Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
File:                     FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft (raw, json)
Hash identifier:          YKbKBg8oPwNIbqeZwDzF7k/pcYSE6718sG67wskJ0Wk=
Subject key identifier:   91:63:DF:C9:1A:9B:56:24:69:5F:6E:F5:02:F2:B4:9E:33:83:52:13
Authority key identifier: 14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
Certificate issuer:       /CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Certificate serial:       0552
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
Manifest number:          0551
Signing time:             Sun 27 Jul 2025 02:45:07 +0000
Manifest this update:     Sun 27 Jul 2025 02:45:07 +0000
Manifest next update:     Tue 29 Jul 2025 02:45:07 +0000
Files and hashes:         1: FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl (hash: iS+VFYnuOhWk/imjmdxVscqQGL15/Emqlg9Z+K30b44=)
                          2: F737A0385C1C11ECB7F224705A40D577.roa (hash: 18NMLFQs/eN8MBDmoRWcN8d+TjVQtf8Ttvo8aeXvWZ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660137AF, serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
        Validity
            Not Before: Jul 27 02:45:07 2025 GMT
            Not After : Jul 29 02:45:07 2025 GMT
        Subject: CN=688592b3-0109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:27:b4:6a:09:7c:32:73:ad:34:d8:c9:ad:
                    a4:73:f9:a5:5c:27:bb:71:97:5b:f9:c0:bb:cc:b4:
                    b7:c5:18:c7:16:00:a5:fd:fd:e4:3c:62:0d:19:89:
                    de:a7:1e:5d:28:7c:a9:12:35:33:a7:94:1d:65:0f:
                    e9:d3:48:7e:54:5e:3d:69:97:a8:fc:09:5d:a7:9f:
                    39:ac:d9:8c:24:4d:95:eb:cd:61:24:0c:74:d2:b3:
                    95:39:43:94:67:9a:38:bb:e5:2c:78:b6:cf:35:81:
                    93:77:7f:8d:97:1a:dd:0c:34:fb:45:59:b9:0d:bb:
                    50:20:c3:f1:1f:9f:66:47:b9:06:1e:5a:c2:fa:f6:
                    7a:9c:4f:13:6c:0e:51:bd:ec:d3:bf:b4:9e:b1:99:
                    6e:be:17:1a:a9:2f:0e:fa:84:d6:91:8e:1e:44:23:
                    aa:73:8c:88:5c:c1:ea:dc:ff:a1:fc:50:9c:85:7a:
                    5f:14:48:02:99:be:a8:c1:ef:70:d1:03:28:41:99:
                    ef:63:33:df:ae:f4:bc:0c:e6:ed:8e:5b:21:95:85:
                    24:5c:84:55:a1:8d:9d:b7:f7:47:a5:a3:8a:19:4a:
                    07:ee:a4:1e:5e:da:dd:75:f2:c1:12:f6:63:90:56:
                    36:a1:02:a5:2d:1e:4b:b7:d0:66:15:90:6d:99:23:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:63:DF:C9:1A:9B:56:24:69:5F:6E:F5:02:F2:B4:9E:33:83:52:13
            X509v3 Authority Key Identifier:
                keyid:14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:80:f7:0a:ca:a1:d2:c5:15:f9:b7:7c:d7:86:72:60:6f:d5:
         dc:84:cb:78:60:a0:4b:2f:fb:b8:8a:e4:47:19:99:69:90:1f:
         6e:a6:91:68:97:6f:7b:d9:6c:32:33:da:76:4b:ae:3a:61:ef:
         b5:59:87:4b:27:34:01:32:c5:c9:86:91:7e:c5:0b:af:1e:cd:
         c1:ad:dd:e3:16:7d:11:10:26:22:fe:26:d3:2e:b3:b7:fe:b2:
         ea:28:f7:02:5e:36:77:ed:ce:ac:71:58:57:85:c2:83:1f:82:
         1b:45:99:d2:fb:4b:66:da:52:54:49:08:dc:70:93:9f:85:17:
         dc:6e:8b:52:35:a7:72:d6:0b:c2:8f:41:59:0a:3b:ea:96:5c:
         9a:26:7b:5d:2a:4d:e2:9b:26:68:c9:2e:09:2a:50:06:e8:7f:
         80:82:10:fa:8c:68:20:80:b0:8a:25:39:bb:dc:af:b0:2b:9c:
         4c:8f:f2:41:7b:82:cd:f3:b0:b6:f8:b6:1b:50:68:be:59:bf:
         00:62:c0:75:ea:82:6c:e2:bc:fc:03:d6:6e:b3:7b:46:2f:ef:
         2a:3e:69:de:d1:27:78:1e:28:07:67:4d:8c:d2:8c:0f:70:d2:
         4d:d1:e1:eb:44:c0:72:1a:b7:aa:a6:3c:0b:ef:1a:8f:4a:98:
         21:c9:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:15:37 2025 by rpki-client