Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
File:                     ffDZZHEjlpmcF8_uBLpMLB39GqE.mft (raw, json)
Hash identifier:          btgDv/Gwx7ZP8VD6M1EEdwscwyFakofufas/IPp0/2E=
Subject key identifier:   2D:F2:3E:D4:EA:67:6D:52:17:FE:D9:EA:36:78:96:E6:59:EF:75:91
Authority key identifier: 7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
Certificate issuer:       /CN=F36D03D3AF/serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
Certificate serial:       0270
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
Manifest number:          026F
Signing time:             Tue 09 Sep 2025 04:00:55 +0000
Manifest this update:     Tue 09 Sep 2025 04:00:54 +0000
Manifest next update:     Thu 11 Sep 2025 04:00:54 +0000
Files and hashes:         1: ffDZZHEjlpmcF8_uBLpMLB39GqE.crl (hash: FMCRaZjQt/EZA8zBl0aOuXlgdMFJ9yO/38pHL38zqwk=)
                          2: 11714A5EB05211EEB8B0949D775412E6.roa (hash: Y74sDhVPh3sDwTRwkCR1rG2U0+ospQWmyyWML+k0YKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Sep 2025 00:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D03D3AF, serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
        Validity
            Not Before: Sep  9 04:00:54 2025 GMT
            Not After : Sep 11 04:00:54 2025 GMT
        Subject: CN=68bfa677-9b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2c:eb:e0:67:f4:2b:50:36:6f:90:c8:0e:56:
                    41:55:9a:f7:47:80:f9:00:87:9e:2d:d9:aa:23:af:
                    c1:b5:f2:c5:41:b5:59:bf:f6:d4:7b:c2:00:08:ae:
                    bf:b3:c2:87:02:2a:2a:d8:12:1a:e9:1f:91:cf:60:
                    e1:0e:3f:1b:ac:ec:74:77:27:a8:81:73:a7:a0:4d:
                    35:3e:25:b2:46:e8:ef:24:16:52:ae:84:93:f2:42:
                    e9:b6:12:b3:36:60:57:df:33:a9:bf:73:f5:1d:4e:
                    db:4e:75:29:a2:7a:66:f5:77:12:8f:fd:54:77:f2:
                    66:42:6d:3e:21:20:13:54:0e:d2:59:6c:6f:8a:7b:
                    da:8f:a8:88:79:dd:d3:9b:11:5a:c5:c5:9e:b5:7d:
                    bb:48:84:79:10:e9:5a:23:ad:4b:d0:6c:84:d1:97:
                    a8:06:ea:a6:c6:e5:1e:5e:ca:a9:9e:f5:fe:fa:cd:
                    02:b6:03:c6:95:12:30:03:af:5d:14:aa:7f:24:59:
                    88:33:c5:fb:0a:1e:a3:41:49:99:3a:dc:95:eb:c0:
                    17:84:39:35:15:85:15:80:a5:4b:f4:68:70:45:4c:
                    8b:89:35:55:9f:20:55:bf:85:8e:b1:f9:68:3f:60:
                    2c:88:fd:12:37:81:9f:a1:d2:44:f5:95:7f:34:9e:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F2:3E:D4:EA:67:6D:52:17:FE:D9:EA:36:78:96:E6:59:EF:75:91
