Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
File:                     WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft (raw, json)
Hash identifier:          lmXsUEOvl5pm7Wa5voSB4O78fIFNSSP5GjKP3CBfJIs=
Subject key identifier:   6C:45:4D:03:8D:2A:E2:C0:3F:5A:A1:FB:77:AF:62:0B:75:FF:3B:90
Authority key identifier: 59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
Certificate issuer:       /CN=F367D68CAR/serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
Certificate serial:       0693
Authority info access:    rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
Manifest number:          068E
Signing time:             Tue 16 Sep 2025 02:04:32 +0000
Manifest this update:     Tue 16 Sep 2025 02:04:31 +0000
Manifest next update:     Thu 18 Sep 2025 02:04:31 +0000
Files and hashes:         1: WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl (hash: j1Lepjj+dVI4tN9PrkkafKZCU/2Yb1NLLud7Q67kWb0=)
                          2: A724E396920811EB990A017FF8AEA228.roa (hash: 5uvsa9KPQNKjLyH5QubOl7NtYUWNWOe2gq4vsJw6dHc=)
                          3: 2E9F588E920811EB83076D7EF8AEA228.roa (hash: oQSBrrvnSFdaA34u8bIKrv9RVb6DtnaXK6VUugkT9/s=)
                          4: FF59C6FE920711EB9764327EF8AEA228.roa (hash: m00VuV/UGo/Jyjht1M+fRJLYF5Gu/BqwUDYsWsaEQIQ=)
                          5: 5F264832920811EB87E2997EF8AEA228.roa (hash: plKohU0UkE56jnC5cgoRu5Swuz+szi9p0MdTN+6qRdQ=)
                          6: CCB69C22920711EB82BD0A7EF8AEA228.roa (hash: Rusugkco9hQSpaO103aTMbTn9udYse5/JtYgMWEp260=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
                          rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAR, serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
        Validity
            Not Before: Sep 16 02:04:31 2025 GMT
            Not After : Sep 18 02:04:31 2025 GMT
        Subject: CN=68c8c5b0-9b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:da:a3:b7:51:b2:73:95:50:b9:5d:91:2e:
                    8e:f6:1d:50:aa:a2:6f:3d:d2:8d:e8:7d:72:73:7b:
                    2e:8e:35:c9:76:20:87:69:67:b6:3a:51:2d:86:bf:
                    9b:3f:0f:6a:77:ec:82:e8:d1:bf:90:ac:e3:6e:9f:
                    22:8d:7e:f1:b9:64:97:da:c3:ef:80:c6:2c:b2:4d:
                    56:ca:25:c6:09:e4:2a:9b:d0:55:ee:1c:aa:3e:14:
                    93:34:1f:56:b9:bb:9e:f5:0f:20:3b:e6:a4:5d:fb:
                    89:6d:81:c7:db:3a:16:27:5b:a5:cf:76:e4:0b:ab:
                    89:98:3e:83:d6:6f:80:fd:7a:7f:c8:c0:ca:ae:b9:
                    13:3c:46:e8:55:3e:80:75:59:7e:f5:81:a0:de:3f:
                    e3:e2:0d:c5:56:3a:ea:a1:e8:46:bd:bd:68:a8:b9:
                    fb:e1:d9:b0:a5:fc:83:92:b0:b3:dc:6f:39:98:bf:
                    ab:f8:79:f5:2c:d0:e8:66:d6:85:e4:02:d3:20:46:
                    2a:43:79:cc:07:8a:f3:1e:25:cd:ca:3a:9c:85:ea:
                    f6:6d:d9:48:a0:20:7f:b5:c4:4e:95:60:ab:3a:e1:
                    e2:16:16:b5:aa:f2:b3:56:dc:10:01:b3:75:08:f3:
                    6f:b0:3a:52:58:fb:e3:2a:93:9d:ce:bf:4e:7b:d5:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:4D:03:8D:2A:E2:C0:3F:5A:A1:FB:77:AF:62:0B:75:FF:3B:90
            X509v3 Authority Key Identifier:
                keyid:59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:02:14:0b:ac:2f:5f:1e:76:6c:db:19:48:49:b8:14:41:d2:
         2c:da:29:08:30:03:2f:86:91:a7:af:64:ca:9e:ff:1a:77:54:
         4d:56:de:72:0f:9b:dc:39:9f:28:2e:14:10:02:4c:a3:f3:fc:
         d4:2d:93:05:46:3b:66:71:55:23:1a:43:7e:3c:fa:8f:8c:c0:
         b3:c6:61:6b:16:c5:35:e8:24:5f:81:4d:4c:2b:30:c1:4f:1e:
         7a:5f:b6:0e:ea:3c:12:d4:ca:c4:1f:d3:a1:1e:ef:e6:22:db:
         c4:56:20:c2:83:49:11:b1:4a:10:92:4b:df:51:9a:49:c0:2d:
         7f:b1:3a:f9:51:ca:63:5c:6b:fc:53:f5:f2:ff:7c:dc:2f:03:
         90:1a:29:9d:db:17:c7:36:de:cb:00:58:ef:e6:e7:5f:6a:12:
         2e:ca:a6:34:5b:df:7f:81:82:b7:f7:e5:00:93:59:4e:f7:a0:
         19:38:d7:f5:5b:c5:85:85:1e:90:d4:d2:9e:0e:b9:dd:77:7f:
         f0:0a:25:da:77:bb:60:9d:cb:9b:71:28:0c:ea:25:c8:6d:33:
         27:da:7e:0b:aa:58:cb:55:e4:8b:5c:ac:31:63:de:0e:bd:d2:
         84:05:be:3b:21:ff:4a:f6:85:05:0a:a4:69:ed:1a:fa:b1:f7:
         fe:b6:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:01:33 2025 by rpki-client