Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
File:                     27tnLt0H4F5FzAKFWwHIE75xXoE.mft (raw, json)
Hash identifier:          kN4xL5P3/jMbB+IsXwFyU+O8nADpzqcTZWvLCcbe3e0=
Subject key identifier:   21:D6:7D:93:D7:36:6A:C0:BA:C7:CD:D5:B9:BD:BF:5A:B9:62:51:9C
Authority key identifier: DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81
Certificate issuer:       /CN=F366A8BFAF/serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
Certificate serial:       013C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
Manifest number:          013B
Signing time:             Wed 17 Sep 2025 04:42:36 +0000
Manifest this update:     Wed 17 Sep 2025 04:42:35 +0000
Manifest next update:     Fri 19 Sep 2025 04:42:35 +0000
Files and hashes:         1: 27tnLt0H4F5FzAKFWwHIE75xXoE.crl (hash: IKDoak6C0KbkYaFxAqYygps8eEN2yXElCuatYdwpqz0=)
                          2: 0C2C5B02A38F11EF9EE69A89762E951A.roa (hash: ECtKxH32G5BPQeuP9KuP/2ILf6so8Vog6XvAyzLxNpo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A8BFAF, serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
        Validity
            Not Before: Sep 17 04:42:35 2025 GMT
            Not After : Sep 19 04:42:35 2025 GMT
        Subject: CN=68ca3c3c-d1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:63:c9:57:f1:5e:dc:31:89:62:04:00:d7:
                    c1:80:87:ef:69:37:ce:7e:61:6e:41:10:39:1c:a1:
                    9a:5b:77:31:8d:65:cd:38:22:01:fa:db:86:73:6e:
                    1a:43:53:7f:a8:41:28:d8:99:2d:92:83:c3:76:7b:
                    63:9e:09:60:35:29:2e:62:d8:5b:ff:8e:71:1f:97:
                    b9:16:bd:d4:97:85:ca:29:a0:7b:2c:33:39:28:a0:
                    a1:eb:d3:1e:8a:e3:c9:91:44:82:ab:36:da:cd:94:
                    fa:90:4e:38:c0:ed:1d:1f:11:a0:ad:6f:9f:e5:1e:
                    35:9b:cf:93:2e:c6:7a:62:64:71:13:d1:42:79:2a:
                    0b:64:b9:fa:6f:f0:5a:4f:92:df:e8:6c:81:bd:44:
                    d0:fe:a4:81:d4:d5:93:6d:a8:c2:34:b1:e1:e0:19:
                    ed:71:d5:df:3b:dc:0d:6d:e5:67:c5:57:89:af:4f:
                    93:f0:27:51:51:6d:80:84:3e:c1:9a:14:76:d0:7c:
                    15:ac:e1:36:24:44:4c:13:0e:36:03:45:b3:9c:fa:
                    88:4b:da:7a:0a:6a:e5:17:0b:68:09:5d:fa:8d:ca:
                    7a:25:5e:cd:0f:02:12:7b:2f:42:e5:bc:93:bf:94:
                    e4:e5:aa:db:72:58:a9:e0:8c:07:1e:71:02:92:8e:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D6:7D:93:D7:36:6A:C0:BA:C7:CD:D5:B9:BD:BF:5A:B9:62:51:9C
            X509v3 Authority Key Identifier:
