Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
File:                     BW6zzs3ua4NtH6CPCHznRGcD3qE.mft (raw, json)
Hash identifier:          UTOBI7KBpJlDzOv3/V4oqT2mIfXNaQF42u1weARq50U=
Subject key identifier:   EB:64:2F:57:23:4F:78:6D:58:D8:4D:53:EC:B8:BD:68:71:26:C3:01
Authority key identifier: 05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1
Certificate issuer:       /CN=F3664036AF/serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
Certificate serial:       01AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
Manifest number:          01AB
Signing time:             Wed 17 Sep 2025 04:25:20 +0000
Manifest this update:     Wed 17 Sep 2025 04:25:20 +0000
Manifest next update:     Fri 19 Sep 2025 04:25:19 +0000
Files and hashes:         1: BW6zzs3ua4NtH6CPCHznRGcD3qE.crl (hash: ytO+/O4h/LMwkaCFurG+8oXQtl2XoUyXxwk7wtqxdhc=)
                          2: 66B953BA4D9311EFA7586846762E951A.roa (hash: byh4Eg9udfVVMXX0HCkdJJZ1KKKQasdGqUIYmXZmtrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664036AF, serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
        Validity
            Not Before: Sep 17 04:25:20 2025 GMT
            Not After : Sep 19 04:25:19 2025 GMT
        Subject: CN=68ca3830-2248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:7e:78:ce:ef:45:e7:4c:46:4a:62:6e:b6:
                    3b:3b:51:a2:e0:59:ed:90:f7:07:47:6b:d8:09:25:
                    2f:42:2b:10:3a:ec:c8:71:b2:ff:89:5a:24:94:33:
                    bf:41:87:94:bc:e8:91:e2:11:26:99:8e:ee:73:aa:
                    ca:6f:0d:75:0b:02:e3:60:f5:02:89:cd:16:91:80:
                    e0:ae:b5:b1:14:98:27:90:a9:11:ea:04:a9:e4:f8:
                    13:84:ce:e8:62:da:04:1b:de:09:23:88:ad:85:45:
                    61:d7:fa:23:3f:4b:e0:39:59:83:f6:92:58:76:3d:
                    b6:57:8d:9e:ff:56:9a:09:01:af:36:30:87:16:7b:
                    13:03:61:96:60:6d:41:6a:4f:97:e8:78:aa:90:dd:
                    d7:2b:c5:68:98:c4:ac:df:44:fe:31:59:96:e0:67:
                    71:06:7a:ca:6c:ce:74:f4:cf:f0:81:1c:0b:4a:c9:
                    71:39:de:a4:40:c0:61:5e:77:94:f0:07:b5:0d:aa:
                    39:bf:19:64:94:f6:38:ef:58:e5:54:51:86:8f:18:
                    d0:1b:93:04:12:00:39:d2:a6:69:8e:5a:93:2c:48:
                    c1:0c:4e:bf:56:61:60:a3:ff:61:b8:f2:42:9e:82:
                    c5:6c:53:0c:3e:48:a0:08:a8:77:70:89:4f:bb:f2:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:64:2F:57:23:4F:78:6D:58:D8:4D:53:EC:B8:BD:68:71:26:C3:01
            X509v3 Authority Key Identifier:
                keyid:05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:fc:4c:74:f9:8f:16:9c:0e:99:2c:96:d0:11:1b:fe:d5:
         35:78:24:59:70:e5:06:6f:da:25:08:32:90:b7:12:65:48:d5:
         03:72:ee:5f:47:04:8b:23:c8:e5:21:a4:78:a1:7f:67:fc:12:
         0c:23:a6:7a:d7:00:61:c9:72:23:12:9b:92:cb:68:d3:a9:4d:
         5d:b9:1a:97:3c:fb:ae:06:37:64:4a:23:53:8b:99:61:ff:b3:
         45:d8:76:00:77:54:fc:ed:2c:69:f5:04:ee:c1:79:06:40:eb:
         64:35:ab:a9:64:dc:c0:1d:85:41:37:25:f8:75:68:52:c0:a0:
         3d:37:a4:d3:8e:8f:c5:7d:00:a3:6d:42:72:3b:04:f5:61:65:
         79:80:49:84:af:b7:5e:65:b2:fe:1d:b2:ab:55:65:81:a3:41:
         e2:75:fc:38:67:13:26:d2:1c:56:b7:63:53:84:ab:d5:b0:f5:
         e4:16:97:fb:80:d6:2f:1f:94:2f:fe:f3:da:88:23:61:23:9e:
         13:cc:6c:9b:d5:5f:f9:dd:c7:22:18:33:4c:6d:a7:40:73:a2:
         d9:f3:e3:f3:e4:db:51:c3:8c:04:3f:a3:a6:ec:b1:27:95:80:
         06:1c:3c:e8:73:d8:45:51:78:08:c6:a3:a4:4e:5c:87:24:4a:
         6c:23:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:24 2025 by rpki-client