Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
File:                     ndN95jYew89otu98PBKrOZx8L4s.mft (raw, json)
Hash identifier:          zVGRhClsMJyhpnoh+Xwwk9Gc0IBS3VI9TMWdHwx9EYQ=
Subject key identifier:   95:C5:F5:96:CB:4D:78:FD:E6:65:C3:B9:7D:FA:F2:59:05:B4:D1:CA
Authority key identifier: 9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B
Certificate issuer:       /CN=F3660442AF/serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
Certificate serial:       0420
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
Manifest number:          041E
Signing time:             Thu 31 Jul 2025 03:23:00 +0000
Manifest this update:     Thu 31 Jul 2025 03:22:59 +0000
Manifest next update:     Sat 02 Aug 2025 03:22:59 +0000
Files and hashes:         1: ndN95jYew89otu98PBKrOZx8L4s.crl (hash: DqYWDM1TbuRAmNaEKzpfPDBufjntU5B8HS8F2pw4nGo=)
                          2: CA173E5E37FF11EE925E9B3E4AD9E6FC.roa (hash: DTtlgrbmzzwxu3uoClo86Z6YZ7fh9HCMMfQJyujQvlA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660442AF, serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
        Validity
            Not Before: Jul 31 03:22:59 2025 GMT
            Not After : Aug  2 03:22:59 2025 GMT
        Subject: CN=688ae194-3735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:71:c6:8d:98:d3:4b:e6:e5:8a:70:2c:8d:
                    7a:95:af:31:01:b6:4b:c8:92:6e:4c:25:2d:cc:5f:
                    60:1c:34:06:1b:e3:d2:d3:b3:59:0a:75:5a:b0:f5:
                    90:b3:9c:87:68:58:96:57:fd:fa:97:7d:52:5c:8f:
                    87:6a:82:88:32:b9:9b:c4:60:bd:b4:2b:c8:bc:33:
                    2b:a0:ce:81:39:a2:8f:54:48:2c:9f:27:e6:ed:3f:
                    00:f2:b5:5b:1e:25:a6:61:cd:d7:06:ed:a5:fb:c9:
                    c1:a0:10:a0:02:38:dc:03:58:90:f8:9d:11:4b:1c:
                    0f:48:dd:81:82:31:2a:f8:0a:69:46:58:d4:a5:5a:
                    14:dc:04:23:73:23:2e:7f:29:d0:10:54:4b:e7:dc:
                    5e:39:e2:9f:14:8d:cb:03:1a:c5:fb:7b:d8:a9:31:
                    9e:78:e4:be:98:55:b9:34:62:32:80:66:14:8f:fc:
                    e1:7c:7e:8f:89:f0:1b:d4:d0:c4:30:18:ab:84:90:
                    8b:0e:58:3f:37:4b:e8:a0:15:44:34:4f:68:a2:0d:
                    9e:4b:64:f7:f3:f9:3f:0c:e4:f0:e4:e1:e7:61:7d:
                    b8:36:5e:5e:4b:3e:af:4e:5d:34:50:3b:87:b0:2e:
                    2c:a8:f0:7b:81:d8:bb:e3:67:72:7c:50:36:b5:e0:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:F5:96:CB:4D:78:FD:E6:65:C3:B9:7D:FA:F2:59:05:B4:D1:CA
            X509v3 Authority Key Identifier:
                keyid:9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:1d:ac:fe:b3:22:2c:27:c7:cf:55:68:b4:9b:e5:89:6a:
         53:64:39:f5:d1:b7:80:07:3b:09:09:2a:14:9a:e0:58:bf:c2:
         aa:5e:2b:bf:a7:05:0a:b9:67:97:f4:6f:1d:5b:3f:4e:83:88:
         f4:69:77:80:79:62:9a:c7:3a:d6:f4:cf:a0:74:d2:53:b7:08:
         25:dd:75:86:38:0b:e2:93:8e:48:b6:14:ed:8c:b6:6b:72:65:
         7d:c0:fb:b0:d9:6b:75:fa:ac:4c:cf:1a:86:9f:fa:e3:38:95:
         02:6f:3e:51:b7:85:e1:cd:b9:4d:62:36:14:0b:f2:7c:b5:1b:
         c0:8a:92:5b:1f:20:b6:aa:38:98:d2:2d:d3:0c:c8:8a:db:2e:
         c4:13:95:f1:9d:6c:06:23:94:9d:a2:74:28:7f:cb:51:e7:24:
         90:3a:b2:de:70:b5:49:ad:d4:49:28:78:ef:d4:70:6d:3e:45:
         86:cb:eb:4c:26:61:12:8f:eb:e0:7f:55:a5:57:cf:02:a4:16:
         6a:93:41:ca:b2:ef:e6:c2:b8:3c:2e:04:4c:05:d8:88:ff:00:
         ba:d5:35:14:fc:42:33:f6:50:ba:06:70:2d:ca:f0:9b:01:7b:
         5f:30:d5:8d:30:ea:32:23:d9:b1:2d:90:ec:b7:ed:c6:e8:41:
         00:62:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:24:22 2025 by rpki-client