Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File:                     xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier:          wGPYeo5fD0jJMrobua9qv02DnN4NafzUhkVEqmZnCXE=
Subject key identifier:   FB:D0:3A:E8:C5:20:2B:9E:13:45:D9:ED:58:5B:5A:AE:71:2D:17:8A
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer:       /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial:       05F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number:          05F7
Signing time:             Wed 17 Sep 2025 02:22:29 +0000
Manifest this update:     Wed 17 Sep 2025 02:22:28 +0000
Manifest next update:     Fri 19 Sep 2025 02:22:28 +0000
Files and hashes:         1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: kNngZwI/4FLW4dMZGK+NPWj+lcs3hgsH/kCB/bfwyVI=)
                          2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
        Validity
            Not Before: Sep 17 02:22:28 2025 GMT
            Not After : Sep 19 02:22:28 2025 GMT
        Subject: CN=68ca1b65-4712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:3d:99:76:fb:23:21:8e:a9:23:f8:25:8e:
                    10:59:56:79:e8:08:cb:6a:9f:97:49:c9:ab:b3:db:
                    9b:87:e2:e3:c9:c6:32:cb:85:c9:64:57:b7:f3:de:
                    f1:81:c4:36:21:5d:5a:2a:bc:ef:0c:ca:30:7a:e5:
                    43:9c:d0:ee:67:22:88:24:24:62:6c:00:ed:db:48:
                    f6:75:b6:d5:cd:11:a1:07:ba:d6:b7:09:26:c8:46:
                    03:36:c1:00:de:29:d9:75:0a:67:44:cc:76:5c:9f:
                    4b:fa:9b:22:86:d2:1f:4f:19:ac:b9:8a:10:49:c6:
                    4d:b3:12:b8:4c:2f:63:fb:f9:02:8f:2a:11:51:c2:
                    4c:1e:f9:72:46:89:7b:3a:b6:7e:55:e2:93:bb:1e:
                    4e:d0:9b:93:85:0f:12:1b:de:5b:09:04:e9:20:ae:
                    ec:f2:3e:20:95:09:b8:c6:9a:39:f9:4e:14:02:01:
                    de:d4:1f:9c:d1:30:ba:6e:07:d0:28:96:7d:f8:81:
                    cf:48:87:7a:84:24:16:68:35:47:b9:62:60:56:49:
                    2c:7f:b0:40:06:af:a0:4d:7d:4d:5c:85:07:41:0d:
                    5c:a5:69:33:6f:fd:c2:eb:d7:0e:9a:6a:39:40:42:
                    f9:81:cd:24:d7:b7:0f:f7:62:8a:43:a9:ce:7a:73:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D0:3A:E8:C5:20:2B:9E:13:45:D9:ED:58:5B:5A:AE:71:2D:17:8A
            X509v3 Authority Key Identifier:
                keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:7a:35:96:ec:6f:85:8b:ec:67:84:a2:65:8c:3d:04:a4:7a:
         e1:d5:a8:51:c4:61:4b:fa:26:69:27:1a:c3:b3:93:1a:bb:67:
         0f:08:a5:c7:f0:c4:d9:96:c7:00:0a:3d:60:be:3c:b7:2d:32:
         1e:16:81:0b:5e:f4:4c:72:82:35:33:51:f1:c4:21:f2:a5:5c:
         47:c2:2a:c6:31:0f:28:5f:fe:40:a9:92:ab:88:25:cd:35:67:
         f4:80:b3:a6:dd:ef:55:e4:3d:6d:40:8b:ab:b8:ed:87:73:21:
         3b:6e:dc:0a:a1:92:32:1e:60:60:b4:6b:d5:85:68:1a:d3:48:
         20:10:f4:eb:3d:97:da:57:e1:e8:33:24:b4:93:8f:63:6f:80:
         0a:c5:3b:b8:fc:6e:61:dc:b1:33:25:d5:b9:6d:ef:0f:d5:7d:
         5f:8c:d8:88:e5:3e:d5:03:73:99:63:0e:b5:e9:72:15:22:9f:
         19:a2:89:a1:2e:c8:f6:0b:e9:b9:1e:94:90:ae:1f:d3:d6:f6:
         48:a9:e9:83:82:d2:77:45:f1:6f:fd:49:94:12:01:f5:0f:c6:
         d3:09:dc:9a:1a:8d:2b:ef:e1:7d:62:f8:6e:11:9e:39:34:ab:
         2f:48:86:2f:92:13:1b:e4:76:21:b1:5c:6d:82:f4:a1:db:ab:
         35:f5:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 09:56:31 2025 by rpki-client