            X509v3 Authority Key Identifier:
                keyid:7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:b8:eb:4c:db:e5:19:be:8d:ba:da:1a:3c:24:5e:e7:9a:
         f8:f5:29:6c:a6:b9:e6:a8:46:66:64:f7:53:ef:b9:cc:20:81:
         12:a6:42:ae:e8:93:2e:02:d8:9d:a9:00:e8:9d:dc:7c:68:fa:
         04:f9:e3:71:5f:98:e1:4b:56:03:c2:3d:b6:bd:dc:2d:bc:3a:
         c9:01:29:b2:a9:3e:d3:76:77:de:99:6c:bf:08:ca:f2:91:99:
         a2:d1:66:41:f1:12:96:06:16:30:4a:7e:86:39:f0:cb:49:3b:
         66:95:f4:18:cc:85:5f:ab:cc:9e:7b:67:62:67:2f:17:4d:7a:
         ce:9a:54:a4:ea:b6:ab:84:a4:c6:e4:5a:62:75:de:51:26:c4:
         16:0e:82:4e:c0:43:f8:29:84:87:50:69:e4:33:31:57:f8:74:
         68:38:34:f5:e4:f1:1a:53:bc:06:61:ea:67:65:7f:b3:9f:90:
         dc:a7:f7:d6:c4:72:06:8d:a1:fa:be:b2:22:62:44:f4:aa:69:
         4b:85:9b:84:a1:3d:23:93:6e:c4:93:c8:53:93:a3:4c:ca:22:
         fa:6b:fd:65:74:45:40:49:41:7a:46:eb:76:34:46:d7:d9:fa:
         65:30:c2:9d:74:1c:4b:fc:5d:5a:31:82:03:fe:61:9a:45:e2:
         16:03:3b:80
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDAzRDNBRjExMC8GA1UEBRMoN0RGMEQ5NjQ3MTIzOTY5OTlDMTdDRkVFMDRCQTRD
MkMxREZEMUFBMTAeFw0yNTA5MDkwNDAwNTRaFw0yNTA5MTEwNDAwNTRaMBgxFjAU
BgNVBAMTDTY4YmZhNjc3LTliMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0LOvgZ/QrUDZvkMgOVkFVmvdHgPkAh54t2aojr8G18sVBtVm/9tR7wgAI
rr+zwocCKirYEhrpH5HPYOEOPxus7HR3J6iBc6egTTU+JbJG6O8kFlKuhJPyQum2
ErM2YFffM6m/c/UdTttOdSmiemb1dxKP/VR38mZCbT4hIBNUDtJZbG+Ke9qPqIh5
3dObEVrFxZ61fbtIhHkQ6VojrUvQbITRl6gG6qbG5R5eyqme9f76zQK2A8aVEjAD
r10Uqn8kWYgzxfsKHqNBSZk63JXrwBeEOTUVhRWApUv0aHBFTIuJNVWfIFW/hY6x
+Wg/YCyI/RI3gZ+h0kT1lX80nvhXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULfI+
1OpnbVIX/tnqNniW5lnvdZEwHwYDVR0jBBgwFoAUffDZZHEjlpmcF8/uBLpMLB39
GqEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwM0QzLzNBMzg1N0IyQjA1MTExRUVBRkY0RjA5Qjc3NTQxMkU2L2ZmRFpa
SEVqbHBtY0Y4X3VCTHBNTEIzOUdxRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZmRFpaSEVqbHBtY0Y4X3VCTHBNTEIzOUdxRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDAzRDMvM0EzODU3QjJCMDUxMTFFRUFGRjRGMDlCNzc1
NDEyRTYvZmZEWlpIRWpscG1jRjhfdUJMcE1MQjM5R3FFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkubjrTNvlGb6NutoaPCRe55r49Sls
prnmqEZmZPdT77nMIIESpkKu6JMuAtidqQDondx8aPoE+eNxX5jhS1YDwj22vdwt
vDrJASmyqT7TdnfemWy/CMrykZmi0WZB8RKWBhYwSn6GOfDLSTtmlfQYzIVfq8ye
e2diZy8XTXrOmlSk6rarhKTG5Fpidd5RJsQWDoJOwEP4KYSHUGnkMzFX+HRoODT1
5PEaU7wGYepnZX+zn5Dcp/fWxHIGjaH6vrIiYkT0qmlLhZuEoT0jk27Ek8hTk6NM
yiL6a/1ldEVASUF6Rut2NEbX2fplMMKddBxL/F1aMYID/mGaReIWAzuA
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:47:05 2025 by rpki-client