Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          HQzpNyS/34OKLiDbIoAzfbfetPPIGWUpBEkoEZLJrvw=
Subject key identifier:   94:8D:73:66:8F:C2:DC:BE:93:2F:17:5A:90:90:4A:F9:70:E3:28:34
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       07E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          074B
Signing time:             Wed 22 Oct 2025 02:04:59 +0000
Manifest this update:     Wed 22 Oct 2025 02:04:58 +0000
Manifest next update:     Fri 24 Oct 2025 02:04:58 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: QP96D0+2x8BcDoz6hGeeDLsL35UxsD9ewsI4JuomDe8=)
                          2: 64797A88AD1611F0992966BDDAE4EC9C.roa (hash: dN0yO8xGL+mUbU8wW7KJehC831uJIY80Koc8ErS6ffU=)
                          3: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          4: EEB5856C7F6B11F0B0B6DF82DAE4EC9C.roa (hash: UIG7Jif5IiOqj4KGvbim+sNDE4xOkewikzs6NTdR8Fc=)
                          5: 746A98109AAA11F0A3C7FCA3DAE4EC9C.roa (hash: niMXAvU7fHh+5EdmWVl0mMysSktYu9xrcwOc5R3B42o=)
                          6: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          7: 6643EED69AA911F08149169FDAE4EC9C.roa (hash: nD/BFXfthY2J+wM0mgxXRU1qzVpsG1Kjd7lO67sgUh8=)
                          8: 5A8C7874784411F0BE639EBDDAE4EC9C.roa (hash: Tso2x+6Cusvv7XHczF8aF240Wh6DYRs6taSZ6HxpTbM=)
                          9: 9469C1789AA911F0836F2E9FDAE4EC9C.roa (hash: MBa44nXOq7T1Yr0WGgFCsRyKU4TpU6xLrWd8rjkCA6A=)
                          10: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          11: 14A07164952F11F0ADEC64A3DAE4EC9C.roa (hash: QI/ulBnHBuS3dRtLpTM6p4UrwXheqwhQAXcs85bhLNM=)
                          12: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=)
                          13: 9307AC26864211F0B10DDAA0DAE4EC9C.roa (hash: asyiiPpBOEH3XPd0A+rm4Mn5TAQ1pyZZcQW8jLn0FfU=)
                          14: 951B9DB2781711F0AAD136A0DAE4EC9C.roa (hash: rxo13RQJNN4g4AsDSu+eErcokD2GEDR1Waq9IZ5O/Qw=)
                          15: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=)
                          16: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          17: 9FB53966AD1611F0AF4F80BDDAE4EC9C.roa (hash: fvI+134xQpLs9jK1l0zcAgubM5j7hPLEZKr6qnKJoKQ=)
                          18: 8771237E7EC211F099678AA8DAE4EC9C.roa (hash: zffaPiL1Y8lSkQQ6ScEJK71SQvlLK9x+FiM4WbmwqxA=)
                          19: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=)
                          20: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          21: D3233AFC9AA911F0B28D9B9FDAE4EC9C.roa (hash: /AcnxuzNTosQCZAUuKmzEaEbGn9pqXV7DzlTfeQ9uZg=)
                          22: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
                          23: CAD01CCEAD1611F0B7FFDDBDDAE4EC9C.roa (hash: 6X242C8gRpLwRDdAl5XW16dhxRi6QqN8otye+wZDhVk=)
                          24: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          25: A3D2B7049AAA11F0B0117BA4DAE4EC9C.roa (hash: UVrwEGG8WIp9xnKuBnz7H6Xm6CR/H6UePyB8ksY3Vyc=)
                          26: FC1758EE9AA911F0AE71D7A1DAE4EC9C.roa (hash: p/wfawO4neZnr2GieDAQqFFqk793W4O10ZeBofiAz3I=)
                          27: 9ADD2568A35011F09D13FEB7DAE4EC9C.roa (hash: X5iP03usg/QEneRQuMvi+RKF4KU76rAutULa0XBNugY=)
