Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          48nVnHPcJDEUd9G5Z3qEifKRFLqhwX9B+xbdWNeOR8g=
Subject key identifier:   C6:EC:39:BD:65:F8:1F:C3:89:12:C4:D7:BE:61:97:FF:73:BE:52:13
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       05BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          05B8
Signing time:             Wed 17 Sep 2025 02:30:49 +0000
Manifest this update:     Wed 17 Sep 2025 02:30:49 +0000
Manifest next update:     Fri 19 Sep 2025 02:30:49 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: QwJqFch4fz13Hll8di5dbljhEX3WmjnF/rriXi5Gvz4=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Sep 17 02:30:49 2025 GMT
            Not After : Sep 19 02:30:49 2025 GMT
        Subject: CN=68ca1d59-d0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:a1:ff:c1:cc:3e:92:d8:06:63:2e:5d:b4:
                    96:40:93:d0:8c:1c:94:8b:e7:eb:19:60:7f:83:c4:
                    b5:a5:84:bf:e3:db:c2:91:64:87:38:2a:d5:d4:83:
                    1f:0e:7e:70:75:5a:af:8b:66:fa:79:1e:67:9f:09:
                    e1:24:e6:4b:09:6e:4a:eb:59:d7:21:b9:27:bd:70:
                    1d:87:60:a3:07:e9:ad:ed:56:7c:d4:e0:04:f1:27:
                    d9:18:12:48:a8:c7:61:26:83:18:12:d8:c7:73:82:
                    b6:f5:5d:a7:2d:da:41:b6:46:4f:57:5e:41:ce:e5:
                    0d:2a:a5:6a:33:71:c6:8d:47:10:9c:26:6c:17:c0:
                    4b:1d:04:c6:bd:c6:8e:7c:55:c4:39:5a:33:17:db:
                    53:33:77:37:b7:29:43:90:d0:e7:6c:3f:26:59:35:
                    f5:66:a1:60:3f:51:21:8a:b7:db:78:ed:df:8e:96:
                    59:58:39:17:6b:23:71:19:f8:be:9d:2f:a3:22:59:
                    85:45:51:32:c6:4e:51:32:46:4e:7a:f7:31:d1:fc:
                    f3:f4:e3:da:08:4f:12:77:58:25:c2:34:a2:fa:21:
                    ca:ee:da:2b:40:cc:0a:e5:32:7e:e2:6e:d4:0a:b0:
                    35:99:81:be:4d:3a:e3:7a:d5:d1:93:db:33:8b:2e:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:39:BD:65:F8:1F:C3:89:12:C4:D7:BE:61:97:FF:73:BE:52:13
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:57:d7:2e:9c:4e:9a:ad:14:d4:45:23:d6:48:01:c1:7e:d5:
         e4:2f:81:8c:b8:1e:d4:92:a3:6f:e1:59:47:f8:95:b4:24:d5:
         49:33:92:4e:61:74:9c:62:87:23:fc:fd:c4:da:5b:e9:7a:39:
         34:47:24:95:14:a2:f0:e9:85:db:db:ec:9d:46:37:8a:fc:98:
         bd:63:d5:4d:c4:fd:4d:55:7b:cd:ab:bc:84:32:1e:ec:e2:76:
         5c:57:d8:35:46:12:33:fc:8b:05:c2:59:8c:c3:28:11:6d:de:
         9b:5a:75:44:ec:88:92:7a:cc:26:46:3a:4e:8a:94:31:17:76:
         86:5c:89:2c:7b:3b:4e:b0:17:45:1a:46:9a:ad:26:38:bd:30:
         56:68:49:bf:22:e8:83:44:bd:ba:31:f1:62:e4:e8:7d:5f:aa:
         56:b5:92:1a:cc:f1:77:3e:ea:78:d0:e7:06:e5:f1:66:49:e7:
         87:86:c8:f0:6a:6e:4c:26:cf:f7:fa:eb:42:81:f0:7b:a1:c3:
         eb:9e:d2:53:d0:61:29:66:85:1a:24:de:e9:7a:df:ec:00:56:
         e3:48:d6:4b:3b:ef:86:67:00:b5:b4:e1:1b:88:72:15:ce:7b:
         c4:20:4f:3d:7b:5a:36:fb:a5:e7:e3:c9:bf:e9:4f:81:da:6e:
         da:46:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:24:24 2025 by rpki-client