Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          iAngCpFpkKoLyT0a4VkVtDBqm4uoBRICTwyyFtSPRk8=
Subject key identifier:   28:56:A1:AF:DE:9B:EE:89:79:47:27:25:A6:DB:3B:7E:8E:C7:29:D8
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       0338
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          0335
Signing time:             Wed 17 Sep 2025 03:37:18 +0000
Manifest this update:     Wed 17 Sep 2025 03:37:17 +0000
Manifest next update:     Fri 19 Sep 2025 03:37:17 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: TPqZznXGR+hevwucNxVSnFDUWHpDF2kdy6wy8wqlmRM=)
                          2: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          3: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          4: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: Sep 17 03:37:17 2025 GMT
            Not After : Sep 19 03:37:17 2025 GMT
        Subject: CN=68ca2cee-42f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:e1:5e:0d:c4:b4:e2:6d:74:ba:d0:e8:4f:
                    c3:2b:6b:6f:e7:9d:f8:bf:6d:84:6a:84:d2:de:44:
                    8c:13:41:3f:f3:81:4b:e8:f2:8f:2c:31:4f:ed:0d:
                    c4:d2:38:5e:cc:e7:21:9a:63:d9:d0:0f:ef:b1:a1:
                    6f:b5:fa:eb:60:70:c3:8b:e0:6c:aa:4e:27:57:9d:
                    ac:87:27:26:bc:87:10:96:9d:e5:d0:4e:ac:ae:8a:
                    1f:b8:b8:f8:b0:ba:8d:f3:a6:ff:72:1c:e2:63:4d:
                    ec:39:23:58:1b:3e:3c:31:86:20:20:b3:20:2b:81:
                    20:6a:0e:49:07:99:76:71:c3:be:99:f9:a3:00:fb:
                    2f:1c:ea:82:dc:50:ff:dd:d7:e3:af:c8:c6:8f:8e:
                    ee:7a:e1:bd:10:1f:1d:16:f4:36:84:4d:bd:51:1b:
                    01:2f:a0:31:97:27:81:ae:f3:21:0c:e3:58:46:7e:
                    94:4e:29:dc:16:4a:96:24:a9:07:f8:d9:3e:b1:69:
                    49:ee:6f:d6:a0:d3:e6:5f:46:67:0a:80:eb:ec:9e:
                    18:58:03:26:cc:07:e5:6a:17:ad:2f:73:3e:12:2e:
                    3f:08:b1:b9:26:80:9b:b1:a2:4d:e9:7f:76:02:6f:
                    be:25:c3:59:be:14:9c:0a:d5:77:25:90:62:9b:85:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:56:A1:AF:DE:9B:EE:89:79:47:27:25:A6:DB:3B:7E:8E:C7:29:D8
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:73:fe:62:6f:18:42:81:0e:60:1d:13:4a:20:69:be:49:
         f2:b0:19:eb:de:27:0a:4f:23:29:cf:ff:5b:68:c4:fb:80:bb:
         a1:68:99:72:1e:bb:cf:d2:ba:f9:51:6d:11:a0:95:c1:05:21:
         a7:68:c3:a0:09:3f:19:fb:98:c8:e8:2e:67:5c:91:e7:d6:98:
         68:4c:7e:a4:cc:17:8c:f4:00:14:7f:0b:41:d8:0f:55:9c:29:
         53:9e:f3:46:c4:ea:0a:2b:ed:1b:58:95:43:08:02:33:a7:40:
         3f:93:9f:4c:62:bb:8c:47:e4:5a:09:36:09:ac:f2:f2:74:27:
         1d:3a:21:38:2e:3a:00:ca:d6:4a:9f:9c:7a:42:5d:57:ae:1b:
         63:60:83:80:2f:d0:c9:02:9f:a8:15:ec:b8:11:03:52:2b:f9:
         c1:d7:83:95:47:87:82:49:7c:e1:93:e9:81:12:04:f5:d9:58:
         86:31:d5:4a:62:c1:2e:70:cc:33:79:60:4d:cf:0b:e0:45:7c:
         db:ba:b6:23:3d:22:40:34:a3:79:4d:50:5c:43:0e:59:6b:43:
         29:3b:15:b4:bf:e3:aa:2e:39:29:f8:58:f2:a7:e4:82:b8:eb:
         3d:eb:b7:8d:31:de:32:0f:6a:16:36:38:2b:b2:d7:a3:60:72:
         73:48:d1:11
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0I4RDFBRjExMC8GA1UEBRMoMkZEMzlEOTJBQ0RBQTUxMzdCQ0U0ODFBQkU2QzhE
RjFEQ0NEMEVGNjAeFw0yNTA5MTcwMzM3MTdaFw0yNTA5MTkwMzM3MTdaMBgxFjAU
BgNVBAMTDTY4Y2EyY2VlLTQyZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwseFeDcS04m10utDoT8Mra2/nnfi/bYRqhNLeRIwTQT/zgUvo8o8sMU/t
DcTSOF7M5yGaY9nQD++xoW+1+utgcMOL4GyqTidXnayHJya8hxCWneXQTqyuih+4
uPiwuo3zpv9yHOJjTew5I1gbPjwxhiAgsyArgSBqDkkHmXZxw76Z+aMA+y8c6oLc
UP/d1+OvyMaPju564b0QHx0W9DaETb1RGwEvoDGXJ4Gu8yEM41hGfpROKdwWSpYk
qQf42T6xaUnub9ag0+ZfRmcKgOvsnhhYAybMB+VqF60vcz4SLj8IsbkmgJuxok3p
f3YCb74lw1m+FJwK1XclkGKbhbgpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKFah
r96b7ol5Ryclpts7fo7HKdgwHwYDVR0jBBgwFoAUL9OdkqzapRN7zkgavmyN8dzN
DvYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRBRDlFNkZDL0w5T2Rr
cXphcFJON3prZ2F2bXlOOGR6TkR2WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0w5T2RrcXphcFJON3prZ2F2bXlOOGR6TkR2WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0I4RDEvNTYxRTJGREMyMUYwMTFFRUFDRkMwMTEwNEFE
OUU2RkMvTDlPZGtxemFwUk43emtnYXZteU44ZHpORHZZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOo3P+Ym8YQoEOYB0TSiBpvknysBnr
3icKTyMpz/9baMT7gLuhaJlyHrvP0rr5UW0RoJXBBSGnaMOgCT8Z+5jI6C5nXJHn
1phoTH6kzBeM9AAUfwtB2A9VnClTnvNGxOoKK+0bWJVDCAIzp0A/k59MYruMR+Ra
CTYJrPLydCcdOiE4LjoAytZKn5x6Ql1XrhtjYIOAL9DJAp+oFey4EQNSK/nB14OV
R4eCSXzhk+mBEgT12ViGMdVKYsEucMwzeWBNzwvgRXzburYjPSJANKN5TVBcQw5Z
a0MpOxW0v+OqLjkp+Fjyp+SCuOs967eNMd4yD2oWNjgrstejYHJzSNER
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:24:15 2025 by rpki-client