Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
File:                     rMoLOe836hkY2RAi6kHS1ZNtJCY.mft (raw, json)
Hash identifier:          BbWEyJfoopNuDeXRLxze4w5E9YAWT0cH0QPBOoOtGYE=
Subject key identifier:   32:A9:8A:19:EF:50:D3:D2:5E:B0:27:F1:32:C1:C6:CB:FC:D5:6C:EE
Authority key identifier: AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
Certificate issuer:       /CN=F361785AAF/serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Certificate serial:       0149
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
Manifest number:          0146
Signing time:             Wed 17 Sep 2025 04:42:12 +0000
Manifest this update:     Wed 17 Sep 2025 04:42:11 +0000
Manifest next update:     Fri 19 Sep 2025 04:42:11 +0000
Files and hashes:         1: rMoLOe836hkY2RAi6kHS1ZNtJCY.crl (hash: BbRTV2kWZJcFj30bNdBM38gLeQakezbAaub0V0VVJlA=)
                          2: 0865A9A03F8011F09D9EB4C0DAE4EC9C.roa (hash: eAtT77xV4NEBf1cf+HT8ySye2iBWrSOl4kk6XxsESlo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361785AAF, serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
        Validity
            Not Before: Sep 17 04:42:11 2025 GMT
            Not After : Sep 19 04:42:11 2025 GMT
        Subject: CN=68ca3c24-3952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:5a:1f:c7:be:3a:7b:a3:11:4a:1f:d0:f1:
                    99:ea:b3:f1:a3:b7:95:c3:65:97:6e:06:14:63:59:
                    56:5e:81:cb:0e:12:05:bf:d4:ed:6a:0d:c4:30:15:
                    a0:93:b7:e5:a2:1d:36:94:c4:1f:e7:43:66:e6:68:
                    40:1d:a6:41:61:8d:16:a9:e5:23:bb:c6:90:ac:5d:
                    65:8e:9d:d7:82:66:03:ed:74:5b:5b:6d:4d:33:21:
                    a7:38:1b:08:cd:b0:45:ce:b1:d6:5f:05:34:0d:86:
                    1d:9f:ad:d3:b9:6f:95:93:37:91:cc:96:90:43:32:
                    ec:77:f9:2f:8e:97:a9:0f:14:d7:fc:e6:92:ee:43:
                    fa:ff:63:cc:67:16:33:22:3c:a7:f8:33:e2:33:a5:
                    7d:dd:fa:1d:ae:bc:40:8a:54:db:19:15:01:d2:a5:
                    f4:b8:ed:01:b2:b3:48:d6:53:55:3d:c4:0f:32:c4:
                    33:14:6e:0b:01:23:89:64:49:b3:20:93:a3:85:8e:
                    a8:b6:8e:d4:e4:58:72:1f:cb:64:3a:cc:b8:b9:2b:
                    3b:7e:4f:99:be:04:62:20:78:dd:f4:6c:f5:54:83:
                    02:bd:1f:0b:ff:fe:18:8c:2f:c2:86:9d:a2:e7:b6:
                    19:b5:d0:38:43:37:43:b2:79:98:11:be:13:a6:a2:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A9:8A:19:EF:50:D3:D2:5E:B0:27:F1:32:C1:C6:CB:FC:D5:6C:EE
            X509v3 Authority Key Identifier:
                keyid:AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a7:ec:e0:7e:6d:cf:7d:59:48:e8:0a:0c:4a:59:f2:52:a9:
         20:09:83:4e:ae:20:a2:12:a4:20:76:f5:25:04:40:3f:01:4d:
         7d:c5:b0:a6:f3:4e:8a:5d:77:88:71:b5:da:8c:6c:04:f5:1e:
         ed:e8:6a:e4:6f:56:ab:78:c3:cc:a7:55:ac:d3:48:ee:a1:86:
         02:fa:95:d8:76:e5:4b:1e:b5:48:74:5c:9a:49:e0:44:41:29:
         0f:3b:f6:e9:7a:cd:e7:41:09:ee:d2:94:58:1a:0b:82:28:20:
         2f:ad:4f:ca:a3:87:00:ab:86:aa:91:8c:2c:fa:02:3a:be:d1:
         d6:7e:c7:36:83:2e:af:2a:f9:dd:ba:ea:26:f0:a2:ba:d5:76:
         d9:3f:6d:97:29:8b:7c:c8:89:a6:34:87:13:7c:e3:0e:54:f3:
         c1:e9:c5:6a:ab:11:9a:df:29:ad:5d:dd:a6:e9:8d:99:59:96:
         2e:15:a1:65:b4:f2:6a:39:c0:27:c7:71:8d:67:aa:83:80:82:
         ef:6c:2b:76:9c:8a:ac:e3:46:53:75:50:96:ea:c9:34:15:04:
         71:5d:7f:5e:50:da:a9:27:dc:4d:74:f1:e4:ac:6d:cc:ed:f4:
         2c:c2:0d:ea:b3:c6:84:0e:7d:2e:a0:ad:92:6f:01:65:eb:bb:
         cc:b6:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:36:56 2025 by rpki-client