Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
File:                     -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft (raw, json)
Hash identifier:          krfSc/n6gUREO1TIM9j7rYPNGd78qRf1k1LU2f+eF4E=
Subject key identifier:   D9:37:8B:A4:5A:09:E8:42:4E:1B:13:88:51:6A:E2:A3:53:D8:D8:41
Authority key identifier: F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF
Certificate issuer:       /CN=F36EA516AF/serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
Certificate serial:       3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
Manifest number:          3D
Signing time:             Fri 06 Jun 2025 05:16:44 +0000
Manifest this update:     Fri 06 Jun 2025 05:16:43 +0000
Manifest next update:     Sun 08 Jun 2025 05:16:43 +0000
Files and hashes:         1: -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl (hash: 2gukvZXWqdYwWVTMzy2Fimqm+JfSk5n1J8YgT64G/yg=)
                          2: 046CE482147711F0B01A890E6EB8BCC6.roa (hash: 1Ni3jdhyCUqGSNwJUD1MnDgs72urkU8YdE/yCBxVta0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EA516AF, serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
        Validity
            Not Before: Jun  6 05:16:43 2025 GMT
            Not After : Jun  8 05:16:43 2025 GMT
        Subject: CN=684279bc-c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:07:c6:71:cf:eb:dd:5f:5d:3d:dc:0c:e1:
                    36:bf:1a:0a:61:ea:f4:25:c5:55:69:de:f7:ac:4e:
                    e0:a4:69:05:61:3f:1b:fa:b3:eb:4c:c9:e5:2b:61:
                    50:c7:c2:0f:43:22:b0:91:d0:78:09:dc:5b:7e:13:
                    4a:1d:58:f2:3c:b4:52:78:dc:d5:77:3d:3c:8d:6f:
                    c2:c6:6b:6f:b4:d2:2f:2c:ab:12:70:61:e4:b8:6d:
                    ad:27:96:7d:bb:14:01:52:fe:f5:30:4c:be:8b:a1:
                    55:73:55:18:87:dd:8d:66:48:f1:ff:26:6f:a2:76:
                    f8:2a:6c:e8:7d:d8:aa:df:d7:88:5b:2d:47:c0:f0:
                    5d:c8:25:a7:11:53:4d:9f:e2:fa:95:0d:32:1e:f8:
                    60:c8:ab:21:49:97:5e:b5:b8:1e:9c:b8:fc:92:3d:
                    5c:52:ed:34:f0:36:f5:6a:3c:66:c9:b6:2e:10:9f:
                    d6:a8:61:50:70:09:d0:ff:09:cd:1d:8f:ee:a0:b4:
                    4b:0e:14:34:b2:9a:0c:85:de:17:d2:dd:fe:18:02:
                    71:fa:d8:d0:eb:ef:69:1a:2b:05:8f:f1:b7:34:2f:
                    12:81:f2:80:ce:21:a3:b0:ce:48:05:03:2f:8c:4f:
                    62:51:8b:3c:5c:e8:00:7f:e7:16:cc:c2:d8:09:a4:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:37:8B:A4:5A:09:E8:42:4E:1B:13:88:51:6A:E2:A3:53:D8:D8:41
            X509v3 Authority Key Identifier:
