Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
File:                     DTBvSAc93XLccOnbp6ScT27cvII.mft (raw, json)
Hash identifier:          w4V+RQmjrZNFenGPoa7AvPDM2dMc12VUcFcLBsEfwgg=
Subject key identifier:   B0:B3:6C:0B:5A:32:25:94:D4:6F:A3:32:E1:75:0F:21:F3:E7:0F:4E
Authority key identifier: 0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82
Certificate issuer:       /CN=F36E201DAF/serialNumber=0D306F48073DDD72DC70E9DBA7A49C4F6EDCBC82
Certificate serial:       0326
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
Manifest number:          0323
Signing time:             Tue 16 Sep 2025 03:38:51 +0000
Manifest this update:     Tue 16 Sep 2025 03:38:50 +0000
Manifest next update:     Thu 18 Sep 2025 03:38:50 +0000
Files and hashes:         1: DTBvSAc93XLccOnbp6ScT27cvII.crl (hash: 5zcw5K3MjxFiJidVYItr3Hdc6SPsxz9y81iLFninF5Q=)
                          2: 167BE270311311EE90196C2D4AD9E6FC.roa (hash: dZ+rQksE6z+SZB/mbDVm25XJgP/+R2iDhZ47qWEyHqs=)
                          3: 74FF55AC311311EEAA4CBB2E4AD9E6FC.roa (hash: YFcZ13YkooKk8gZs9EKDPRGIE46mgixe3+C0QIIMAH0=)
                          4: 52FAF038311311EE9319652E4AD9E6FC.roa (hash: CPXHz3C00Kr9ga8MYMPZ99obmxz+ufFsJiCHPSIPn0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAF, serialNumber=0D306F48073DDD72DC70E9DBA7A49C4F6EDCBC82
        Validity
            Not Before: Sep 16 03:38:50 2025 GMT
            Not After : Sep 18 03:38:50 2025 GMT
        Subject: CN=68c8dbcb-579a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:bc:15:12:b9:ad:37:18:9c:71:ac:07:72:
                    41:74:68:f6:b3:e6:ac:59:c0:a4:b1:7d:5c:ed:fe:
                    d6:69:3a:89:5a:d8:e2:73:23:f8:4c:0d:07:59:c1:
                    a2:2f:74:66:e3:b2:1f:58:e8:a6:68:4a:30:eb:cf:
                    af:c8:0b:7b:4f:c6:df:65:c6:08:09:c7:71:a6:f4:
                    f5:91:66:f4:8e:11:16:42:f3:68:1d:87:cb:31:34:
                    0d:70:e0:1b:1a:4d:5c:f8:63:d8:fc:2c:c6:ca:74:
                    b3:ba:bf:a8:32:06:24:77:78:eb:c0:6b:31:24:1e:
                    b6:c3:1c:a7:00:49:a2:f3:cc:ab:0f:95:45:c4:5d:
                    b9:30:6f:56:ad:70:fa:72:14:8f:fa:0c:ce:db:e9:
                    59:37:69:af:73:ea:29:65:26:78:d4:2b:1f:97:dc:
                    ca:fe:f7:2c:f2:05:71:27:ac:56:01:98:da:ce:c4:
                    22:0a:1f:c2:94:ab:8e:f0:88:9d:3a:3b:72:d6:81:
                    45:1a:a8:10:ac:59:26:69:ed:de:94:be:a5:0f:54:
                    69:43:a3:43:02:a2:1e:40:2b:88:46:37:b1:2e:98:
                    68:c1:37:94:72:1b:27:5b:45:ce:d9:7f:8e:66:0e:
                    60:60:14:36:8b:c8:9b:a8:27:16:f1:bf:b5:b2:0e:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B3:6C:0B:5A:32:25:94:D4:6F:A3:32:E1:75:0F:21:F3:E7:0F:4E
