Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          xRrSoDFxoqy7s5u/Cxud6XH1nSpycWuAZ+IQaNkxsWY=
Subject key identifier:   2A:69:53:71:AD:DF:33:2E:3E:45:BA:BD:D2:69:4A:80:53:F8:53:23
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       053E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          053D
Signing time:             Wed 17 Sep 2025 02:38:21 +0000
Manifest this update:     Wed 17 Sep 2025 02:38:20 +0000
Manifest next update:     Fri 19 Sep 2025 02:38:20 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: lNo60iLKY9UVPS6AB7LBUQK8TYz7VTy2LsNeZNJ5i9k=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Sep 17 02:38:20 2025 GMT
            Not After : Sep 19 02:38:20 2025 GMT
        Subject: CN=68ca1f1d-e413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:b5:36:51:62:58:9e:41:f7:52:dc:86:21:
                    8e:6e:f6:38:d3:eb:b5:24:ee:d9:f0:60:52:e0:55:
                    1a:25:66:50:4c:d4:93:f6:15:eb:17:13:02:e8:31:
                    08:2c:bf:34:cd:fc:61:44:f4:13:1a:67:ea:67:6a:
                    e8:10:fb:7c:54:28:ad:f0:0d:ab:d0:89:96:b9:c2:
                    e3:17:a4:da:9d:db:43:56:6f:79:01:c3:aa:7d:3f:
                    1e:65:39:32:99:23:4d:b5:a2:e6:cc:85:67:b4:22:
                    74:0d:37:6d:7f:c0:26:b9:65:0b:f7:99:99:ed:20:
                    77:5a:ae:31:3e:55:2c:0a:96:49:b5:df:f8:58:dd:
                    ba:61:80:c1:28:92:80:99:06:62:06:19:2c:9b:80:
                    a2:91:e7:e8:dd:44:43:6b:22:f0:08:9a:12:4a:70:
                    db:0f:31:8d:ec:32:a0:f0:d5:ae:d2:74:6c:f2:38:
                    4a:3e:21:16:fb:92:69:6e:bf:14:2d:a0:96:a3:0c:
                    ef:bb:98:22:2d:fd:44:f5:f6:78:65:85:57:c6:84:
                    0f:7f:bc:c3:11:71:8e:06:a5:ba:3f:af:d3:10:13:
                    8b:dc:97:1d:5e:47:a1:57:06:c8:b0:61:c0:68:c6:
                    cf:09:c0:55:ef:fe:44:03:cc:73:e0:b1:96:f8:68:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:69:53:71:AD:DF:33:2E:3E:45:BA:BD:D2:69:4A:80:53:F8:53:23
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:55:6a:de:8a:47:19:03:d6:b5:9a:76:35:7f:74:4f:d6:
         53:a5:13:b2:bd:08:e2:14:5e:9b:9a:d3:f6:58:fc:f0:b8:cb:
         7b:5f:ca:44:72:8e:4b:c5:b2:73:60:fd:83:12:55:6d:51:89:
         54:04:fb:77:c9:25:12:fa:ab:ff:5a:a1:1b:6f:88:ee:8a:ad:
         7b:62:b6:88:63:73:7f:4e:de:76:39:2c:cc:fc:8f:d0:f9:d0:
         ae:c5:f9:c0:fc:bb:99:09:ec:8a:e2:97:fb:08:e4:78:3e:f5:
         98:f5:b7:de:e9:4c:48:82:67:88:ef:df:2d:4e:28:f5:85:b6:
         81:3a:88:e4:e2:f5:ff:fc:e7:c1:e2:ad:ca:e4:f4:74:f2:81:
         71:75:bc:10:b3:f7:72:0b:6b:94:98:1b:bb:91:57:b5:9d:56:
         54:8e:b0:03:6e:b3:c5:d1:b7:e3:2b:30:52:13:86:9c:fb:5a:
         c1:bf:54:79:0a:dc:b0:69:c4:1f:21:c5:19:53:8a:f5:47:2f:
         ef:9f:38:30:77:97:96:d1:07:98:e7:f9:42:81:d5:bf:21:f1:
         e8:c7:5e:4c:35:b4:c5:c8:51:e6:bd:e4:46:36:ba:28:ed:f7:
         3c:68:12:11:cd:03:b5:67:de:ad:26:cf:cb:f7:38:69:94:e8:
         2f:7b:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:05:35 2025 by rpki-client