Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
File:                     25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft (raw, json)
Hash identifier:          ZArsereIQEwQ8ZiX7r8Sm8kp/Hnxpna7/7YLoBG4XTk=
Subject key identifier:   D6:4B:2F:61:5E:BB:D3:4E:D5:A2:F3:FE:DD:F3:6B:91:93:9D:B0:5D
Authority key identifier: DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3
Certificate issuer:       /CN=F361D9FBAF/serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
Manifest number:          22
Signing time:             Thu 23 Oct 2025 05:16:43 +0000
Manifest this update:     Thu 23 Oct 2025 05:16:42 +0000
Manifest next update:     Sat 25 Oct 2025 05:16:42 +0000
Files and hashes:         1: 25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl (hash: KDNJ9ERiDNgYA2Dndm6qz5mXkldO4RRZG6t7nkvBpp4=)
                          2: F0E25D4296D111F0B15D59B9DAE4EC9C.roa (hash: vnm/ifaL7Ebf2vByDeiWlvUsn0dciMWBz8R2eRYAChk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Oct 2025 00:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D9FBAF, serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
        Validity
            Not Before: Oct 23 05:16:42 2025 GMT
            Not After : Oct 25 05:16:42 2025 GMT
        Subject: CN=68f9ba3b-1b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:f7:02:f4:1e:a2:7a:26:e4:1a:8b:13:e4:
                    f0:d2:1d:32:f1:e0:f7:1d:6b:c5:94:b3:a7:34:1c:
                    8e:6b:1f:ae:9d:5d:5e:6b:d5:8b:1b:e0:6e:8b:dd:
                    b6:57:3c:4f:aa:9d:7a:55:da:19:4b:4e:c5:6e:34:
                    b8:99:12:44:fe:42:4a:e5:05:24:40:ba:1f:41:d5:
                    21:86:55:59:29:17:a0:e4:9a:fe:81:fa:4c:b6:ff:
                    50:b2:85:ed:b9:a8:39:08:80:46:9d:11:b7:8d:34:
                    74:3c:7b:fd:16:66:1d:ca:55:2f:2a:b7:42:c5:05:
                    e7:41:c1:2c:58:04:95:96:b6:b5:d1:bb:9a:78:3c:
                    e8:af:66:2d:c3:c3:82:ca:6a:73:5a:51:be:15:14:
                    d9:db:2d:b7:61:6f:ef:84:a5:6a:1a:3a:b6:46:07:
                    c3:bc:5e:6a:4c:7c:b6:6e:6c:1c:f8:d3:30:3a:c9:
                    e5:8a:a7:9d:4f:f5:4f:33:ac:c2:bd:7d:7d:db:5c:
                    56:5c:0c:d6:c1:67:c4:12:41:65:1c:74:e9:ae:29:
                    65:52:17:16:c7:33:61:ad:69:4f:58:b0:79:f5:8d:
                    df:6f:f0:8d:3a:17:ef:88:4c:7d:56:6d:07:c6:8f:
                    99:4e:06:67:ca:58:ee:94:f3:a9:bf:f6:17:4e:8c:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4B:2F:61:5E:BB:D3:4E:D5:A2:F3:FE:DD:F3:6B:91:93:9D:B0:5D
            X509v3 Authority Key Identifier:
                keyid:DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4e:5d:11:b6:d7:f6:2a:db:df:dd:5c:6a:99:d6:5f:bd:54:
         04:3b:d7:00:5f:20:de:5f:95:ba:42:6f:32:b0:f2:20:a9:04:
         4f:2d:05:46:e0:1a:cc:de:e8:45:39:a5:b7:01:eb:98:bf:38:
         98:38:b1:3c:7a:fb:a2:52:14:7b:b0:1c:e5:32:58:0c:98:ec:
         ff:ab:28:6a:45:3f:79:dc:9e:af:8b:c1:79:6f:ec:c7:27:42:
         e0:7d:a9:a4:44:3f:e8:0e:b7:ab:4a:5d:3f:22:93:31:bc:65:
         17:e8:d7:ce:09:a5:fb:02:92:32:f4:e5:02:fb:73:40:7a:d5:
         b7:5f:d3:8c:1e:dd:30:84:a9:b6:1a:37:af:df:e0:c2:d8:ec:
         95:21:1c:00:9c:75:b5:9f:5c:78:13:88:46:27:ab:c8:66:7e:
         19:c0:00:59:25:53:18:a7:d1:a3:8c:ea:fd:a1:5f:12:7c:96:
         ea:da:b7:18:97:7f:85:1c:36:b0:35:1c:48:b9:38:af:5e:d0:
         d1:9c:71:2a:dc:b9:29:b3:70:24:7c:91:10:1e:59:82:4e:1b:
         ba:f7:dd:30:ff:c7:c3:cf:e4:91:fb:d5:b3:0e:3d:43:d0:a1:
         c2:14:4d:76:4d:22:15:af:2b:88:a8:f7:92:c8:be:e2:4d:3b:
         67:13:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:41:35 2025 by rpki-client