Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          dAn5jroQ5YXiN96Qp0w0fh+St08nzZCtVmPyeg7fQLU=
Subject key identifier:   23:8C:73:E9:D3:E5:B8:E4:4D:C6:11:44:3C:AD:67:C7:C3:8C:21:17
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       07D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          07CC
Signing time:             Thu 31 Jul 2025 01:52:40 +0000
Manifest this update:     Thu 31 Jul 2025 01:52:39 +0000
Manifest next update:     Sat 02 Aug 2025 01:52:39 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: olhGcbxsOcCM5rozNeQ762KqxnjsA22I4rWoJA9j6+g=)
                          2: C7468CE2E77811EEA1A05FC9775412E6.roa (hash: /c7WzEE1XWOd4nr8e22x2r+tmERk1nvGspmezFZ5FXU=)
                          3: 323F5EAC7AEF11EABF68BC13F8AEA228.roa (hash: cAtHhpCyL7sXJPk4hLfJU0qk1+tqkF5Y8qrGns8hrrg=)
                          4: 94A8D362E77811EE9100CFC8775412E6.roa (hash: PQ9VdjuHSh6kOFkT99/RDdKUFZgKf41yYceEmNn3R/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2000 (0x7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Jul 31 01:52:39 2025 GMT
            Not After : Aug  2 01:52:39 2025 GMT
        Subject: CN=688acc68-bb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:d1:d4:87:26:b9:85:06:bb:88:1c:9a:c4:
                    c6:3a:e0:2c:58:ca:6d:51:c8:0e:63:d7:51:2d:6f:
                    61:ed:c4:85:6c:c8:67:45:99:2c:26:69:9b:72:10:
                    64:1b:4b:70:62:3d:95:f6:65:24:62:6e:f1:3f:a8:
                    aa:79:54:dc:9e:4f:02:22:4c:d8:16:f6:ac:d4:18:
                    43:39:00:da:d5:cc:e0:0d:31:f3:bb:64:9e:63:a0:
                    2d:23:97:0e:0f:53:aa:08:f3:61:d7:31:99:16:48:
                    d2:75:eb:de:41:b0:15:9e:d1:06:36:62:84:60:fd:
                    79:09:53:02:78:31:8b:1d:8b:f3:92:d5:f1:9d:4e:
                    7f:2f:75:99:4f:8a:fc:67:fa:5a:57:ac:29:e6:87:
                    f7:bb:93:91:94:7d:bb:8f:ea:04:ce:52:74:24:07:
                    b3:b2:5b:48:93:90:03:79:b7:f9:a9:f1:46:53:2f:
                    55:03:ef:3b:92:00:b5:d3:cc:4e:eb:10:e5:3f:74:
                    1d:66:c8:98:b3:c1:c3:b0:f8:4c:20:2d:c5:bf:84:
                    eb:c9:46:7a:07:bd:bf:50:4f:40:30:9c:6f:24:7e:
                    94:01:33:93:92:2f:f2:8b:6d:b1:f3:4d:15:d0:e1:
                    fc:25:a4:6d:d0:d5:be:71:fc:6c:46:41:f4:1d:2c:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:73:E9:D3:E5:B8:E4:4D:C6:11:44:3C:AD:67:C7:C3:8C:21:17
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cf:1a:da:0f:80:78:18:a0:e9:ec:f7:1f:57:fe:b7:e8:2f:
         6c:72:44:5e:ae:41:c4:13:ac:f6:63:d7:fc:33:4a:b5:a5:b0:
         ee:ec:76:46:c0:5a:cc:a7:7b:c3:c1:39:c3:95:2c:4b:64:37:
         ad:d0:5d:77:c9:ec:aa:c0:e6:65:62:ea:7e:a9:24:2c:8d:df:
         63:f5:f5:af:f0:44:dc:62:df:24:23:1d:56:c0:dd:c2:38:a6:
         33:54:0e:5a:f6:d8:f9:09:86:00:e8:c3:d2:ad:ba:a6:7a:17:
         cd:1b:ce:be:0f:8d:ee:d7:76:b7:6d:f4:6c:2d:1e:32:cb:8a:
         0b:5f:2f:99:64:86:83:e2:ad:26:7f:de:07:20:72:66:a1:a5:
         67:da:cb:92:28:3c:e3:c9:c7:6f:5c:aa:9b:50:ba:ef:6d:f2:
         dc:34:95:b1:2c:07:2a:66:24:a0:9f:bf:fa:e0:01:b9:ed:4f:
         0b:b0:c9:fe:de:b8:75:a5:4b:06:46:50:9f:6c:bf:7b:53:ee:
         5c:35:02:59:87:a8:ba:63:d7:12:98:bb:f4:9b:fe:6c:36:05:
         83:45:a5:92:e2:2b:a2:0c:a7:af:26:f6:b5:28:93:17:77:62:
         ad:32:c4:d7:7c:29:ae:b8:e6:e8:5b:02:b8:64:dd:40:df:ba:
         d4:2c:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:16:51 2025 by rpki-client