Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
File:                     HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft (raw, json)
Hash identifier:          OPfwTkaPwV85CHuRq4ovLyTmKOEfY3b/1qg/hvWQWCE=
Subject key identifier:   A6:66:70:B4:68:24:FC:BD:0C:27:7F:95:66:5B:C2:E2:43:68:2A:F0
Authority key identifier: 1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3
Certificate issuer:       /CN=F366BE85AR/serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
Certificate serial:       C8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
Manifest number:          C7
Signing time:             Sun 27 Jul 2025 05:11:25 +0000
Manifest this update:     Sun 27 Jul 2025 05:11:23 +0000
Manifest next update:     Tue 29 Jul 2025 05:11:23 +0000
Files and hashes:         1: HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl (hash: vhtEzqxdTjAYZh6XSf8ffblvL5GF/T2W4SLWlT3w8F0=)
                          2: 7C21AA3ED29211EF86EA9485762E951A.roa (hash: 4sdnJ8RVycpCPlFVArT/uPl+lKxeM/KiQs7ThnHwqEM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                          rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AR, serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
        Validity
            Not Before: Jul 27 05:11:23 2025 GMT
            Not After : Jul 29 05:11:23 2025 GMT
        Subject: CN=6885b4fc-f4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:58:2d:c4:03:74:87:fa:31:04:45:9d:cb:
                    01:38:04:a1:cb:a4:eb:6d:87:fa:c4:2a:ac:ea:a2:
                    15:18:74:b1:06:54:d7:47:5a:11:cc:09:08:73:55:
                    c0:21:3d:a1:29:5d:2e:fc:3a:9c:d9:23:5d:d7:d1:
                    cd:0c:ff:fb:f1:32:d4:8c:94:41:91:73:04:ac:c4:
                    36:68:e0:13:3f:36:19:2d:1e:21:45:fe:9d:28:c8:
                    6a:d1:71:e7:b0:2c:8a:42:12:10:d7:44:c9:7d:f9:
                    da:f8:1b:f3:72:78:5a:93:05:5d:e5:99:ff:5f:30:
                    bc:60:e2:08:3f:7d:37:f5:18:5e:c7:87:9e:aa:6c:
                    db:1c:8e:60:18:31:85:7c:d0:8f:fe:9a:69:4c:1c:
                    e5:9f:79:60:31:63:84:e6:3f:d7:04:3e:ea:01:2a:
                    29:15:99:ba:ec:e1:38:e4:4f:7d:ae:49:42:d3:a0:
                    c8:f4:d3:c5:73:1b:2a:d3:f6:ec:b4:ac:fc:16:0a:
                    95:5e:93:f6:06:cd:f5:eb:0f:92:d7:d9:a0:4e:16:
                    cd:ab:ae:22:1c:95:11:75:90:e0:f1:e6:16:e4:e1:
                    a0:51:ef:4c:67:ff:0f:25:13:a5:80:c9:b4:be:3f:
                    9a:46:d4:d5:bf:b0:47:f2:cc:db:54:f8:dc:06:c8:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:66:70:B4:68:24:FC:BD:0C:27:7F:95:66:5B:C2:E2:43:68:2A:F0
            X509v3 Authority Key Identifier:
                keyid:1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:60:a1:ad:c4:60:5e:4b:39:dd:3e:ca:77:c3:a7:e6:16:36:
         34:c8:4d:75:85:2a:ad:e7:61:b7:a3:08:71:dc:96:0a:58:12:
         48:01:ea:dd:f9:1b:b5:ff:98:42:26:0f:f8:dc:79:38:bc:33:
         b1:7b:fc:9b:48:6c:75:1d:b9:02:6f:a3:dd:1b:d5:77:ed:71:
         d1:91:1e:a9:57:86:dc:4d:a4:b1:77:74:80:a9:8d:20:9f:ac:
         0d:bc:66:80:5f:49:64:99:3f:ee:1b:51:d7:f6:5e:7e:00:36:
         b2:3a:39:7f:e8:7b:0e:08:94:0e:2d:ca:16:81:77:02:2f:3e:
         fb:15:0b:a0:89:a7:94:c2:74:b9:b2:b9:07:42:be:25:44:44:
         7f:85:43:f9:d9:a5:d5:d9:77:3b:1f:8f:e9:33:c3:29:8f:d3:
         a3:4b:b6:67:b6:d1:e2:a0:24:c9:52:d2:42:58:80:34:2c:c5:
         40:54:d5:93:0a:2c:e4:96:b5:7a:9e:4e:47:07:d1:cd:d1:3b:
         27:d4:5a:96:c4:d1:29:ca:58:ac:ec:bb:95:15:f5:dc:8e:60:
         d6:fb:66:1c:4a:6b:36:4c:af:39:3e:fb:53:7d:ee:f1:04:67:
         8d:45:72:05:96:5d:79:3f:22:46:61:01:3b:82:73:6a:70:0c:
         fc:2b:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:02 2025 by rpki-client