Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
File:                     w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft (raw, json)
Hash identifier:          GvI+nxMoRoIjMaSXXtR8krSbxJPaWqJMRphGKJG1TCk=
Subject key identifier:   9B:35:B7:7C:68:78:E3:F1:A6:B1:75:AF:E6:E2:5F:0D:8F:67:8E:D1
Authority key identifier: C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
Certificate issuer:       /CN=F36897F5AF/serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
Certificate serial:       0687
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
Manifest number:          0684
Signing time:             Wed 17 Sep 2025 02:05:37 +0000
Manifest this update:     Wed 17 Sep 2025 02:05:36 +0000
Manifest next update:     Fri 19 Sep 2025 02:05:36 +0000
Files and hashes:         1: w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl (hash: WCNUHL1rEWJOthZOTrc5flpRp7mS0r6i8slYUuNKATo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36897F5AF, serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
        Validity
            Not Before: Sep 17 02:05:36 2025 GMT
            Not After : Sep 19 02:05:36 2025 GMT
        Subject: CN=68ca1771-da56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5e:18:3f:ee:0b:ab:e8:6b:24:e7:84:fd:9d:
                    5b:63:42:0f:30:8b:21:b4:78:36:43:1c:30:32:90:
                    81:84:fa:51:80:68:4f:4d:31:91:95:c5:06:e1:42:
                    64:c6:fc:2e:c4:09:79:df:f3:3d:26:b8:c9:85:69:
                    c5:25:86:9c:a4:5f:d2:a6:79:cb:3f:f9:98:1d:de:
                    24:77:1c:74:40:e2:88:33:c0:a5:5b:d1:b5:32:d3:
                    8a:8f:27:86:1e:62:8f:8a:e7:12:07:09:2f:42:bc:
                    5c:15:e7:b4:47:90:dd:22:4a:c3:07:5d:2a:77:59:
                    a9:5c:c9:24:b6:ff:45:6f:bf:17:1b:47:b3:00:90:
                    dd:b8:9f:e9:d9:26:76:4b:88:dd:22:01:cf:3f:c0:
                    56:28:62:0b:40:76:3b:a3:60:b5:eb:57:3b:9b:02:
                    73:88:65:d8:59:b9:d4:be:0c:b0:3d:e1:a9:ff:54:
                    7f:ff:19:51:ca:3d:b3:ae:4a:15:6f:9d:04:97:6a:
                    4e:02:4c:87:73:a0:63:ca:a2:ce:a5:cb:32:49:1a:
                    8a:a7:83:2e:d8:fc:f4:bc:0e:6a:89:d0:b1:f2:a9:
                    b1:6f:e0:94:e1:5a:fa:7d:49:c2:40:f5:1f:85:4c:
                    3f:49:3a:a7:f0:d5:8e:ac:90:3b:29:7b:95:f4:be:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:35:B7:7C:68:78:E3:F1:A6:B1:75:AF:E6:E2:5F:0D:8F:67:8E:D1
            X509v3 Authority Key Identifier:
                keyid:C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:37:13:78:ec:fe:0b:b5:0b:9c:2e:fd:5e:da:6c:d5:c0:
         19:34:76:90:34:4e:7d:06:cd:9a:6a:e2:07:ed:e3:f0:1d:56:
         13:6c:83:cd:25:4b:c1:ab:92:14:d7:63:76:c2:ff:d0:44:5c:
         09:5e:e9:ee:9c:71:3b:68:ff:1b:ec:2e:20:6b:25:8b:60:83:
         2f:90:df:92:fb:8e:8c:56:b3:6f:93:47:8a:3f:d6:ee:5d:1d:
         06:31:f3:58:bd:31:41:70:a2:58:a2:c4:f0:7a:dc:c8:0a:03:
         e3:5b:4f:c5:65:51:ac:ed:fc:a3:0b:4a:47:d4:a8:20:01:e2:
         df:d5:ec:03:e7:dc:ce:40:a0:7b:a4:35:00:d9:67:1e:20:1f:
         2c:1a:e3:f0:a3:a9:21:cf:ff:1f:4b:ec:a4:b1:e6:83:6d:b4:
         2b:3a:a0:9f:c9:b6:40:8d:37:dd:94:e6:b2:52:8e:90:d1:43:
         0b:d3:5d:59:db:12:7f:4d:70:3d:83:c2:4b:a5:b3:80:60:22:
         3b:ea:20:a1:7f:8d:72:3c:c2:9f:02:df:9d:c3:cd:b8:0e:f1:
         a6:f8:34:85:af:31:54:e2:6f:87:9e:7f:0d:1d:9a:43:b2:55:
         db:23:06:e2:ae:77:b6:7d:27:b2:5a:99:7d:36:4b:ba:bd:41:
         4b:77:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:33:30 2025 by rpki-client