Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier:          tOUUOdBLc6ys1ebeuoxXlDIK/G5rf7SGjfoMhOFpyDU=
Subject key identifier:   8A:4F:BF:A3:0D:24:26:22:95:3F:C2:81:73:40:E1:1A:BC:91:DE:2F
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer:       /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial:       04B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number:          04B4
Signing time:             Wed 17 Sep 2025 02:51:30 +0000
Manifest this update:     Wed 17 Sep 2025 02:51:29 +0000
Manifest next update:     Fri 19 Sep 2025 02:51:29 +0000
Files and hashes:         1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: OpmdPockR5XHp4FRLEg02JgI65UbSqEQ+hBXXCfPyrc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205 (0x4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
        Validity
            Not Before: Sep 17 02:51:29 2025 GMT
            Not After : Sep 19 02:51:29 2025 GMT
        Subject: CN=68ca2232-f641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:c3:f2:57:93:83:51:26:be:c0:fe:72:a4:
                    48:4f:ec:6c:a0:66:a6:b1:57:be:06:75:4a:19:fd:
                    00:18:38:57:d5:5e:45:7b:0d:d8:66:50:60:0e:88:
                    c8:fc:57:dc:be:9a:bc:00:06:90:e7:66:2e:e6:07:
                    7c:62:ec:97:5f:83:33:87:65:b8:91:82:a9:e6:aa:
                    61:55:45:df:46:0b:1a:05:ba:e9:6c:a0:a1:0c:b9:
                    09:0a:80:35:bf:14:30:c5:2a:69:6b:e9:6a:5e:ee:
                    05:17:b0:27:f4:2d:65:62:e2:14:d5:62:89:4c:6e:
                    c5:1e:6a:02:4b:c2:01:e0:83:f1:b1:d3:33:08:a7:
                    4d:96:a1:98:18:7b:16:6c:49:d2:ca:c0:8a:b9:0d:
                    d2:a8:14:22:57:a4:f6:26:1c:95:49:f0:01:f7:3f:
                    7e:87:c7:99:3f:83:04:ad:27:e5:0f:35:b3:42:35:
                    51:5b:ac:7c:64:44:76:13:20:4b:5d:c4:0e:ae:3d:
                    e8:58:1b:ef:14:a7:1f:2f:5e:73:d0:02:36:d3:3f:
                    d6:d2:6f:d7:1d:74:cc:16:95:98:db:0b:e5:0f:7e:
                    1c:05:26:d9:14:3f:06:d5:84:92:2b:aa:c7:5f:d5:
                    5a:95:35:9a:15:5e:dd:1d:da:0b:ba:2c:11:7b:78:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:BF:A3:0D:24:26:22:95:3F:C2:81:73:40:E1:1A:BC:91:DE:2F
            X509v3 Authority Key Identifier:
                keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:17:0b:97:77:fb:92:32:9c:d4:3e:d4:ce:87:2f:c6:e3:c3:
         8c:22:25:e5:6d:4d:e5:18:1b:ba:ad:73:4d:ab:8f:00:95:15:
         b2:bf:df:d6:7c:5f:45:09:2d:7c:e9:64:de:bf:ad:26:89:13:
         56:5c:fa:95:60:e4:b9:ea:ce:88:ca:e4:1c:eb:fc:2e:79:98:
         eb:cc:02:04:1b:73:79:8f:2b:1f:26:9d:aa:e4:6a:58:b7:64:
         41:75:bd:89:a6:3e:34:02:34:25:e7:64:1e:02:15:42:6e:d1:
         9d:ba:c2:ba:fa:2d:36:eb:05:1f:7b:bb:13:8a:3c:b9:7b:c9:
         45:af:99:3b:f1:6f:b9:fb:f5:7e:a5:0f:ce:62:86:14:b6:2b:
         b9:b0:1b:fc:d1:12:7f:35:3e:27:cd:ef:54:34:67:8a:8b:f2:
         d1:c0:e5:5c:9d:71:40:3d:01:54:88:69:5b:25:27:33:7d:ce:
         61:c7:bc:07:1b:bb:9c:32:c0:88:86:b1:f1:29:20:7f:5d:e7:
         d4:04:0f:9a:1e:66:37:05:6d:d6:d1:5d:68:ff:7b:12:12:55:
         4b:1f:43:46:14:69:12:65:af:5d:6c:a4:34:01:81:fd:7c:6c:
         ba:56:65:f7:5a:23:0a:8e:84:31:35:d3:b8:33:39:01:b8:e6:
         86:df:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:50:05 2025 by rpki-client