Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
File:                     8H0xNKDMPAQpA5gVfKBVkucrz6s.mft (raw, json)
Hash identifier:          KPn88Yz6lawwZuqmPRnwLAUlaAG8pPmLQyR3K/BvGVM=
Subject key identifier:   F2:B6:F9:07:62:64:E8:EA:93:83:2A:EA:E8:0A:83:8B:A3:7C:B6:83
Authority key identifier: F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB
Certificate issuer:       /CN=F367B3D1AF/serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
Certificate serial:       E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
Manifest number:          E5
Signing time:             Thu 31 Jul 2025 05:15:56 +0000
Manifest this update:     Thu 31 Jul 2025 05:15:55 +0000
Manifest next update:     Sat 02 Aug 2025 05:15:55 +0000
Files and hashes:         1: 8H0xNKDMPAQpA5gVfKBVkucrz6s.crl (hash: Qaz5ihblWIwZv8KgEyeEkgbxa92l5irFbhHaduKh+Pk=)
                          2: 1561360CC12111EFA3DCFAAD762E951A.roa (hash: m44/mD69fqilQr5qakXjjSIMYxNycWbNcH5wLm+55Bk=)
                          3: EBC72644C12011EFA34E2AAC762E951A.roa (hash: FBA7XhhYZKd8zAiwrkhqOdWNSKf23ZrcRwoec3JtQJI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3D1AF, serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
        Validity
            Not Before: Jul 31 05:15:55 2025 GMT
            Not After : Aug  2 05:15:55 2025 GMT
        Subject: CN=688afc0c-e220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:e0:b9:ae:7a:b5:7f:b9:fb:ec:63:e7:fc:
                    67:c3:4a:d4:c7:5f:17:73:f4:90:5c:09:ec:e1:98:
                    4a:25:fe:ec:b1:12:eb:50:90:d8:27:55:55:52:ef:
                    ce:ea:71:42:30:43:68:5c:9b:a0:86:e9:88:53:df:
                    5d:94:02:8b:c9:6f:37:0f:fd:3f:c4:20:f2:d5:7e:
                    b1:6c:82:e1:a6:c0:3d:ef:62:c3:e9:fc:7d:66:7f:
                    c5:7a:5b:81:33:43:91:0e:66:fc:fb:df:34:a4:ed:
                    15:c0:dc:7e:1c:ce:c5:8e:0d:69:bf:0d:b3:7f:b1:
                    2b:70:ca:b5:4b:3b:d7:37:30:d8:8f:0e:fd:78:49:
                    42:d6:28:14:65:0a:6e:64:11:7e:7d:fb:86:68:84:
                    05:f7:df:d5:2c:06:ac:4c:ad:c2:a1:da:2e:27:e1:
                    9f:0d:33:bd:88:97:ad:8f:6f:46:b2:37:44:8d:20:
                    35:c2:8c:ef:f7:bf:b8:23:02:9e:72:62:bb:ee:4b:
                    38:b2:dc:c2:f9:23:a7:24:49:2e:2a:45:56:6b:0f:
                    c8:b7:13:88:00:b2:e1:d4:79:fc:73:10:4b:42:93:
                    8b:97:18:d1:89:61:37:7b:db:dd:5a:bd:1c:db:9a:
                    8b:8c:76:1a:5a:eb:85:53:08:99:e4:97:4c:dd:51:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B6:F9:07:62:64:E8:EA:93:83:2A:EA:E8:0A:83:8B:A3:7C:B6:83
            X509v3 Authority Key Identifier:
                keyid:F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:b0:65:bf:eb:e9:09:0f:d7:1b:34:92:ac:0d:73:ec:45:
         12:81:17:8e:7f:ac:48:2c:11:ab:56:f7:fb:29:4c:ec:f8:89:
         5b:79:fd:6a:f0:c6:b0:5e:70:bf:4a:2f:5e:4f:c4:19:21:81:
         de:8a:df:82:14:82:b5:c4:cb:74:a5:d1:28:f7:44:8b:8d:b4:
         c4:b1:d5:47:91:76:e0:21:db:3a:71:34:9f:fc:c4:3f:d4:c9:
         72:1c:2f:56:29:26:23:d2:63:77:9f:af:90:50:76:5e:88:ac:
         71:ec:13:53:fc:22:84:b7:82:b3:95:22:80:1a:26:d3:7f:7f:
         0a:8a:86:30:60:cc:95:74:3b:51:e6:a1:85:f7:34:33:a7:61:
         3c:eb:65:2e:21:ca:a2:38:31:24:c2:7b:d4:fa:79:e7:cc:8b:
         a6:a8:c3:be:53:d0:2f:1b:f3:e7:ed:7c:bd:95:c7:cb:af:13:
         14:09:74:05:74:59:28:92:21:29:ca:0d:d3:36:d8:a3:b2:09:
         9d:3f:ab:43:d5:eb:6a:21:34:25:dd:ef:70:84:53:e5:99:d2:
         67:56:64:67:d8:0b:45:ae:a0:dd:c2:34:3f:98:41:b8:f3:e2:
         eb:49:58:df:5e:a4:8e:cc:a7:e3:94:c7:18:4d:d9:95:a2:ef:
         a1:d0:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:02:16 2025 by rpki-client