Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File:                     nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier:          qx6IGQ/IIF1cPZFbg+SoAR4LoBptl64QjwBIh12kvrI=
Subject key identifier:   B4:82:C3:8D:6B:E3:A8:7C:C1:BA:57:09:FB:B9:41:81:54:C4:F2:09
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer:       /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial:       070A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number:          0703
Signing time:             Wed 10 Sep 2025 01:59:03 +0000
Manifest this update:     Wed 10 Sep 2025 01:59:02 +0000
Manifest next update:     Fri 12 Sep 2025 01:59:02 +0000
Files and hashes:         1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: c4fMJ+O3BJ6Ejp0B2VYZnpluPx854MO+qNsbyYaE4Fc=)
                          2: 734F013479C511EFAE81627D762E951A.roa (hash: xdurMFAxJPU0CP+M6yamIm2npN94Z/AsDJKHCn0C3Ko=)
                          3: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
                          4: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
                          5: A573C59E7F2111EFABEC8243762E951A.roa (hash: z2hxV4eIGWcs9mH3SGVDwRrbCV/vQwHP3UQvoUEczXo=)
                          6: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
                          7: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
                          8: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 12 Sep 2025 01:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FF17AF, serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
        Validity
            Not Before: Sep 10 01:59:02 2025 GMT
            Not After : Sep 12 01:59:02 2025 GMT
        Subject: CN=68c0db67-03ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:84:ca:26:93:90:8c:18:3f:f7:5a:3f:25:
                    98:dc:c0:cb:9e:65:ba:95:57:11:b7:f2:ef:b8:d6:
                    e2:38:2b:a0:55:ab:a0:b9:ea:6f:91:75:51:34:bc:
                    c7:40:48:5e:3f:2e:42:b9:0a:14:1f:5b:a1:94:f6:
                    97:da:7e:6f:e5:3d:ee:a6:e1:6c:fc:f8:0f:cb:6e:
                    12:06:d2:71:ac:28:7b:46:98:bc:01:a3:da:99:07:
                    f1:9d:32:e9:7f:f2:d4:5d:97:c7:ed:72:61:df:a7:
                    11:3d:66:ae:c5:f3:69:34:3d:bf:7d:cd:07:83:90:
                    5f:8f:7b:72:e4:04:74:0e:e0:c9:c1:95:d7:45:cf:
                    c5:84:e6:86:fd:de:3b:b6:ea:89:d7:80:07:07:98:
                    2e:00:f5:d1:a4:22:10:da:8e:9b:a2:95:b7:cc:ce:
                    bf:b0:83:69:54:36:fe:30:32:98:3e:d8:b5:f0:d1:
                    b2:37:06:25:b6:0f:1f:77:68:4b:55:66:5c:ce:86:
                    2a:8e:16:55:ca:95:4e:7a:c4:14:17:54:c9:75:34:
                    90:97:cf:0f:93:c3:55:c6:42:26:72:12:bd:99:fd:
                    f6:d0:97:a5:22:36:52:16:a8:37:f8:67:40:a2:b7:
                    df:4a:c0:8a:23:5d:0a:b8:57:50:62:63:88:34:f1:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:C3:8D:6B:E3:A8:7C:C1:BA:57:09:FB:B9:41:81:54:C4:F2:09
            X509v3 Authority Key Identifier:
                keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:3f:8b:6b:ac:a7:67:50:83:35:18:9a:1a:06:36:c1:ce:
         c5:04:bf:02:03:e7:fc:97:51:ce:08:a0:a0:da:32:35:ec:bf:
         1e:76:5c:0e:c4:da:5d:88:6e:bb:8c:b6:eb:bc:e4:63:dd:bb:
         74:62:a4:ca:ae:e4:5e:89:5f:6e:e0:16:e1:d3:4a:eb:9e:fe:
         32:00:f4:67:9e:5f:16:0f:06:68:ea:5e:52:f9:c9:26:f9:fb:
         ed:21:e7:05:33:c9:26:04:eb:2b:21:f7:b5:70:57:2c:eb:3d:
         71:bd:e8:a7:b1:4b:48:24:95:ca:a4:62:1a:bc:fc:ce:cc:ff:
         c7:e3:1c:14:c0:28:42:80:46:a2:21:45:35:18:e7:d6:5c:ac:
         38:74:a6:c7:c5:0e:46:4e:d2:ba:63:fd:b4:9d:8b:65:bf:38:
         7c:5c:c5:16:3f:40:7f:eb:bd:4b:c6:41:d0:da:82:6c:89:54:
         9c:21:69:1c:fa:23:f2:dc:69:4c:46:26:25:a1:65:57:40:b4:
         bd:17:1c:52:13:4b:5a:0a:c4:a8:92:c9:eb:d1:6a:74:45:fd:
         d3:3e:04:96:63:a3:70:d0:77:c2:3b:9e:c0:e0:35:e6:53:f1:
         84:27:e4:83:f8:81:1d:a0:9d:16:7e:68:a3:f5:96:17:53:df:
         9b:22:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:25:28 2025 by rpki-client