Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File:                     KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier:          yi9plJxucFyiIDEQtyViBfIWrbKOyfcpqkNP9a/qpKQ=
Subject key identifier:   6E:68:74:34:E6:F3:DD:3B:A4:8B:DB:33:CD:A3:9B:AB:33:39:88:2E
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer:       /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial:       032C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number:          0329
Signing time:             Wed 17 Sep 2025 03:38:37 +0000
Manifest this update:     Wed 17 Sep 2025 03:38:36 +0000
Manifest next update:     Fri 19 Sep 2025 03:38:36 +0000
Files and hashes:         1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: ESmFD7HfUYfn7IIw2QZzgfu6O99oVdp4U2BPtLTI4j8=)
                          2: 9DC8C2C82CAE11F085B92DEADAE4EC9C.roa (hash: s4BJx/7blgbPVpMP6/xtoHDTm3C4tHe27u7Cb4Hry2k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364791EAF, serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
        Validity
            Not Before: Sep 17 03:38:36 2025 GMT
            Not After : Sep 19 03:38:36 2025 GMT
        Subject: CN=68ca2d3d-1576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:8e:b5:2d:20:d9:38:15:45:7b:53:44:09:
                    12:d1:f7:72:3d:66:e7:8b:a1:0c:7f:77:4d:39:a3:
                    4b:c5:1a:b1:3d:47:9e:ab:2d:12:99:7f:5b:3a:8a:
                    9b:33:7d:96:fe:c6:96:80:08:eb:f6:60:0b:dc:06:
                    c1:19:4c:0d:9d:98:e4:6b:89:69:ce:04:0f:4b:09:
                    f0:f9:01:e4:9e:7c:40:88:75:e6:57:a0:ad:eb:bc:
                    4d:52:f3:6a:19:df:8b:e5:31:ad:7b:4f:1a:e6:bb:
                    a8:53:25:ea:f1:f8:65:31:ac:b5:8b:e6:be:57:07:
                    da:36:98:0a:ec:20:3b:98:ba:64:71:45:a3:b8:b7:
                    a4:eb:63:4c:67:15:05:03:b3:38:ea:92:f6:17:ca:
                    f4:38:36:e6:08:c6:56:de:6e:8d:81:b9:c2:dc:27:
                    f5:98:c2:d2:00:1f:96:7d:48:d5:9e:e5:c9:55:ed:
                    57:b1:0c:6a:2f:f6:15:0e:a0:58:12:0c:95:4c:c3:
                    e0:59:21:6f:17:42:6c:0c:95:fb:a8:c1:df:36:26:
                    34:17:81:d5:38:86:ee:e6:32:c4:1b:bc:b2:5d:8d:
                    ae:d9:48:52:e8:2f:21:aa:16:dd:1d:1d:44:00:c1:
                    e0:ec:dd:d3:eb:5d:c3:33:d9:80:72:e4:b7:b8:c5:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:74:34:E6:F3:DD:3B:A4:8B:DB:33:CD:A3:9B:AB:33:39:88:2E
            X509v3 Authority Key Identifier:
                keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:62:9d:b1:b6:e9:6d:55:5f:51:03:aa:85:ea:38:88:4f:
         2b:51:93:3e:da:db:c6:4f:a7:52:05:d6:1a:8a:ac:cd:18:35:
         3d:ce:cc:e9:68:9b:70:6a:f9:51:11:08:8c:88:39:73:b0:26:
         3f:af:df:01:f4:ca:2a:51:43:8a:7f:68:cf:a8:24:82:05:c0:
         c5:e3:08:3f:08:78:d6:ee:30:13:b3:bb:0d:ae:7b:a4:30:71:
         36:67:12:07:7f:06:b6:72:78:cd:c8:9e:e4:fa:5e:c5:ce:88:
         37:f9:30:8c:de:c2:80:1e:e5:65:45:e3:ea:a1:80:08:12:ec:
         2a:cb:37:fe:e3:a8:62:84:da:6e:b8:00:3c:40:cc:30:40:15:
         53:29:7d:ac:ca:0b:75:c6:ea:92:1a:64:7e:8e:37:e0:34:a0:
         67:19:89:15:fd:f4:fa:5c:18:21:2d:12:c6:67:42:1a:48:3e:
         ca:29:ac:56:c2:c3:84:54:d1:6d:46:f4:d3:e5:f9:c6:a2:6e:
         fe:e7:f6:04:6a:c8:a5:9a:06:5e:d5:48:19:ac:e0:23:1d:b2:
         f2:dd:c5:f9:2b:59:2b:80:e5:53:28:2c:ca:25:f9:cf:69:91:
         30:1e:39:8a:81:4e:a2:ad:32:d6:2d:24:35:70:1a:36:41:df:
         25:60:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:24:23 2025 by rpki-client