Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
File:                     _zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft (raw, json)
Hash identifier:          elXGlYe0AFNLhpxE0zRrQMXBBmYGvUXCQlto2f5mb2w=
Subject key identifier:   A3:E6:06:82:1D:74:19:F9:00:24:7D:89:9E:EA:DC:9A:B4:29:9E:90
Authority key identifier: FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
Certificate issuer:       /CN=F363C3E1AR/serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
Certificate serial:       093E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
Manifest number:          093C
Signing time:             Tue 16 Sep 2025 01:23:37 +0000
Manifest this update:     Tue 16 Sep 2025 01:23:36 +0000
Manifest next update:     Thu 18 Sep 2025 01:23:36 +0000
Files and hashes:         1: _zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl (hash: dzajXR/Sj4uTV5CXkMMYAK1pt+elZAq+IFycscyNZA8=)
                          2: 18A80742AB6B11ECA47582CF5A40D577.roa (hash: dhNC9Inf1xxAi+lb7sj8+SMEepS6p/rnRGNYmI0KNPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
                          rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C3E1AR, serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
        Validity
            Not Before: Sep 16 01:23:36 2025 GMT
            Not After : Sep 18 01:23:36 2025 GMT
        Subject: CN=68c8bc19-f2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:91:2c:a5:46:7c:fd:dd:9f:e9:97:e1:93:
                    6f:dc:87:b9:00:29:0d:d8:e6:3a:a7:9d:92:16:60:
                    2f:0f:35:37:a3:2e:00:d9:56:40:a0:eb:bf:59:ae:
                    c5:69:ec:63:02:20:40:a6:22:10:3e:10:20:7c:cc:
                    57:2d:70:9c:0e:e4:f3:39:59:b5:1e:57:a4:fb:e9:
                    f0:13:bb:3e:36:1c:c1:c5:bf:c6:ea:bd:8e:d0:ba:
                    a4:7b:03:4e:2f:5f:9a:89:49:9c:99:60:d8:2a:c7:
                    16:f6:09:57:98:1d:a7:57:f2:67:e1:eb:60:d6:68:
                    8d:ce:cf:ed:1c:d0:f6:2e:4e:75:dc:82:13:f1:3f:
                    44:6e:5c:21:40:bc:d2:80:8c:7a:37:11:48:15:ce:
                    57:22:7c:d5:5a:96:3e:7d:b2:76:4c:1b:2c:6e:f0:
                    92:ae:4b:82:42:fc:f8:4d:81:c8:7e:2b:84:0b:9a:
                    3a:98:7d:77:e8:aa:c3:d0:73:11:f0:13:6a:29:a7:
                    c9:00:5b:fa:9b:02:08:7f:fe:83:13:01:12:f4:9b:
                    e3:9c:f0:eb:f4:e8:a0:66:c9:1d:c2:ce:06:f5:ce:
                    98:4f:37:ed:27:3e:61:3f:52:7e:13:a3:12:59:c8:
                    48:c8:75:94:ab:35:f8:e5:de:a9:1d:64:12:25:81:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:06:82:1D:74:19:F9:00:24:7D:89:9E:EA:DC:9A:B4:29:9E:90
            X509v3 Authority Key Identifier:
                keyid:FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:72:4f:52:f6:41:58:f7:8f:9b:26:b8:4e:d3:db:27:2d:
         f2:c5:f7:7f:d0:44:e0:27:39:0a:0e:c9:9b:4e:dd:fa:63:74:
         81:93:60:76:d8:a5:b1:4a:bc:50:bf:18:c1:27:34:ae:71:7a:
         4d:bd:45:2a:b7:11:1f:64:b7:a3:da:7a:cb:f1:07:b4:37:59:
         43:04:44:85:a9:38:51:10:3a:72:43:77:1d:17:8b:89:06:2a:
         63:54:89:69:e4:28:34:70:58:41:f9:62:50:ff:e0:71:89:8b:
         4e:74:97:00:97:75:67:0a:35:55:4e:a1:49:24:43:89:9c:72:
         ea:41:96:e2:03:5f:72:6d:ee:c7:20:fd:8a:92:b8:b8:cd:fd:
         f4:f0:5a:2b:cb:aa:2b:bc:24:a5:af:0c:56:93:69:37:ac:de:
         fe:24:d9:cc:c2:c7:a5:0e:ad:34:7c:4d:4e:b2:8b:a2:fc:73:
         92:76:00:00:af:24:66:2a:09:e1:26:5b:34:89:28:cd:8e:b5:
         9f:8a:ae:05:20:a8:dd:58:6b:87:41:86:e5:ca:83:fc:5f:f3:
         99:9a:53:b4:d7:91:e4:6a:e9:a9:df:3d:e0:7d:33:02:ea:36:
         1b:d1:05:39:86:33:db:32:b1:25:44:55:08:64:4f:ee:2d:29:
         58:20:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:45:06 2025 by rpki-client