                keyid:F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1b:c5:00:5c:2d:25:d9:15:fc:0a:63:5a:ac:39:57:a0:b6:
         7d:18:61:ad:c5:9f:9b:25:15:b4:ef:51:2f:c7:09:47:83:3b:
         74:f0:de:b2:de:7c:7c:b1:c6:03:d4:2a:97:ec:3e:2f:02:e7:
         b1:19:9a:d8:f0:ff:44:25:44:86:1c:dd:4c:9f:b4:f5:60:c6:
         10:85:18:b2:38:66:1d:38:04:6b:88:ff:55:a7:67:85:39:b7:
         b3:a1:63:8c:48:72:80:fb:67:56:15:db:e4:89:a1:cb:69:39:
         fa:d0:d9:7b:90:ea:fd:e3:c8:0c:ad:6f:8b:82:b0:d3:1e:ac:
         86:16:39:d0:77:47:7f:2d:c4:c1:c9:40:c2:52:11:93:b5:84:
         35:15:d9:26:1f:77:f9:05:23:10:66:e6:f5:a8:f9:56:54:cd:
         55:fb:72:91:40:6f:ab:51:3d:24:b3:fc:73:7e:44:33:3a:eb:
         6d:cf:f6:a0:67:7f:0b:b5:38:bf:20:ff:6f:8c:a4:a4:d3:64:
         4b:a6:e4:d0:0b:d8:7e:76:a9:ae:e8:1a:67:1b:b1:e7:c6:bd:
         7c:11:64:be:40:31:86:37:14:e8:b9:be:72:5a:e2:ce:9a:0b:
         9a:33:d4:89:89:cd:59:99:6d:b7:f7:c3:85:5d:d2:b4:f4:f8:
         6f:1d:4f:52
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBPjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
QTUxNkFGMTEwLwYDVQQFEyhGOTc2QjVEREQ0QkQzN0QwQUZGNEY2NzYzMTc2RDJF
NEM2MzUxQ0VGMB4XDTI1MDYwNjA1MTY0M1oXDTI1MDYwODA1MTY0M1owGDEWMBQG
A1UEAxMNNjg0Mjc5YmMtYzcyYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALXQB8Zxz+vdX1093AzhNr8aCmHq9CXFVWne96xO4KRpBWE/G/qz60zJ5Sth
UMfCD0MisJHQeAncW34TSh1Y8jy0Unjc1Xc9PI1vwsZrb7TSLyyrEnBh5LhtrSeW
fbsUAVL+9TBMvouhVXNVGIfdjWZI8f8mb6J2+Cps6H3Yqt/XiFstR8DwXcglpxFT
TZ/i+pUNMh74YMirIUmXXrW4Hpy4/JI9XFLtNPA29Wo8Zsm2LhCf1qhhUHAJ0P8J
zR2P7qC0Sw4UNLKaDIXeF9Ld/hgCcfrY0OvvaRorBY/xtzQvEoHygM4ho7DOSAUD
L4xPYlGLPFzoAH/nFszC2AmkSmcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTZN4uk
WgnoQk4bE4hRauKjU9jYQTAfBgNVHSMEGDAWgBT5drXd1L030K/09nYxdtLkxjUc
7zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUE1MTYvMUI5MEQ0NDQxNDc2MTFGMEJENzdDRjA5NkVCOEJDQzYvLVhhMTNk
UzlOOUN2OVBaMk1YYlM1TVkxSE84LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvLVhhMTNkUzlOOUN2OVBaMk1YYlM1TVkxSE84LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFQTUxNi8xQjkwRDQ0NDE0NzYxMUYwQkQ3N0NGMDk2RUI4
QkNDNi8tWGExM2RTOU45Q3Y5UFoyTVhiUzVNWTFITzgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKsbxQBcLSXZFfwKY1qsOVegtn0YYa3F
n5slFbTvUS/HCUeDO3Tw3rLefHyxxgPUKpfsPi8C57EZmtjw/0QlRIYc3UyftPVg
xhCFGLI4Zh04BGuI/1WnZ4U5t7OhY4xIcoD7Z1YV2+SJoctpOfrQ2XuQ6v3jyAyt
b4uCsNMerIYWOdB3R38txMHJQMJSEZO1hDUV2SYfd/kFIxBm5vWo+VZUzVX7cpFA
b6tRPSSz/HN+RDM6623P9qBnfwu1OL8g/2+MpKTTZEum5NAL2H52qa7oGmcbsefG
vXwRZL5AMYY3FOi5vnJa4s6aC5oz1ImJzVmZbbf3w4Vd0rT0+G8dT1I=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:43 2025 by rpki-client