                keyid:DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:42:d4:8d:a9:83:c5:b8:91:11:eb:24:41:7c:0f:a7:a1:
         82:ff:12:9a:05:d9:ee:7a:60:1d:2d:10:fe:9a:94:db:33:ea:
         f2:bd:ff:14:d9:7b:50:ef:24:e4:eb:5c:c0:a7:96:92:1d:4c:
         18:aa:26:40:74:6c:e8:dc:61:2a:ad:53:a4:48:8d:c5:ab:3c:
         c2:a3:76:fb:da:74:ea:63:a7:63:b8:8d:6e:c4:e8:d1:aa:cd:
         60:a7:79:54:c5:5a:6c:f0:5e:3a:02:f6:08:cd:24:66:e7:15:
         30:74:b3:1c:24:27:a6:5c:d5:f5:86:f8:f3:09:27:07:0d:d8:
         a5:5e:39:72:84:4f:1d:1e:2e:9a:8c:16:24:05:37:f9:d8:63:
         ee:b4:63:0b:cb:da:a7:7a:ee:f4:9a:9a:65:85:70:e1:79:5d:
         26:46:0d:3d:5f:40:27:b4:cd:03:de:19:9a:cf:7f:3f:c0:dc:
         fe:73:f6:aa:d2:d0:4d:26:60:75:72:d8:f9:04:8a:cd:d0:01:
         7f:ff:7b:c7:39:54:2e:6b:6d:bb:e9:b5:17:1b:62:cb:86:9d:
         f5:2e:e1:6c:e9:4e:62:84:76:7e:85:75:bf:e3:32:95:23:b1:
         83:da:f3:81:01:c1:17:e9:c8:fa:97:64:eb:b8:8e:39:85:c8:
         5b:04:74:be
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkE4QkZBRjExMC8GA1UEBRMoREJCQjY3MkVERDA3RTA1RTQ1Q0MwMjg1NUIwMUM4
MTNCRTcxNUU4MTAeFw0yNTA5MTcwNDQyMzVaFw0yNTA5MTkwNDQyMzVaMBgxFjAU
BgNVBAMTDTY4Y2EzYzNjLWQxYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYYWPJV/Fe3DGJYgQA18GAh+9pN85+YW5BEDkcoZpbdzGNZc04IgH624Zz
bhpDU3+oQSjYmS2Sg8N2e2OeCWA1KS5i2Fv/jnEfl7kWvdSXhcopoHssMzkooKHr
0x6K48mRRIKrNtrNlPqQTjjA7R0fEaCtb5/lHjWbz5MuxnpiZHET0UJ5Kgtkufpv
8FpPkt/obIG9RND+pIHU1ZNtqMI0seHgGe1x1d873A1t5WfFV4mvT5PwJ1FRbYCE
PsGaFHbQfBWs4TYkREwTDjYDRbOc+ohL2noKauUXC2gJXfqNynolXs0PAhJ7L0Ll
vJO/lOTlqttyWKngjAcecQKSjk/VAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIdZ9
k9c2asC6x83Vub2/WrliUZwwHwYDVR0jBBgwFoAU27tnLt0H4F5FzAKFWwHIE75x
XoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZBOEJGL0RDQTFDNjUyQTM4RDExRUY5MjYxMzc4MTc2MkU5NTFBLzI3dG5M
dDBINEY1RnpBS0ZXd0hJRTc1eFhvRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzI3dG5MdDBINEY1RnpBS0ZXd0hJRTc1eFhvRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkE4QkYvRENBMUM2NTJBMzhEMTFFRjkyNjEzNzgxNzYy
RTk1MUEvMjd0bkx0MEg0RjVGekFLRld3SElFNzV4WG9FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCePULUjamDxbiREeskQXwPp6GC/xKa
BdnuemAdLRD+mpTbM+ryvf8U2XtQ7yTk61zAp5aSHUwYqiZAdGzo3GEqrVOkSI3F
qzzCo3b72nTqY6djuI1uxOjRqs1gp3lUxVps8F46AvYIzSRm5xUwdLMcJCemXNX1
hvjzCScHDdilXjlyhE8dHi6ajBYkBTf52GPutGMLy9qneu70mpplhXDheV0mRg09
X0AntM0D3hmaz38/wNz+c/aq0tBNJmB1ctj5BIrN0AF//3vHOVQua2276bUXG2LL
hp31LuFs6U5ihHZ+hXW/4zKVI7GD2vOBAcEX6cj6l2TruI45hchbBHS+
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:55 2025 by rpki-client