Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
File:                     -HlTHl-cqfSLcTODpQCBDVDy0kQ.mft (raw, json)
Hash identifier:          z57pBWwCtyw3/5nIR9h1xTU/n7uhwvmXEOHV7oRnYcg=
Subject key identifier:   4D:D0:0F:C2:05:57:AF:02:F2:99:54:6D:5D:AC:52:69:AF:84:DB:50
Authority key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
Certificate issuer:       /CN=F361950AAF/serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Certificate serial:       68
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
Manifest number:          66
Signing time:             Wed 17 Sep 2025 05:00:33 +0000
Manifest this update:     Wed 17 Sep 2025 05:00:33 +0000
Manifest next update:     Fri 19 Sep 2025 05:00:33 +0000
Files and hashes:         1: -HlTHl-cqfSLcTODpQCBDVDy0kQ.crl (hash: A1aF3EenUgdOy838iz8g3KFtxjGmgRLQm9sqLhweqX4=)
                          2: 7B6F3054478411F0B371B7DADAE4EC9C.roa (hash: w5E8JBOJdrFnCHufU8YUVNcTyXQmMdg4vF0OTc1n9B4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
        Validity
            Not Before: Sep 17 05:00:33 2025 GMT
            Not After : Sep 19 05:00:33 2025 GMT
        Subject: CN=68ca4071-5ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:c5:15:0c:6a:de:e4:49:4b:3a:40:71:22:
                    f8:28:c5:c4:9a:9c:be:0e:2e:25:b4:d4:bc:1c:49:
                    c8:95:d0:a7:2d:2a:ce:a6:59:dc:51:20:44:dc:50:
                    ef:d1:06:2a:73:d8:2e:10:73:3d:a3:4c:40:e7:01:
                    9e:66:25:de:5b:4b:6b:d3:52:08:58:bf:de:a3:4d:
                    e1:b4:70:47:b3:e8:24:5e:7c:e8:fa:ab:ac:43:b3:
                    cc:25:33:8a:35:e0:0a:36:b1:e8:a2:38:92:33:c1:
                    df:03:a4:70:00:c2:a7:01:f1:54:1d:d6:56:8e:1b:
                    de:da:f6:2b:17:a5:c2:35:05:b4:f8:cf:56:21:60:
                    5c:6b:d1:4e:3f:98:f6:e3:40:a5:2b:8e:0d:a4:d5:
                    5e:8f:21:6e:3d:96:16:16:c6:e9:c8:82:e3:39:c8:
                    36:5c:c2:0a:76:94:28:6c:2e:9e:3a:bc:1a:85:b0:
                    f6:38:ea:17:04:58:94:76:7d:10:3e:c5:aa:62:fd:
                    bd:c3:33:92:39:7b:49:07:4f:db:78:0e:e2:c1:e4:
                    f4:24:01:dc:10:0a:fb:04:34:bd:21:20:e1:d2:5e:
                    b8:90:4f:29:4f:9a:50:38:2c:68:38:8c:25:15:21:
                    b8:6f:e1:56:36:52:7b:67:8b:37:8a:72:c4:5c:85:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:0F:C2:05:57:AF:02:F2:99:54:6D:5D:AC:52:69:AF:84:DB:50
            X509v3 Authority Key Identifier:
                keyid:F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:dd:c6:9a:7e:ed:f9:94:36:0e:1d:62:6f:c5:1d:c2:eb:b2:
         31:4b:7c:f1:a5:72:f1:d0:72:8d:ca:92:fc:3a:45:69:2c:07:
         17:e1:49:40:24:1c:1a:e0:fe:fc:97:41:ef:87:84:03:ef:dd:
         04:1a:0f:48:a5:5e:94:4c:68:28:04:77:97:89:d2:6a:5c:ff:
         a2:17:65:c6:28:e7:97:f8:2c:9e:e5:db:42:85:e6:6a:74:1d:
         47:5b:57:cd:c5:44:17:a1:de:33:5e:98:8b:3d:48:ce:3b:58:
         a4:c3:77:9c:bf:af:2c:87:9e:35:7a:70:79:9a:f6:d4:a8:48:
         59:02:65:29:cc:50:2f:a1:6e:0c:c2:15:99:11:6c:be:fa:46:
         93:46:d8:0f:3e:bc:2d:e1:66:77:f7:03:b6:e3:f6:59:f5:8d:
         ac:f3:43:b2:54:9c:88:c7:88:d6:ac:1a:ec:6b:c6:63:dd:18:
         b9:69:ea:18:17:50:ec:2d:04:64:56:a4:ea:63:bc:cd:c4:a9:
         39:76:66:b0:27:01:d4:c8:9b:3a:c5:94:a9:d0:4b:f5:2f:04:
         fa:d6:d9:94:6b:6a:a6:a7:d7:e8:ed:75:27:5c:d4:b7:01:27:
         da:f1:bd:eb:cf:b2:fc:fc:ff:be:96:64:fa:3d:85:e1:87:9b:
         3c:a9:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:50:06 2025 by rpki-client