Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          4wW543FQwM+UbS+8Tb4kAGtMRP4MYM/qHO6hSlVYTxw=
Subject key identifier:   D3:D6:26:1F:CF:98:BE:FF:C9:87:ED:5D:55:99:29:47:F9:1E:88:2C
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       07E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          07E4
Signing time:             Wed 17 Sep 2025 01:47:31 +0000
Manifest this update:     Wed 17 Sep 2025 01:47:30 +0000
Manifest next update:     Fri 19 Sep 2025 01:47:30 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: luusEemYZeSdO9XRdkI67iW86MMQ+QMfkkAqOwXyRfY=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 01:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
        Validity
            Not Before: Sep 17 01:47:30 2025 GMT
            Not After : Sep 19 01:47:30 2025 GMT
        Subject: CN=68ca1333-63b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:b9:35:fd:4a:74:0d:47:ca:1b:b9:58:9e:
                    98:fe:e0:b7:c6:ee:75:84:fd:18:60:ad:ee:41:20:
                    2f:85:f7:f6:c3:b6:c9:a3:82:19:3a:1e:46:28:1f:
                    d9:a5:f5:50:7c:b9:cb:c6:cd:e9:fa:1b:e6:cc:bd:
                    70:bc:23:a2:05:c6:f0:f8:08:40:32:7b:85:85:2b:
                    4b:74:27:a2:c3:90:f9:aa:2e:46:37:b1:d7:e0:ed:
                    75:eb:ad:c2:40:d8:53:c6:2d:6a:3d:4a:ad:e7:31:
                    46:cb:75:1d:f0:28:5b:8a:20:6d:5f:71:16:77:52:
                    b5:5f:f8:e0:c5:3b:0d:99:a1:8c:17:c6:43:bc:36:
                    b1:2d:38:5f:e7:82:06:86:6d:2e:59:b4:3c:92:4a:
                    9e:c5:52:48:12:54:da:0e:7e:c1:6f:52:0a:e4:0e:
                    04:67:77:bb:d2:8b:54:ea:f9:9d:4c:34:f1:4b:24:
                    f0:b7:a6:a0:cc:a8:9d:6b:3e:3c:82:78:68:5a:b4:
                    99:d8:b1:98:47:38:5b:0a:e3:31:de:59:39:0d:6b:
                    92:b8:e9:42:7c:4b:c6:41:39:d5:99:02:73:65:c8:
                    94:20:41:2a:6d:89:70:56:48:18:6c:c9:63:8d:c3:
                    30:6b:78:22:8c:ca:ee:76:f8:2f:c7:cf:2e:ab:b1:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D6:26:1F:CF:98:BE:FF:C9:87:ED:5D:55:99:29:47:F9:1E:88:2C
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:fb:e4:5e:aa:c5:5b:22:10:90:f0:af:18:6e:6c:54:d0:
         d4:4b:5e:c8:62:eb:bc:04:0d:91:66:8c:90:91:72:ac:78:60:
         e3:54:0a:fd:cc:5f:65:23:a7:bd:1a:aa:08:a1:18:57:68:29:
         8d:f0:f6:e2:16:15:8e:e0:55:60:fa:60:d9:cb:69:4b:72:e8:
         c7:9f:ff:b4:26:db:ce:6e:ed:71:7d:b9:d0:78:b7:82:00:9a:
         a3:63:e0:87:46:60:55:fa:76:24:fc:4d:30:4f:60:95:3a:69:
         d7:5b:55:86:96:04:de:e4:85:9f:dc:a6:58:1d:e5:c9:07:26:
         c9:18:85:80:8d:db:24:7c:58:0e:2f:ae:e1:93:fd:22:f4:fa:
         2d:33:b9:50:ca:43:7d:47:f1:e8:1b:e1:e2:90:cd:25:cd:1b:
         be:69:3e:91:08:d5:e8:4e:e7:66:56:ec:53:59:37:ab:89:8c:
         90:af:9e:39:1c:ab:ec:32:10:1c:68:d6:49:54:75:9b:6d:d2:
         96:4a:0d:bf:82:e6:30:61:5c:28:b6:ed:45:a8:32:97:7e:3e:
         ea:1f:b9:51:d9:8f:af:52:88:7e:29:82:80:0c:ba:20:b5:cb:
         3c:c7:2b:25:19:f3:1e:dd:11:af:d5:72:54:4b:65:a7:58:fd:
         f0:03:e7:37
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDdEREZBRjExMC8GA1UEBRMoNjlGRjk5RUM2NTE1REJBM0JCRjk2QTM3RUIyMTlF
MjQ5NEZFQzE4NTAeFw0yNTA5MTcwMTQ3MzBaFw0yNTA5MTkwMTQ3MzBaMBgxFjAU
BgNVBAMTDTY4Y2ExMzMzLTYzYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7ELk1/Up0DUfKG7lYnpj+4LfG7nWE/Rhgre5BIC+F9/bDtsmjghk6HkYo
H9ml9VB8ucvGzen6G+bMvXC8I6IFxvD4CEAye4WFK0t0J6LDkPmqLkY3sdfg7XXr
rcJA2FPGLWo9Sq3nMUbLdR3wKFuKIG1fcRZ3UrVf+ODFOw2ZoYwXxkO8NrEtOF/n
ggaGbS5ZtDySSp7FUkgSVNoOfsFvUgrkDgRnd7vSi1Tq+Z1MNPFLJPC3pqDMqJ1r
PjyCeGhatJnYsZhHOFsK4zHeWTkNa5K46UJ8S8ZBOdWZAnNlyJQgQSptiXBWSBhs
yWONwzBreCKMyu52+C/Hzy6rsRV9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU09Ym
H8+Yvv/Jh+1dVZkpR/keiCwwHwYDVR0jBBgwFoAUaf+Z7GUV26O7+Wo36yGeJJT+
wYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3RERGL0QwRTA0NjkyODYzRjExRUE4QUE3MzM0QUY4QUVBMjI4L2FmLVo3
R1VWMjZPNy1XbzM2eUdlSkpULXdZVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FmLVo3R1VWMjZPNy1XbzM2eUdlSkpULXdZVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDdEREYvRDBFMDQ2OTI4NjNGMTFFQThBQTczMzRBRjhB
RUEyMjgvYWYtWjdHVVYyNk83LVdvMzZ5R2VKSlQtd1lVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNDfvkXqrFWyIQkPCvGG5sVNDUS17I
Yuu8BA2RZoyQkXKseGDjVAr9zF9lI6e9GqoIoRhXaCmN8PbiFhWO4FVg+mDZy2lL
cujHn/+0JtvObu1xfbnQeLeCAJqjY+CHRmBV+nYk/E0wT2CVOmnXW1WGlgTe5IWf
3KZYHeXJBybJGIWAjdskfFgOL67hk/0i9PotM7lQykN9R/HoG+HikM0lzRu+aT6R
CNXoTudmVuxTWTeriYyQr545HKvsMhAcaNZJVHWbbdKWSg2/guYwYVwotu1FqDKX
fj7qH7lR2Y+vUoh+KYKADLogtcs8xyslGfMe3RGv1XJUS2WnWP3wA+c3
-----END CERTIFICATE-----
Generated at Thu Sep 18 01:04:57 2025 by rpki-client