Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
File:                     UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft (raw, json)
Hash identifier:          26REIwbDDxMeJIex5S/oX0lxuIH7OduFGHHInO3Wloo=
Subject key identifier:   3F:09:0F:08:0B:9E:F9:6C:73:76:C6:AB:56:DC:EC:6C:35:81:61:BA
Authority key identifier: 50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
Certificate issuer:       /CN=F364EFD6AF/serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
Certificate serial:       2D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
Manifest number:          2C
Signing time:             Wed 17 Sep 2025 05:10:11 +0000
Manifest this update:     Wed 17 Sep 2025 05:10:10 +0000
Manifest next update:     Fri 19 Sep 2025 05:10:10 +0000
Files and hashes:         1: UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl (hash: f0QCpf7gwQb+gDthKI1ieY+nmlG1MFBc95wL7ahGkS8=)
                          2: 9541AB3072C511F0B751A3EADAE4EC9C.roa (hash: vPBn+oWUe69PAp7QQWCoYxx3fdMV6cty84al8xby7/E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364EFD6AF, serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
        Validity
            Not Before: Sep 17 05:10:10 2025 GMT
            Not After : Sep 19 05:10:10 2025 GMT
        Subject: CN=68ca42b3-a6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:0b:02:06:db:27:a4:ca:6b:8b:60:2c:c9:
                    a0:d1:8b:89:d3:70:37:99:ea:34:64:45:d0:2c:4e:
                    8a:8b:7d:1c:26:c7:76:e8:20:3d:2a:30:22:3e:b2:
                    9c:52:43:5b:62:8a:24:34:96:1b:54:fc:f2:3b:1e:
                    e1:09:10:cc:ca:8e:96:5d:51:f3:a9:9a:9e:6f:2b:
                    c1:6d:f6:34:12:11:61:f3:4e:b9:db:1d:5d:8d:c7:
                    b8:a1:44:5e:aa:1f:ce:13:67:93:18:46:fa:a3:27:
                    f6:2c:b7:4d:2e:03:85:59:5f:3a:2d:af:da:3c:bd:
                    23:9f:5c:9f:a6:b8:a6:68:b4:75:bc:55:59:e3:3f:
                    db:b1:2f:53:e9:14:22:ed:ee:33:13:64:c1:5e:7c:
                    37:cd:5a:99:d7:85:e0:11:fa:4a:da:84:0c:2b:63:
                    7b:38:d4:85:b5:65:27:a8:95:53:e1:d8:1c:3c:e7:
                    d0:40:be:f7:08:af:ab:04:51:7a:94:88:c8:c2:ca:
                    a7:d8:a5:55:47:ef:51:9a:ad:79:c9:c9:66:6f:cb:
                    d1:b2:2f:1d:eb:4b:cb:b1:c1:e8:f4:f1:5a:6d:ac:
                    29:1e:70:ad:86:8a:8e:72:2c:94:29:03:45:12:76:
                    88:3c:51:df:b6:24:95:2d:91:b0:42:9d:02:8e:95:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:0F:08:0B:9E:F9:6C:73:76:C6:AB:56:DC:EC:6C:35:81:61:BA
            X509v3 Authority Key Identifier:
                keyid:50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b4:58:e0:b3:73:36:eb:70:e1:35:45:6b:2c:e9:f2:25:17:
         f5:fd:67:6c:fb:83:f0:66:5d:89:0a:ca:5c:07:62:dc:18:49:
         4f:0b:09:03:37:fc:35:84:9f:88:8d:d8:a6:78:d9:46:0a:28:
         14:50:31:2c:ef:ba:16:ac:50:a6:b8:c1:f6:a4:b3:47:10:8a:
         2e:9f:c5:dd:dd:bf:e2:37:0b:2b:b7:6f:ca:b5:40:77:b1:0a:
         47:b4:7a:e1:50:2c:6f:af:55:83:19:f4:bf:0f:2d:00:aa:1f:
         50:2d:fd:13:93:e0:08:e2:a9:19:5c:d5:30:9e:b3:ce:a5:81:
         c2:19:77:bf:9e:3b:65:9f:f7:32:7e:2c:74:95:15:99:e5:80:
         8f:54:79:f2:bd:a8:5c:c4:9a:b8:d0:62:7f:4b:02:be:c7:61:
         4d:c0:4c:72:16:2c:fc:9c:fb:48:3f:65:89:f6:ac:c3:b2:87:
         c7:a5:4a:94:9d:cf:82:8f:a7:1d:be:8c:3e:70:d6:31:87:ef:
         90:61:24:46:9e:ae:1b:d6:c6:48:eb:ca:b8:e0:3c:1f:9c:79:
         e8:f5:cc:e9:b9:f1:58:df:2f:84:70:15:3f:98:ce:c6:0f:79:
         2d:05:da:ea:3b:31:aa:9b:d5:29:38:57:1c:d5:93:3d:b8:f7:
         19:2b:d7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:01:53 2025 by rpki-client