Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
File:                     3Y7gOV77NMQJjlduH6lWEvCuEIw.mft (raw, json)
Hash identifier:          /ZbucL0D28Zt7lv8mYa1FzhmIzHloIdn5O0tZD+Rp1c=
Subject key identifier:   09:56:C7:7F:4E:ED:55:A7:94:3D:3F:C3:5C:36:26:FA:44:60:97:96
Authority key identifier: DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C
Certificate issuer:       /CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
Certificate serial:       0217
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
Manifest number:          0213
Signing time:             Thu 31 Jul 2025 04:32:33 +0000
Manifest this update:     Thu 31 Jul 2025 04:32:32 +0000
Manifest next update:     Sat 02 Aug 2025 04:32:32 +0000
Files and hashes:         1: 3Y7gOV77NMQJjlduH6lWEvCuEIw.crl (hash: gHOjwDwxEN+xe68rIaAkrCy80qOxxKlyxQK7qrLGegY=)
                          2: 41ED69D60D1511EFA8396400017001B1.roa (hash: x3aVslqCzMfioshN80Dla6JteewrsmH2GjIbIFA+j2M=)
                          3: 1A07CB8EDBEA11EEA45EFA81775412E6.roa (hash: Pkjs2jgzXCv29HKkqLFfvU1IeY4hITiyODVD/2YyWlE=)
                          4: A07BB004DBEA11EE8E03CC82775412E6.roa (hash: 5FeX+dqvUeIECgzm38Ru/fnBhkIsH4lq/tNWx1MCZM8=)
                          5: 6B9CD7800D1511EFB6A61201017001B1.roa (hash: ssvUYk5x0OzQ7Q0Xp7UErygVy3MmZIG7nazU7zgnCUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE14CAF, serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
        Validity
            Not Before: Jul 31 04:32:32 2025 GMT
            Not After : Aug  2 04:32:32 2025 GMT
        Subject: CN=688af1e1-356d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:35:ca:4a:82:21:4f:8d:9e:bc:86:44:cc:
                    11:32:1b:8b:d7:27:b6:d6:1d:4d:9f:6e:a5:26:61:
                    3b:36:53:65:04:bb:cd:cf:5b:17:2e:b8:ec:d7:7f:
                    b5:1d:0e:3f:f3:58:a6:7a:fa:e6:7c:2f:b3:90:d8:
                    45:60:5b:e7:45:fc:4e:43:11:5e:51:db:f2:99:f6:
                    b6:69:d9:a3:b1:a5:3e:01:c2:23:89:40:dc:f6:92:
                    50:11:d4:a5:3d:35:af:03:08:dc:cd:d3:f4:16:71:
                    40:5a:dd:81:77:41:9c:56:9c:3d:c7:56:4a:c9:19:
                    47:f9:e4:96:5e:4b:57:bd:e0:9a:c5:c6:1a:45:9a:
                    9c:0f:fc:56:33:36:60:56:d0:00:5d:37:33:a9:cd:
                    c3:cd:c5:71:ef:c8:90:00:31:67:43:0d:f5:a8:94:
                    a0:a7:12:f8:9b:6f:74:47:6b:e7:37:89:ca:8d:e0:
                    35:3e:51:8b:60:33:09:3b:f9:fc:a9:73:ef:11:cc:
                    1c:80:eb:e8:91:6a:ac:bf:93:f3:18:48:b3:de:0c:
                    4a:07:46:4f:e6:57:af:31:8a:d8:be:a0:37:2f:46:
                    58:d2:84:b9:86:9a:fb:df:f7:23:45:b2:23:45:12:
                    a2:7c:9e:34:c3:58:d0:6e:4d:79:c8:be:be:34:e8:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:56:C7:7F:4E:ED:55:A7:94:3D:3F:C3:5C:36:26:FA:44:60:97:96
            X509v3 Authority Key Identifier:
                keyid:DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:0f:5c:b9:05:de:1c:25:25:7a:7e:db:1f:40:57:92:6e:
         6f:cd:9c:10:8a:14:4d:de:9b:7e:b2:b9:13:f4:09:aa:f5:0a:
         71:ba:db:57:e5:35:00:06:73:be:54:df:32:fb:c9:3e:5b:c0:
         3f:67:18:1b:11:f6:a5:97:93:58:c7:41:44:8e:71:b1:8d:64:
         7a:94:0a:c6:db:14:5e:d0:84:0b:49:3e:70:4e:08:88:b2:4e:
         09:ea:91:a6:0e:f7:e2:e0:d3:41:79:59:01:de:3d:a6:91:dd:
         4e:b9:ce:02:5f:90:c9:63:36:7b:c5:de:fb:3a:ee:54:fa:84:
         dc:17:36:c5:a9:ee:7b:09:50:91:e5:c5:7a:6e:a4:55:d8:d3:
         9c:09:f1:10:41:ad:ad:81:bc:36:2b:b7:bf:91:72:1e:e8:dd:
         8e:4b:53:71:27:ba:51:d1:bc:86:7a:ef:31:10:92:01:34:f1:
         71:e9:99:f9:e9:23:b3:53:ee:57:c6:95:7b:ce:1b:25:46:58:
         05:40:2e:eb:a0:52:10:17:06:95:18:3d:77:96:18:84:20:93:
         e7:ea:ea:b4:9b:07:52:1b:51:b9:9b:66:db:db:81:ca:00:3c:
         39:55:4c:bc:25:fd:45:1b:14:59:cd:11:82:7d:46:b7:e2:26:
         02:a2:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:33 2025 by rpki-client