Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          k4fFzSHJfLkMAslUC6mh5pc9GseOjZNqkNLvbQ2zJTI=
Subject key identifier:   45:89:70:B7:82:8A:E1:6E:48:8A:ED:AC:78:D2:C6:35:6D:85:40:06
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       0403
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          0402
Signing time:             Sat 07 Jun 2025 03:16:08 +0000
Manifest this update:     Sat 07 Jun 2025 03:16:07 +0000
Manifest next update:     Mon 09 Jun 2025 03:16:07 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: QJbHNL4Ysb2qaKyWghWFpQNCoKgCI1COuZHV8j1i2B4=)
                          2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Jun  7 03:16:07 2025 GMT
            Not After : Jun  9 03:16:07 2025 GMT
        Subject: CN=6843aef8-923e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:c3:84:b1:89:44:f2:f6:8c:c9:19:6f:43:
                    2e:66:41:b1:20:bb:ac:3a:54:37:30:2a:21:09:4e:
                    a5:c8:54:ac:04:75:bd:ee:86:60:e0:f5:fd:b6:c8:
                    cd:fd:db:77:a9:f2:1c:23:af:22:53:a6:de:67:39:
                    c5:a0:3d:37:c6:5c:d5:58:fa:e4:57:10:d5:4c:a7:
                    c2:34:4b:00:1c:14:76:b2:0e:0d:40:81:c9:43:a5:
                    2a:e2:94:28:96:c1:1a:d9:3d:b4:68:9b:e7:11:12:
                    ab:d7:f9:9d:11:9e:38:d3:3a:7a:90:d8:2e:0b:7c:
                    5c:0d:03:0e:c5:c3:c4:07:7d:66:92:62:20:e5:94:
                    db:86:95:08:51:79:87:41:f0:38:bb:80:ee:9b:bc:
                    46:ea:96:6a:f4:2c:eb:60:5c:9c:ae:d8:39:29:de:
                    7f:49:23:c2:6b:37:e0:33:22:1c:3b:72:2f:9c:36:
                    cc:f8:45:1a:b9:8d:aa:e2:9f:5d:0d:12:67:fe:d5:
                    32:30:76:19:ed:96:30:76:80:22:b9:be:3b:ef:41:
                    04:57:35:bf:13:4d:9d:3e:51:c1:3c:b7:b1:ca:04:
                    7f:77:b4:35:f8:b5:be:aa:cc:88:aa:19:e3:ea:87:
                    1e:3d:8e:b3:7b:38:dd:8d:9e:b1:87:22:78:d1:7d:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:89:70:B7:82:8A:E1:6E:48:8A:ED:AC:78:D2:C6:35:6D:85:40:06
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:42:05:75:1d:30:58:ce:9f:69:25:a3:84:cb:3e:a9:fd:24:
         76:9f:c4:27:1e:fe:26:e7:95:d7:bf:51:48:df:00:53:da:1d:
         cc:dd:7e:31:67:c8:86:d9:fc:b1:73:ad:65:20:dd:ce:3e:66:
         cc:d5:aa:67:fd:b2:90:ad:41:b6:53:3e:25:84:68:4e:b2:8c:
         ff:e7:84:63:9d:d6:0c:29:36:14:30:60:8a:01:d9:69:ae:0c:
         0a:d3:1f:35:0e:19:c8:eb:b4:85:ad:bd:fe:36:d9:c7:ab:7b:
         31:5e:46:9c:1c:c0:69:a6:d0:ae:1c:77:32:27:4a:96:d4:13:
         df:64:78:92:97:b8:15:07:b7:fe:a7:66:54:a7:d1:3c:bb:54:
         cb:16:ae:fd:fd:5d:8b:a8:ce:b6:e7:6f:da:eb:ff:c1:d1:17:
         18:0c:e1:92:c8:67:9a:8a:3c:22:d7:ef:e1:d2:1c:af:ae:33:
         94:60:5c:6b:04:f8:29:91:ad:9c:48:9d:89:4a:18:fc:22:59:
         e8:3c:ba:fe:47:6a:1d:f9:80:51:b3:5d:31:a5:a5:fd:e2:c0:
         e7:ef:59:8f:00:cd:19:65:e7:eb:7b:2c:e7:94:53:83:c9:41:
         55:ad:15:33:5c:bd:df:6c:ff:d2:0b:8b:25:4a:40:09:09:05:
         b3:f9:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:21 2025 by rpki-client