Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          TojtQMCVf3UF5H0tiswcnioOsgdq6AYo+6lrZEeEPME=
Subject key identifier:   03:1C:EF:28:75:4A:01:70:8F:FE:CF:6D:D3:BF:E0:BE:F1:A2:74:AE
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          F2
Signing time:             Wed 11 Jun 2025 05:00:44 +0000
Manifest this update:     Wed 11 Jun 2025 05:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 05:00:43 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: VQFybDlqZ2TZuqrYfjsB1bH5OS1UplDdlM+R071vLaY=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 13 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Jun 11 05:00:43 2025 GMT
            Not After : Jun 13 05:00:43 2025 GMT
        Subject: CN=68490d7c-c8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:4a:55:1b:7d:c8:02:0b:08:8e:0f:25:36:
                    a1:a5:f8:83:a4:ae:e1:c1:3f:22:23:0b:cb:18:25:
                    71:35:c7:97:5a:89:5e:f1:e6:b0:16:2e:88:0b:fe:
                    07:31:f3:aa:80:04:68:7d:23:db:e9:3c:0c:1b:0d:
                    62:03:01:47:a1:31:83:0c:76:9a:c7:cb:e2:35:ea:
                    a2:b7:90:6e:57:8f:20:b5:c5:ed:c1:a3:66:59:49:
                    7f:9d:0b:20:1a:fc:76:9a:13:c5:65:7a:93:5c:85:
                    77:e9:2a:b3:e3:f0:55:f2:c3:cd:5b:3b:67:f6:48:
                    5f:64:6a:ff:a2:46:0d:dc:ae:53:08:e0:67:11:c6:
                    8b:ad:a3:8e:37:d3:cb:9c:4c:7e:2a:ad:82:e3:d8:
                    15:d3:29:78:29:3a:05:6b:4a:e7:83:73:1e:85:28:
                    54:6e:d0:e0:06:fe:05:d7:e0:b9:af:b9:16:de:5f:
                    24:2c:5c:79:fb:dc:b4:62:df:09:2e:ca:4c:3d:39:
                    e4:84:c0:c7:a5:e0:73:97:29:bf:ff:41:31:5b:d8:
                    ff:86:a1:7b:36:ba:cf:f2:88:8f:54:39:74:e1:d9:
                    1c:89:f0:46:fb:ee:d9:2f:87:78:e7:ae:35:c3:22:
                    55:74:7f:6d:b1:be:d6:ed:61:33:d6:13:f4:dd:8d:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:EF:28:75:4A:01:70:8F:FE:CF:6D:D3:BF:E0:BE:F1:A2:74:AE
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:65:b7:16:99:81:53:45:b2:f4:65:2d:31:14:f0:fc:f5:62:
         86:25:61:0b:59:d1:f6:e4:7d:f0:2b:c5:62:b2:55:cc:48:09:
         b4:44:6a:79:91:58:85:60:64:14:ae:9b:83:3d:01:5f:f3:60:
         c4:96:04:28:fa:f2:e8:88:d9:49:c2:a3:d7:1c:e9:19:95:17:
         b5:f6:0f:26:30:7e:23:3b:49:72:88:6e:62:dd:9b:3c:79:bc:
         a3:f4:b1:64:d7:35:1e:fe:98:33:d0:57:b5:36:b4:e0:da:70:
         80:54:99:37:1d:0b:4e:e9:ef:60:88:48:bb:c9:e8:93:f4:f9:
         84:8d:54:3a:9f:12:df:06:66:9a:43:c3:55:1e:f0:a8:fe:f6:
         9e:b3:ac:69:40:03:81:9a:bf:7b:f6:49:3f:3c:68:0f:41:da:
         35:3f:1c:3e:be:72:af:aa:73:b5:dd:7e:ab:a0:10:35:73:87:
         2a:ac:a7:11:50:58:82:ce:2d:5e:03:1f:2e:a2:b9:7c:11:e2:
         0f:39:88:cc:a9:51:b9:83:1b:f3:31:7d:84:76:86:e4:ee:36:
         3b:e9:c0:c9:c4:0c:85:4f:c8:e8:5a:bb:f7:ce:7e:8d:ec:26:
         a9:49:21:d3:9f:ea:69:16:e5:85:d8:af:1e:a4:dc:42:43:8b:
         4b:24:45:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzIxODlBRjExMC8GA1UEBRMoQTY2MUU2MTE1RjM4QzUwQjRENEM1QkUzRkE0ODhF
RDgwNThDQzJGMTAeFw0yNTA2MTEwNTAwNDNaFw0yNTA2MTMwNTAwNDNaMBgxFjAU
BgNVBAMTDTY4NDkwZDdjLWM4ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8R0pVG33IAgsIjg8lNqGl+IOkruHBPyIjC8sYJXE1x5daiV7x5rAWLogL
/gcx86qABGh9I9vpPAwbDWIDAUehMYMMdprHy+I16qK3kG5XjyC1xe3Bo2ZZSX+d
CyAa/HaaE8VlepNchXfpKrPj8FXyw81bO2f2SF9kav+iRg3crlMI4GcRxouto443
08ucTH4qrYLj2BXTKXgpOgVrSueDcx6FKFRu0OAG/gXX4LmvuRbeXyQsXHn73LRi
3wkuykw9OeSEwMel4HOXKb//QTFb2P+GoXs2us/yiI9UOXTh2RyJ8Eb77tkvh3jn
rjXDIlV0f22xvtbtYTPWE/TdjX07AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAxzv
KHVKAXCP/s9t07/gvvGidK4wHwYDVR0jBBgwFoAUpmHmEV84xQtNTFvj+kiO2AWM
wvEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyMTg5LzM4Qzg1QzQ2OTEyQTExRUY5OEFBMDY3QTc2MkU5NTFBL3BtSG1F
Vjg0eFF0TlRGdmota2lPMkFXTXd2RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BtSG1FVjg0eFF0TlRGdmota2lPMkFXTXd2RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzIxODkvMzhDODVDNDY5MTJBMTFFRjk4QUEwNjdBNzYy
RTk1MUEvcG1IbUVWODR4UXROVEZ2ai1raU8yQVdNd3ZFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6ZbcWmYFTRbL0ZS0xFPD89WKGJWEL
WdH25H3wK8VislXMSAm0RGp5kViFYGQUrpuDPQFf82DElgQo+vLoiNlJwqPXHOkZ
lRe19g8mMH4jO0lyiG5i3Zs8ebyj9LFk1zUe/pgz0Fe1NrTg2nCAVJk3HQtO6e9g
iEi7yeiT9PmEjVQ6nxLfBmaaQ8NVHvCo/vaes6xpQAOBmr979kk/PGgPQdo1Pxw+
vnKvqnO13X6roBA1c4cqrKcRUFiCzi1eAx8uorl8EeIPOYjMqVG5gxvzMX2Edobk
7jY76cDJxAyFT8joWrv3zn6N7CapSSHTn+ppFuWF2K8epNxCQ4tLJEVv
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:56:45 2025 by rpki-client