Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
File:                     FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft (raw, json)
Hash identifier:          6YBPDECy7wl7/zrqOoR957JsiNX86c27b6ppsiCGXjs=
Subject key identifier:   60:2A:D2:0E:B8:1D:CA:37:AC:8B:F9:A1:88:9D:62:9F:C9:FB:4C:96
Authority key identifier: 14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4
Certificate issuer:       /CN=F3660137AF/serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
Certificate serial:       0585
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
Manifest number:          0584
Signing time:             Tue 16 Sep 2025 02:34:47 +0000
Manifest this update:     Tue 16 Sep 2025 02:34:47 +0000
Manifest next update:     Thu 18 Sep 2025 02:34:47 +0000
Files and hashes:         1: FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl (hash: AsglIq6w/Df0CqeBxZk62XH8/fvqKP8LF0givmc8eOY=)
                          2: F737A0385C1C11ECB7F224705A40D577.roa (hash: 18NMLFQs/eN8MBDmoRWcN8d+TjVQtf8Ttvo8aeXvWZ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 02:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660137AF, serialNumber=1406D84B3A22ACF49483972666319CE9893D68C4
        Validity
            Not Before: Sep 16 02:34:47 2025 GMT
            Not After : Sep 18 02:34:47 2025 GMT
        Subject: CN=68c8ccc7-30ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:61:ac:9a:23:c4:f0:ad:7c:9d:a0:4c:e8:
                    a2:76:70:66:87:11:b5:39:00:98:55:7b:ac:49:99:
                    df:3a:11:03:dc:e7:02:32:f9:0b:18:bc:b7:df:1c:
                    6f:c7:49:61:fc:44:c9:48:b7:3b:cb:6d:da:32:67:
                    ce:6c:42:d4:f9:2c:79:f6:d2:7c:b6:90:3e:f7:c2:
                    85:32:e2:1e:72:e9:ff:52:aa:c0:bb:f7:de:3c:bd:
                    b3:81:40:36:15:b3:bd:3e:f6:33:69:cc:61:da:ac:
                    27:c3:c4:44:f7:a9:8a:ce:35:44:cf:74:2c:4c:66:
                    2b:00:5f:eb:fd:7e:cb:a8:05:d3:63:5d:ae:c8:fa:
                    80:7e:a6:de:c2:ab:d7:a0:5a:ac:6b:22:88:3a:47:
                    d1:c5:46:9e:bd:fd:2e:30:62:86:d1:a5:99:fd:ba:
                    94:34:37:69:a3:eb:44:7b:8b:97:65:1b:fe:59:60:
                    c1:9e:84:1c:b4:e7:0c:44:5f:cd:72:52:97:2e:7e:
                    0a:cd:5a:d4:e8:8a:e9:d8:a2:2e:29:41:2b:e8:13:
                    74:b1:7e:c1:36:af:2e:3e:81:bc:58:f6:d8:33:66:
                    ba:32:76:0b:68:e7:58:2d:59:e7:bd:5f:fb:23:a3:
                    25:4c:d9:55:aa:bb:5a:82:26:02:fc:a0:53:2b:18:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2A:D2:0E:B8:1D:CA:37:AC:8B:F9:A1:88:9D:62:9F:C9:FB:4C:96
            X509v3 Authority Key Identifier:
                keyid:14:06:D8:4B:3A:22:AC:F4:94:83:97:26:66:31:9C:E9:89:3D:68:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/4AAF40645C1C11EC954D3D6E5A40D577/FAbYSzoirPSUg5cmZjGc6Yk9aMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e5:96:13:d4:29:f7:5b:aa:5c:32:97:13:01:df:34:5e:70:
         c2:dc:0a:d4:66:61:dd:7c:dc:58:6b:e2:a6:ba:98:12:db:36:
         08:73:9b:d6:a2:bb:46:cd:49:04:51:da:83:81:11:3d:f5:8d:
         b3:15:ec:8f:0e:75:28:d0:6e:be:c4:c0:76:aa:2b:e8:f1:fa:
         b0:26:4c:ee:53:18:2c:ae:8a:47:98:25:a3:b7:40:97:bb:50:
         7d:ca:98:1f:02:65:4d:29:1a:2e:e0:fa:67:73:79:42:ab:72:
         51:f9:20:62:e5:bb:36:05:2e:a7:50:4e:d8:3e:c3:ce:87:a7:
         4f:0e:7a:0f:12:e0:5b:d0:a0:ec:f4:bc:3c:f6:07:76:09:64:
         55:96:94:bd:ab:ec:81:8c:d0:88:96:98:4a:83:87:2f:00:ca:
         b2:db:c7:3b:6d:cc:4d:82:c2:b2:69:ef:97:e8:23:57:6f:af:
         ea:ad:6e:18:a1:be:71:c6:3e:25:89:e9:f0:20:d2:2e:6d:4d:
         36:c8:b7:3f:8c:eb:dd:d9:09:fb:2f:a5:fc:f2:a4:96:59:d6:
         aa:5b:e3:b9:ec:66:21:b5:66:78:76:bd:a5:68:62:d6:b3:f7:
         bf:56:f0:93:f6:df:49:b1:d3:9f:a5:e2:7d:14:32:32:9f:7f:
         e4:e7:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:18:33 2025 by rpki-client