Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
File:                     Ho4GD8DqacvW-tSkvG7THSnI5Go.mft (raw, json)
Hash identifier:          4hkMCdPZpo4VnOJbIZ4KC08zYQLcnneq+BpwvC/MLPA=
Subject key identifier:   32:AC:9B:A5:22:AA:52:FA:2F:AF:0A:F9:B3:59:84:70:C8:A2:67:BC
Authority key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Certificate issuer:       /CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Certificate serial:       04F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
Manifest number:          04EF
Signing time:             Thu 18 Sep 2025 02:44:14 +0000
Manifest this update:     Thu 18 Sep 2025 02:44:14 +0000
Manifest next update:     Sat 20 Sep 2025 02:44:14 +0000
Files and hashes:         1: Ho4GD8DqacvW-tSkvG7THSnI5Go.crl (hash: fE2niL1Wgi8m+Rei8X8hhjcouHSA1YlPF3uga/pKgGQ=)
                          2: 5C02D460D03F11EC9A4EAA89F1222468.roa (hash: F/9p11nL0wbGpBdREAn2qkEHpPq+G048kxKZo17dwn4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D435AF, serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
        Validity
            Not Before: Sep 18 02:44:14 2025 GMT
            Not After : Sep 20 02:44:14 2025 GMT
        Subject: CN=68cb71fe-3816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:7a:e2:c5:1b:9e:5e:02:d5:9a:db:44:b7:
                    df:ad:33:9b:96:57:a9:bf:49:fd:e5:a7:62:d4:54:
                    8f:a1:3d:0e:88:4f:58:0c:d7:c7:eb:47:09:7c:48:
                    6f:d0:6c:92:e9:ae:8d:af:7b:06:df:f6:33:2c:f1:
                    f6:d3:ed:be:93:0f:c4:b8:d5:6e:99:a5:64:0b:bb:
                    03:09:4a:b5:d6:b8:e0:7c:23:91:84:3e:0a:72:be:
                    bd:62:c8:76:be:d9:0b:e6:e4:79:63:e6:08:4c:27:
                    05:41:7b:38:42:64:dd:bb:a3:fd:c6:43:6a:bd:b1:
                    f8:8e:e6:b9:05:8d:01:f2:6d:4a:7b:d3:e3:01:22:
                    dd:1b:2e:67:84:be:a3:ce:1d:d0:10:ab:49:78:8f:
                    54:dd:d4:cc:11:9b:a9:79:83:04:5a:ad:ff:c9:d8:
                    3c:8b:a2:42:7f:8e:ed:5a:4b:a5:ca:c7:ae:59:4d:
                    79:0b:a2:bb:88:a9:ee:34:f3:35:8e:e4:2d:18:87:
                    1e:6a:19:39:1d:4f:de:6f:c7:78:89:ed:aa:86:d0:
                    ee:af:4f:85:8a:81:a8:9f:cf:db:f6:d4:2e:1e:37:
                    f0:79:ed:ff:ca:5b:d3:c1:92:1e:87:6a:2b:a1:2d:
                    1d:d3:0c:81:23:0d:6d:12:59:91:a9:4c:98:33:63:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AC:9B:A5:22:AA:52:FA:2F:AF:0A:F9:B3:59:84:70:C8:A2:67:BC
            X509v3 Authority Key Identifier:
                keyid:1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:77:1d:e5:ba:b4:c3:c1:3e:b3:4f:84:18:bc:40:27:e8:
         71:4e:6f:0a:53:f5:15:dd:a9:15:ca:e7:c7:16:1b:d3:8e:d3:
         06:9b:d4:85:21:c9:34:2f:c6:b5:f0:07:ec:e7:5f:80:c8:81:
         c5:7c:30:d6:ff:98:b7:a0:6b:cb:79:90:4f:c0:b9:3f:21:67:
         bd:94:07:03:ee:3d:da:59:e7:b8:a8:43:bb:63:11:1d:19:ce:
         72:0e:85:1e:86:c2:b1:f9:ff:2b:b3:52:c1:b6:fa:6b:bf:30:
         68:5c:a4:d5:a4:52:15:f0:fe:16:93:c9:c9:f4:54:9c:76:d1:
         09:7a:7d:2f:2a:90:08:9c:a6:d6:2d:b2:2b:fe:81:0d:6c:c2:
         77:f8:58:05:2b:02:9b:de:d6:b4:37:05:a3:02:fc:46:ef:a5:
         43:61:82:65:f7:e3:94:12:15:cd:9e:b4:83:ee:01:90:f4:a5:
         12:f3:db:ad:e6:02:e9:50:6e:63:ab:34:17:cd:6a:18:31:65:
         f7:2f:95:8e:07:bd:ad:d4:8a:93:e9:69:0a:d7:05:02:c1:3a:
         f3:2c:c4:7e:31:60:15:87:c1:91:a8:8e:33:18:0d:44:2e:69:
         60:6c:1c:9e:89:a3:35:a8:3d:ee:23:31:d4:a5:2b:94:00:db:
         3d:7a:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:58:02 2025 by rpki-client