----END CERTIFICATE-----
Generated at Thu Sep 18 11:26:12 2025 by rpki-client