Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
File:                     _fBwBNUH4xafjwTMLtjgu_Sq38Y.mft (raw, json)
Hash identifier:          yzzhgWDfsVChznaXcT5hk6pBpS/0z6rX1lC2+auVaQ4=
Subject key identifier:   58:38:3B:56:30:EB:5D:15:33:FD:FA:AD:03:C2:5E:AB:BC:A5:63:D9
Authority key identifier: FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Certificate issuer:       /CN=F36B1BD7AF/serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
Certificate serial:       B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
Manifest number:          B1
Signing time:             Sat 26 Jul 2025 05:15:42 +0000
Manifest this update:     Sat 26 Jul 2025 05:15:41 +0000
Manifest next update:     Mon 28 Jul 2025 05:15:41 +0000
Files and hashes:         1: _fBwBNUH4xafjwTMLtjgu_Sq38Y.crl (hash: mFrcotP8yYiJR1wFOUWnz1y/0KaI6XcRsie4B7oJo/8=)
                          2: 58A4F560E54E11EF908E0F81762E951A.roa (hash: RGKTeSXUz+Sp60GwrTqbGbFazRAHGX0bbtXYfxY2Mws=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Jul 2025 05:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1BD7AF, serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
        Validity
            Not Before: Jul 26 05:15:41 2025 GMT
            Not After : Jul 28 05:15:41 2025 GMT
        Subject: CN=6884647e-75f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:ff:c5:df:a2:11:e8:0a:0c:ca:c7:a5:e9:
                    ae:30:aa:da:6f:9f:3b:c3:d9:1b:41:a3:29:37:7e:
                    90:45:56:ab:d8:de:1d:b9:55:f9:5c:51:39:be:0d:
                    ab:7a:33:3f:71:23:b9:8b:64:a8:c1:33:f0:25:e2:
                    c1:59:dc:0f:c1:52:12:fc:67:17:3a:b1:c0:fe:a0:
                    76:ec:e2:3c:94:f6:71:c4:3f:19:95:eb:e3:7f:21:
                    c0:b6:4f:6e:aa:7d:34:f3:d6:0a:55:61:a3:68:22:
                    08:2c:b1:6f:d4:79:2b:5d:39:a6:dd:90:8c:f0:02:
                    03:2d:11:45:b9:74:fa:a1:95:af:fb:5e:ba:97:d8:
                    b1:4c:16:a0:cc:7f:2d:a1:d7:fb:f2:34:13:8b:ce:
                    07:6c:f9:13:98:2d:c5:27:3d:e4:69:06:17:75:3c:
                    d2:c3:3c:2e:90:2a:db:11:49:3d:38:8e:a6:32:10:
                    cc:ce:ed:bd:06:a4:ee:aa:28:08:92:c2:af:ab:51:
                    c1:86:69:ec:8f:41:e4:b3:0f:7c:c2:c1:a7:73:f2:
                    47:35:bc:69:7a:ac:f0:c5:9b:01:fd:17:4e:3f:7e:
                    87:17:8e:d2:f2:8a:18:9c:85:1c:b7:c8:a8:e3:4f:
                    9c:cc:6b:b3:8a:19:0f:be:bc:e5:8a:dd:4e:b6:c4:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:38:3B:56:30:EB:5D:15:33:FD:FA:AD:03:C2:5E:AB:BC:A5:63:D9
            X509v3 Authority Key Identifier:
                keyid:FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:34:6c:0e:50:67:9a:2c:f5:5e:3f:77:e9:66:2b:b9:b9:b5:
         ac:cd:db:0c:e1:1b:26:57:9d:ba:65:9f:2a:70:a6:5e:dc:0e:
         0e:0d:93:5e:09:e6:5a:8f:97:d4:67:3d:33:57:d5:b8:b7:16:
         c1:5c:29:ca:26:6d:ac:cf:60:7a:ed:2e:ff:47:52:f4:41:24:
         a0:aa:99:13:82:74:c8:8e:c4:88:d8:72:2d:33:00:4c:06:f5:
         ff:b2:64:a4:c0:b1:13:a3:ae:fd:e5:d5:c0:c0:cf:34:cc:48:
         92:f9:a0:ea:4f:e4:cc:4f:d6:19:0f:0d:24:85:27:45:58:ac:
         e4:f6:5d:91:c4:87:61:ac:7d:08:ff:5e:71:3d:44:b2:34:e7:
         ca:12:5c:00:1a:0c:bd:85:ee:0d:13:45:1b:de:74:a4:cc:55:
         30:f7:e9:86:0c:c7:91:59:2e:50:fc:bd:1c:4b:45:c6:33:ff:
         19:8d:cd:e8:fb:98:f9:ce:45:7e:d2:8c:00:ef:83:d2:3e:77:
         2e:70:ee:2f:5d:3f:cc:93:3a:4b:18:4c:ba:e7:b9:b0:30:1f:
         d8:81:64:c8:99:6c:b2:e4:1f:3a:9d:cc:1e:9d:a6:3a:86:91:
         4f:4b:00:c8:cf:4f:e8:57:6b:f0:27:3b:c6:64:9a:af:26:9f:
         5a:c9:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:29:55 2025 by rpki-client