            X509v3 Authority Key Identifier:
                keyid:0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:63:b0:44:e9:96:8b:66:82:46:3a:39:69:2f:70:ca:78:8c:
         1e:b7:0a:dc:66:28:55:db:dc:a4:85:73:00:9a:3a:ea:ce:8c:
         b9:2d:2b:7d:3f:88:8d:1d:40:08:45:90:32:17:3d:b9:c9:38:
         55:da:93:af:22:59:0c:46:db:c9:8b:b0:c9:05:d5:f7:7b:29:
         bb:43:cd:e8:44:41:bc:f1:78:1f:18:45:dc:f1:8d:f6:f7:43:
         79:50:85:b1:88:e6:a7:c8:de:d7:54:d6:71:67:8e:19:9f:04:
         cf:57:fd:c0:9d:6c:d9:8a:18:fe:9f:86:eb:19:d5:d3:c4:e8:
         89:b8:6d:9e:f0:d5:ab:d2:2a:71:0b:e4:65:ac:91:42:d2:68:
         19:ea:51:39:a1:38:b5:16:40:94:8b:0d:95:54:2b:f3:83:8b:
         0e:e9:75:e4:4a:e7:dd:2f:40:ac:12:ae:90:a6:95:2a:55:1a:
         00:d4:a8:52:87:d5:5b:bf:14:b9:07:5e:46:93:c0:bd:d3:e2:
         63:c6:52:c1:fc:e8:6b:e5:f6:73:b9:45:41:6a:89:b8:6d:ba:
         39:98:17:95:00:45:6a:2c:a5:d3:e2:25:58:fe:af:b7:e5:90:
         d2:7f:0b:e0:89:69:14:52:a0:db:89:43:f3:f5:23:63:cc:5e:
         d3:c3:76:94
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTIwMURBRjExMC8GA1UEBRMoMEQzMDZGNDgwNzNEREQ3MkRDNzBFOURCQTdBNDlD
NEY2RURDQkM4MjAeFw0yNTA5MTYwMzM4NTBaFw0yNTA5MTgwMzM4NTBaMBgxFjAU
BgNVBAMTDTY4YzhkYmNiLTU3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZebwVErmtNxiccawHckF0aPaz5qxZwKSxfVzt/tZpOola2OJzI/hMDQdZ
waIvdGbjsh9Y6KZoSjDrz6/IC3tPxt9lxggJx3Gm9PWRZvSOERZC82gdh8sxNA1w
4BsaTVz4Y9j8LMbKdLO6v6gyBiR3eOvAazEkHrbDHKcASaLzzKsPlUXEXbkwb1at
cPpyFI/6DM7b6Vk3aa9z6illJnjUKx+X3Mr+9yzyBXEnrFYBmNrOxCIKH8KUq47w
iJ06O3LWgUUaqBCsWSZp7d6UvqUPVGlDo0MCoh5AK4hGN7EumGjBN5RyGydbRc7Z
f45mDmBgFDaLyJuoJxbxv7WyDu+BAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsLNs
C1oyJZTUb6My4XUPIfPnD04wHwYDVR0jBBgwFoAUDTBvSAc93XLccOnbp6ScT27c
vIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyMDFEL0JFMTE5NDdDMkZDRDExRUU4Q0UzRDc0ODRBRDlFNkZDL0RUQnZT
QWM5M1hMY2NPbmJwNlNjVDI3Y3ZJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RUQnZTQWM5M1hMY2NPbmJwNlNjVDI3Y3ZJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTIwMUQvQkUxMTk0N0MyRkNEMTFFRThDRTNENzQ4NEFE
OUU2RkMvRFRCdlNBYzkzWExjY09uYnA2U2NUMjdjdklJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACY7BE6ZaLZoJGOjlpL3DKeIwetwrc
ZihV29ykhXMAmjrqzoy5LSt9P4iNHUAIRZAyFz25yThV2pOvIlkMRtvJi7DJBdX3
eym7Q83oREG88XgfGEXc8Y3290N5UIWxiOanyN7XVNZxZ44ZnwTPV/3AnWzZihj+
n4brGdXTxOiJuG2e8NWr0ipxC+RlrJFC0mgZ6lE5oTi1FkCUiw2VVCvzg4sO6XXk
SufdL0CsEq6QppUqVRoA1KhSh9VbvxS5B15Gk8C90+JjxlLB/Ohr5fZzuUVBaom4
bbo5mBeVAEVqLKXT4iVY/q+35ZDSfwvgiWkUUqDbiUPz9SNjzF7Tw3aU
-----END CERTIFICATE-----
Generated at Wed Sep 17 00:41:20 2025 by rpki-client