Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          OlNN6hzO2mjPAVc3MZ3K/oHN1Q/mUCRGHckdsugQieU=
Subject key identifier:   BC:EC:FF:FC:7E:5A:86:9C:F8:E0:F9:E9:B7:F0:E3:21:59:FD:D3:8A
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       0177
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          0173
Signing time:             Wed 17 Sep 2025 04:37:09 +0000
Manifest this update:     Wed 17 Sep 2025 04:37:08 +0000
Manifest next update:     Fri 19 Sep 2025 04:37:08 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: 80r5i2c9FxM0VPFSdMF9nWjqJ1ATZbSkNMIs9jAkkYE=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)
                          4: 077D2872950A11EF882E6662762E951A.roa (hash: FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF, serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Sep 17 04:37:08 2025 GMT
            Not After : Sep 19 04:37:08 2025 GMT
        Subject: CN=68ca3af5-056f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:7f:eb:60:96:dc:95:0e:97:e8:df:a7:d5:
                    a1:54:3b:7e:97:39:38:e6:d1:4d:a5:e2:9e:09:7a:
                    59:00:73:39:7a:e1:90:5b:84:d6:11:4d:c6:77:e2:
                    2a:f2:6d:cd:af:52:7d:36:22:ee:eb:27:15:7d:e3:
                    49:8d:53:8d:c0:cc:98:69:9b:06:3c:d8:f8:d0:ae:
                    4e:fb:68:b3:e1:7b:a8:53:9a:e3:1b:d5:e5:e7:cb:
                    d9:a7:6a:fd:9d:70:a4:27:fa:ac:64:78:1d:b7:f1:
                    5d:9a:69:ac:44:cd:97:7c:74:62:63:d9:45:22:bc:
                    bd:40:23:d2:37:49:74:5c:98:3d:1a:c1:38:7f:0b:
                    64:44:52:3d:e0:51:78:c5:49:89:8a:24:2f:b3:c1:
                    39:fa:65:a7:db:ed:2c:71:6c:14:76:a2:89:ed:b1:
                    fc:63:b8:e5:1b:98:e0:08:90:b2:c0:1e:dd:35:00:
                    4f:42:27:80:77:ef:f4:4b:dd:aa:a7:4b:56:8d:bd:
                    be:dd:4a:7e:f8:d6:e0:9d:5c:df:8d:89:27:82:12:
                    15:c7:a8:87:22:10:eb:85:c0:0c:9a:8c:9d:8b:d9:
                    e3:1e:da:7c:a1:58:09:8a:2a:d2:6b:6d:48:f4:cc:
                    5d:03:dd:db:ad:2d:ac:b9:d2:9c:c9:9f:8b:12:b4:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:FF:FC:7E:5A:86:9C:F8:E0:F9:E9:B7:F0:E3:21:59:FD:D3:8A
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e0:44:97:5a:83:b9:4e:ac:e8:23:e2:6f:50:2b:46:f1:57:
         59:2d:06:ee:42:ab:7c:f5:9f:53:7b:7c:65:52:2c:93:48:63:
         e6:2e:4e:c6:7e:76:d4:ce:2d:4c:36:6a:86:ab:95:f2:bf:b2:
         29:7a:92:ce:ba:72:de:7b:04:b1:f2:e9:2a:78:d3:9d:09:06:
         cb:20:c2:f1:14:f9:90:db:e8:c0:ac:cc:04:66:04:1a:07:48:
         0e:ba:d3:f4:e7:cf:a3:b3:2f:ca:e0:46:fe:a7:24:6c:1e:f6:
         cf:bb:5c:96:53:92:b8:62:79:f0:b4:3d:c8:a6:c2:2b:e6:cf:
         57:fd:f9:b2:8a:10:c9:ac:db:58:c9:b9:39:55:d5:1f:ba:a8:
         c9:a9:eb:33:c4:7a:1e:7a:76:6f:4e:df:9d:8d:0e:44:b7:06:
         92:76:ff:f7:2a:08:09:64:27:e2:c9:03:87:67:66:3f:c6:20:
         ef:b3:8f:92:16:7c:4e:51:2e:b6:84:8b:89:99:96:61:60:6f:
         22:68:df:13:ba:13:5c:c0:19:02:90:a7:81:44:e9:13:bb:d0:
         fb:97:9f:3a:80:9f:17:72:d7:2a:fc:d8:eb:7f:90:cd:91:3b:
         b0:65:bc:5b:f1:43:d2:87:24:e0:15:88:7f:f4:6a:a1:d3:56:
         51:22:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:59 2025 by rpki-client