Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          rS/TYl3Qur4tDp8VP/3h0zKp7v94hAQ1qZ+6qYSBPI0=
Subject key identifier:   94:60:EC:E5:F7:C9:49:F5:3F:39:A7:31:15:FD:7E:E9:70:43:D9:26
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       0172
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          0171
Signing time:             Wed 17 Sep 2025 04:36:57 +0000
Manifest this update:     Wed 17 Sep 2025 04:36:56 +0000
Manifest next update:     Fri 19 Sep 2025 04:36:56 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: 89Zlis6Ja+JeEkKQGzIK/CaGJP1ULjw2W/1UdSzGIMs=)
                          2: F68C77C279C811EFB5AD7293762E951A.roa (hash: w7SzFM4rVLShHyz8Uu4JGbAwVkZlRI11cdVpH3TTF5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Sep 17 04:36:56 2025 GMT
            Not After : Sep 19 04:36:56 2025 GMT
        Subject: CN=68ca3ae9-4704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:c0:61:e9:9e:14:d2:d3:5e:3f:9a:27:e6:
                    a8:e2:3f:77:bb:cc:90:89:ee:14:eb:41:5a:d0:f2:
                    37:d8:ad:84:ec:1d:16:81:e5:ad:d7:00:c9:9a:cb:
                    5c:6c:04:d7:72:13:89:9a:97:a3:59:1c:4a:44:37:
                    cf:e9:7e:42:4e:c1:90:ad:79:a7:92:60:45:98:5e:
                    54:f9:f1:8c:a1:17:76:28:ff:da:66:fc:bb:29:d5:
                    92:dd:4d:48:ac:21:3b:68:d9:85:f2:e6:12:b3:a6:
                    f5:61:fa:87:ed:06:a6:54:8e:fe:41:5c:5c:a1:18:
                    2f:03:f5:8b:c5:9a:87:f2:fc:dd:62:6d:aa:71:d7:
                    be:3e:61:53:91:ed:2e:d6:f3:79:aa:01:1d:05:f8:
                    04:de:39:88:4a:70:8e:7d:29:09:df:a1:ce:23:40:
                    84:90:d0:f1:af:59:d2:19:5d:dc:41:1c:45:31:76:
                    f0:3e:2a:07:f3:ae:90:f8:43:fc:d5:b3:37:c3:5c:
                    16:7d:4b:29:2f:9b:81:32:96:c4:17:5d:bd:5d:9b:
                    4f:ca:45:6d:8d:1d:e2:db:ab:b1:5d:24:9a:45:2d:
                    99:a2:34:7c:05:af:12:0e:e4:20:2d:9b:50:f8:00:
                    63:da:05:05:cb:58:47:bb:55:8e:e8:e0:ff:ef:0e:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:60:EC:E5:F7:C9:49:F5:3F:39:A7:31:15:FD:7E:E9:70:43:D9:26
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:03:4f:7c:ec:c4:6b:7d:f3:e2:14:d4:74:1f:be:ce:4f:64:
         a6:09:a4:62:09:11:1f:8e:95:5d:81:18:47:d0:c8:9c:25:9a:
         35:a0:d2:aa:da:3f:58:ac:2e:83:f2:8b:ab:6a:b7:aa:70:69:
         aa:68:a9:30:59:4e:c7:e1:28:1d:de:7f:2e:a4:f6:1d:9d:92:
         f6:8b:ce:dd:10:28:9f:4b:7b:9f:ac:17:cf:72:e0:96:dd:ce:
         87:0d:44:58:a3:a2:a9:c0:48:b4:3f:70:5c:9c:dd:78:09:12:
         51:9d:4a:d0:21:fd:d7:65:5a:81:7d:23:33:54:86:c7:c4:c3:
         a8:fa:88:63:e5:30:16:1a:35:35:ab:6c:8a:bb:82:a4:4d:d0:
         7c:50:43:26:65:3a:d3:c1:89:09:4d:fe:37:40:ee:97:85:1a:
         e6:02:19:d6:b6:a4:31:10:13:1f:bb:56:f4:0d:c7:07:a9:cc:
         55:b6:4b:57:fc:12:fe:23:58:5b:32:45:2b:08:71:79:4d:7c:
         58:73:66:a6:f5:d8:ca:23:37:9c:82:8d:ae:21:08:bf:cd:a4:
         e0:f3:74:9f:1e:c9:dc:7b:c2:58:f5:0c:d7:5e:f7:65:24:3d:
         8b:bc:3b:48:78:84:ff:0d:45:a1:9d:97:ff:da:2c:0d:03:67:
         c4:4a:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:33:29 2025 by rpki-client