Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
File:                     cIjstS9EHLVBKRrSDIupB7vUQFI.mft (raw, json)
Hash identifier:          Cabc/OfC406IZVRtiGEwh3SvGUqS6UuqTQ8Qq2Flxgg=
Subject key identifier:   94:D5:F7:F1:DE:37:05:6B:E4:DB:41:63:E0:C2:24:E7:B5:3B:EA:1F
Authority key identifier: 70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52
Certificate issuer:       /CN=F367FECCAR/serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
Certificate serial:       061A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
Manifest number:          0618
Signing time:             Tue 16 Sep 2025 02:18:03 +0000
Manifest this update:     Tue 16 Sep 2025 02:18:02 +0000
Manifest next update:     Thu 18 Sep 2025 02:18:02 +0000
Files and hashes:         1: cIjstS9EHLVBKRrSDIupB7vUQFI.crl (hash: 2UCqMPqdTMYnoaW0gCvJ5xexxPbF02XE9JSt/Dl8smo=)
                          2: EBAB53E0EA3E11EB96CC7D3AD8A014CE.roa (hash: 8ccVEiAliBiH1WhFkoVeVW9p7ZDUf8PeWahrlb8I6+s=)
                          3: B9EDE330EA3F11EB9BDDAB3BD8A014CE.roa (hash: UpWRiY04Rhit9Uj9Y+xZz3ZrxHoCtYC3IGMvoMbSZgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                          rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAR, serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
        Validity
            Not Before: Sep 16 02:18:02 2025 GMT
            Not After : Sep 18 02:18:02 2025 GMT
        Subject: CN=68c8c8db-8974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:24:19:53:88:a0:d7:a6:3d:da:6a:a0:13:
                    69:6a:b6:e3:ef:cd:02:78:e6:3b:e5:6c:aa:62:e3:
                    22:6b:62:dd:91:68:93:a7:cb:15:3e:65:76:f2:f4:
                    81:af:aa:1e:1c:bf:26:d6:b2:46:36:cf:4d:74:24:
                    7a:32:2d:99:77:01:2f:7b:79:d6:b7:8e:f1:17:8e:
                    72:c1:85:2d:b1:c1:c4:75:ba:9e:8a:ba:94:df:0f:
                    39:b6:c1:41:a1:df:71:73:85:5d:4f:6d:50:43:e7:
                    b0:07:85:da:b3:5d:a4:cc:2e:07:74:3a:a6:df:6a:
                    25:82:11:38:5c:33:48:e0:71:04:9c:03:22:42:2f:
                    7a:e3:46:2f:1e:2b:c2:26:bb:63:30:75:d9:c7:5b:
                    35:60:14:6a:13:a6:2a:8b:8d:48:49:21:a2:b9:df:
                    72:4c:b7:58:5b:f5:10:67:63:de:af:76:0b:14:b5:
                    90:2d:54:ee:18:d7:4c:7e:4c:e4:61:e5:2d:85:81:
                    63:a8:f6:4c:c4:31:d8:e6:1e:dc:e6:3e:51:4b:ad:
                    e1:c4:3e:7a:f9:40:88:72:04:5e:01:0b:d6:36:7a:
                    e4:63:71:52:5c:f5:25:2b:10:79:07:e1:c5:74:5b:
                    29:83:a9:82:f7:bb:4d:58:7d:b7:c2:ba:08:83:a8:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:F7:F1:DE:37:05:6B:E4:DB:41:63:E0:C2:24:E7:B5:3B:EA:1F
            X509v3 Authority Key Identifier:
                keyid:70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:40:c3:4d:5e:b7:48:30:2f:23:68:ab:19:d4:81:ed:c8:a9:
         0a:aa:2e:fe:da:d8:d5:e6:07:26:98:67:1a:af:ec:e3:35:15:
         6e:5c:30:4f:4e:34:27:3a:52:a3:c0:04:9f:8f:52:fa:b2:2f:
         1a:6d:c1:f9:96:b7:aa:a4:0c:84:05:6f:7b:a3:26:23:3b:7a:
         da:f0:f2:ea:3d:40:a1:72:39:a6:c0:2c:b8:a5:dc:7b:e4:cb:
         a6:b2:af:87:04:e0:c5:26:18:19:35:8b:cd:9d:ec:19:32:0f:
         fe:38:90:83:12:4b:5f:56:92:7c:5d:2a:11:ac:06:87:b4:e9:
         09:fc:a3:94:c9:77:96:45:8d:b2:96:7d:cd:34:81:f8:8f:ea:
         12:6f:d2:e9:3b:59:a8:89:9a:aa:f0:9d:00:7a:61:29:18:2b:
         60:ee:cc:e6:22:e7:cb:a7:23:5d:a2:b6:c9:93:20:48:59:8c:
         b4:d3:02:0c:4f:c7:33:58:02:8c:12:7b:fc:fb:22:f3:12:75:
         b6:93:21:3e:b1:0e:44:1b:64:e5:be:11:91:4b:d8:71:39:87:
         8e:02:df:d4:dc:aa:e5:83:c6:9c:4e:28:05:03:49:0a:a3:69:
         d4:92:38:be:89:87:6d:36:f9:76:df:97:de:47:ba:5b:74:7a:
         33:68:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:13:25 2025 by rpki-client