                          28: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          29: 712F322AA28211F0B6B56D81DAE4EC9C.roa (hash: QBWFXHW+Go5rg0Xj7p9zOmxqK64h+qwzrGrj4iK7u2c=)
                          30: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          31: 64879FF4952F11F095F6C4A5DAE4EC9C.roa (hash: X6SUIt9mDKXhbZgGOSMBqAFD9GzqobcGIeeKANDWNp4=)
                          32: BB1D368A952F11F08414C6A7DAE4EC9C.roa (hash: TPJQZkj3HZaHbePzorSLkJXJUIjVtsNnfbGcfaToUso=)
                          33: 27EA6F2E9AAA11F09FCFB6A3DAE4EC9C.roa (hash: NcdTQCXD5mfTJdeb+3+wrwaMNibr4cT0Crtu6pLpunE=)
                          34: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 24 Oct 2025 00:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2021 (0x7e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Oct 22 02:04:58 2025 GMT
            Not After : Oct 24 02:04:58 2025 GMT
        Subject: CN=68f83bcb-7426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:7d:e1:d5:66:be:f2:1a:d8:2b:a3:f9:8c:
                    c5:d9:7f:cb:1f:5a:82:68:c2:81:f3:17:da:4b:25:
                    60:9f:8b:3b:c1:5c:e7:07:de:dd:89:fb:88:73:75:
                    8c:56:6d:50:88:09:74:ec:fc:b0:fb:58:a9:30:67:
                    0f:f8:b8:a6:aa:06:dd:1f:69:fe:df:88:0f:f0:f7:
                    b0:36:59:4f:85:b1:43:af:6f:15:6e:06:ee:08:b8:
                    75:cb:27:12:5f:66:62:48:30:d9:91:4d:ab:6c:c2:
                    9e:1c:96:2e:3d:1d:58:3b:15:53:76:5a:99:a0:9a:
                    25:70:da:27:7e:3f:a5:98:6b:62:50:c2:d4:da:86:
                    fb:9a:f2:58:63:1d:de:a0:ac:04:1a:6c:9e:d5:82:
                    a8:d0:73:de:41:79:e9:fe:dc:f0:92:34:a8:d9:bc:
                    43:d2:ae:cd:d2:67:be:45:71:d2:92:0a:68:b9:9e:
                    69:4c:e9:6d:1b:fc:f1:82:7b:7b:b3:7f:65:2e:20:
                    fc:1d:47:69:2f:05:c4:60:11:8d:af:d5:56:8d:a2:
                    65:5c:07:be:d4:c0:ea:f0:e2:f3:ce:25:31:52:f1:
                    3b:29:04:4f:f1:36:d9:5f:ff:dc:ad:3d:89:c1:35:
                    8c:40:ca:0c:c7:46:24:be:88:e7:b0:24:fb:20:b5:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8D:73:66:8F:C2:DC:BE:93:2F:17:5A:90:90:4A:F9:70:E3:28:34
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:32:72:28:8b:68:56:4b:be:64:f3:eb:a4:40:de:14:c8:
         0c:37:fb:1c:f8:ee:f6:3c:7f:17:97:31:84:fe:bb:d6:8d:c3:
         ce:f4:c8:fb:98:cb:39:63:da:f5:44:06:0b:de:e3:fc:5e:bb:
         10:83:0c:9d:97:14:4c:c3:d5:3f:46:d3:97:d7:9c:f6:88:03:
         be:55:10:0e:31:66:fc:1d:08:b6:1d:f5:72:04:e9:a6:60:34:
         90:cf:44:a9:b8:05:24:34:6f:7b:e4:a8:b5:58:76:c9:3f:38:
         86:58:a6:93:a9:c3:64:c0:d6:e6:9f:5b:29:1c:f4:b3:5e:bd:
         03:a7:35:76:01:c0:fc:b6:10:a3:63:9c:ed:4f:e0:94:0c:2d:
         df:67:9a:94:2d:a7:fe:ee:f3:42:3c:f3:32:05:5e:e8:98:33:
         46:13:d0:ff:57:f5:f7:08:6d:d0:6d:d3:2a:62:b1:19:6d:20:
         a6:9d:73:c4:0c:81:25:b1:8d:cb:36:14:6d:04:c3:d7:26:8c:
         f5:38:f1:19:86:ef:63:74:c7:18:7d:73:cc:b3:25:a9:96:58:
         4f:0f:fc:f4:89:56:46:ab:9f:e5:b2:5c:62:8d:33:6a:a3:24:
         fb:2d:41:cd:d8:b9:44:36:8f:1b:f3:6b:4a:13:a0:72:20:ee:
         44:49:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:58:37 2025 by rpki-client