Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          QxZdhLPCgs3QYfSqjlCKRNEWgis7opY0q/gFDaA5gRI=
Subject key identifier:   9B:18:28:36:C9:EF:FF:99:00:E8:12:6B:02:03:82:AE:00:4A:D5:15
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       026E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          026D
Signing time:             Thu 31 Jul 2025 04:19:14 +0000
Manifest this update:     Thu 31 Jul 2025 04:19:14 +0000
Manifest next update:     Sat 02 Aug 2025 04:19:13 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: Rhl8ecc7vJ5Xa2F5fshEJob2f8n5eb7f5GhTgL6oPPE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Jul 31 04:19:14 2025 GMT
            Not After : Aug  2 04:19:13 2025 GMT
        Subject: CN=688aeec2-0b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:4d:b9:ee:b7:81:4d:0a:3c:79:98:b7:a0:
                    85:be:e9:9f:f9:ef:f7:82:a1:e1:11:65:2f:4a:cd:
                    41:e0:c6:1e:b9:b3:6e:47:f9:48:d5:78:ec:79:b9:
                    c3:c5:1f:8a:80:26:14:33:d8:ed:92:58:77:09:2f:
                    d1:2c:fc:ea:89:8f:d5:b4:4f:7b:fe:82:cd:4d:64:
                    83:85:fa:00:58:a0:d2:66:0b:af:8a:44:31:14:57:
                    1f:46:67:92:35:82:28:e3:9e:82:b5:c6:a7:58:29:
                    25:16:94:67:db:a3:85:52:95:0f:b8:57:b6:58:95:
                    0d:91:c2:f8:a8:e6:fa:6e:58:1c:81:7e:85:5a:63:
                    24:ef:6e:3a:9e:d2:b4:21:f8:ba:2b:cc:16:50:b2:
                    0e:d1:33:92:7c:9f:67:04:94:96:30:89:fd:b1:aa:
                    31:7f:84:92:c6:54:ee:0b:fe:dc:cc:23:d5:1f:9a:
                    00:e6:74:c2:e0:1e:39:3c:09:6a:d2:da:5c:fd:83:
                    e3:9c:02:ff:b3:f2:6a:cb:0f:f4:ae:9f:73:ea:60:
                    5c:94:9b:fd:ae:79:44:4c:1e:30:3c:d6:84:20:2e:
                    a0:dd:52:bd:f7:8d:ef:20:f6:d2:9d:c6:af:6a:68:
                    b5:55:4b:d2:ca:31:9d:22:38:f1:63:2b:e6:f3:16:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:28:36:C9:EF:FF:99:00:E8:12:6B:02:03:82:AE:00:4A:D5:15
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3c:bf:3c:09:4b:3d:56:ca:f2:76:00:c1:33:1a:93:5e:83:
         ad:b0:f9:6d:46:bd:e6:d2:99:a6:de:63:7e:5f:b8:b9:b6:05:
         29:dc:96:38:7f:a2:6a:5e:b4:01:e5:45:3b:d3:70:72:ad:fc:
         41:2c:f4:78:54:54:e4:82:f2:c8:86:a4:78:62:e3:46:c1:7e:
         54:43:1b:16:24:5e:19:45:9c:70:6e:11:ed:ad:a4:a5:df:67:
         e9:b6:e0:91:cf:78:c4:6c:ed:92:67:a0:66:1f:f6:26:ba:3d:
         5f:d1:a8:f9:5f:90:5f:e7:b6:aa:ee:a8:de:19:96:b1:18:02:
         e2:57:72:a8:96:30:bb:36:60:87:95:e8:ac:51:8c:0a:50:51:
         fd:fc:41:18:65:79:37:56:e3:3e:c6:49:e4:c7:c9:f2:c8:08:
         b1:57:c4:cd:3d:d5:63:70:51:94:a8:bc:14:f0:8c:64:c5:fa:
         d4:38:9e:53:26:6f:32:78:fe:45:60:58:ff:65:84:6b:78:79:
         91:6d:bd:5b:4b:89:fa:0e:2c:5b:34:1b:f8:8d:ed:7a:d5:51:
         3d:be:1d:13:0c:ac:ca:8c:63:db:fc:9f:30:0b:f1:95:0f:13:
         e5:70:32:94:ea:2b:24:1a:a3:50:2e:95:48:ef:cd:d9:30:3f:
         f8:42:5b:4d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUY3RThBUjExMC8GA1UEBRMoOTIyODgyODBFM0Q4ODJERUM0MTVGNTg4MUMwMTVD
ODc2NTlENjg0QTAeFw0yNTA3MzEwNDE5MTRaFw0yNTA4MDIwNDE5MTNaMBgxFjAU
BgNVBAMTDTY4OGFlZWMyLTBiMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb0E257reBTQo8eZi3oIW+6Z/57/eCoeERZS9KzUHgxh65s25H+UjVeOx5
ucPFH4qAJhQz2O2SWHcJL9Es/OqJj9W0T3v+gs1NZIOF+gBYoNJmC6+KRDEUVx9G
Z5I1gijjnoK1xqdYKSUWlGfbo4VSlQ+4V7ZYlQ2Rwvio5vpuWByBfoVaYyTvbjqe
0rQh+LorzBZQsg7RM5J8n2cElJYwif2xqjF/hJLGVO4L/tzMI9UfmgDmdMLgHjk8
CWrS2lz9g+OcAv+z8mrLD/Sun3PqYFyUm/2ueURMHjA81oQgLqDdUr33je8g9tKd
xq9qaLVVS9LKMZ0iOPFjK+bzFqubAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUmxgo
Nsnv/5kA6BJrAgOCrgBK1RUwHwYDVR0jBBgwFoAUkiiCgOPYgt7EFfWIHAFch2Wd
aEowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGN0U4L0I4N0JDMjc2OTZDQTExRUVCRkQ1QUM3M0QyNUJFNDY1L2tpaUNn
T1BZZ3Q3RUZmV0lIQUZjaDJXZGFFby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2tpaUNnT1BZZ3Q3RUZmV0lIQUZjaDJXZGFFby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUY3RTgvQjg3QkMyNzY5NkNBMTFFRUJGRDVBQzczRDI1QkU0
NjUva2lpQ2dPUFlndDdFRmZXSUhBRmNoMldkYUVvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDPL88CUs9VsrydgDBMxqTXoOtsPltRr3m
0pmm3mN+X7i5tgUp3JY4f6JqXrQB5UU703ByrfxBLPR4VFTkgvLIhqR4YuNGwX5U
QxsWJF4ZRZxwbhHtraSl32fptuCRz3jEbO2SZ6BmH/Ymuj1f0aj5X5Bf57aq7qje
GZaxGALiV3KoljC7NmCHleisUYwKUFH9/EEYZXk3VuM+xknkx8nyyAixV8TNPdVj
cFGUqLwU8IxkxfrUOJ5TJm8yeP5FYFj/ZYRreHmRbb1bS4n6DixbNBv4je161VE9
vh0TDKzKjGPb/J8wC/GVDxPlcDKU6iskGqNQLpVI783ZMD/4QltN
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:37:31 2025 by rpki-client