Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          N1BrDLhp8XGzXtsR0FYOaeNWkdIGGXLJa2zqu5BJtTg=
Subject key identifier:   AE:E8:B4:28:04:68:28:F8:76:4B:92:BE:1D:9E:9D:EF:45:F9:8D:09
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       037C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          037B
Signing time:             Mon 20 Oct 2025 03:33:34 +0000
Manifest this update:     Mon 20 Oct 2025 03:33:34 +0000
Manifest next update:     Wed 22 Oct 2025 03:33:34 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: dqZXlZ/7RQbLK/GMUtzceDpHBBJwb7ZjHpKsVLM2aoQ=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: Oct 20 03:33:34 2025 GMT
            Not After : Oct 22 03:33:34 2025 GMT
        Subject: CN=68f5ad8e-c1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:76:2a:69:18:39:db:fa:47:cc:af:85:fb:
                    f7:26:a5:52:6c:89:fe:82:4e:b6:78:9a:18:cb:1a:
                    1e:aa:a8:9a:49:f9:ea:f5:ea:c3:c9:9a:65:b3:2a:
                    38:7f:2f:cb:f4:b5:99:e9:00:56:79:00:d4:33:a9:
                    7e:0b:22:1f:3d:6c:e5:1a:9d:04:f0:77:75:62:73:
                    1e:e0:27:6d:3f:cd:4a:80:53:8f:75:f7:8a:00:7f:
                    ec:7d:7c:a0:1c:a6:ab:fd:69:95:23:f2:eb:a2:2c:
                    19:d0:67:0d:22:32:1c:1e:d3:a6:7e:ca:95:f5:a3:
                    79:ff:89:15:90:66:61:d7:a5:6a:9e:7f:82:e9:b4:
                    93:d1:81:b5:4e:b8:8d:ab:ab:5b:37:63:ce:97:1d:
                    16:98:da:f1:74:f6:ee:02:3b:0d:c3:88:f6:77:b9:
                    7a:e3:cb:32:0e:e8:6d:e6:bb:e7:9c:ed:4b:62:e4:
                    f6:0c:38:dc:ce:24:b5:1a:d7:1e:d1:bc:08:ec:f8:
                    8e:96:ef:3a:b3:a4:c0:dd:26:3d:3f:d4:6f:de:b7:
                    f5:4b:2f:b0:d9:31:f6:f4:70:be:06:fa:b3:b8:70:
                    f3:7b:a9:59:96:82:d8:6d:d2:cc:1e:8a:f5:d1:c3:
                    d2:ee:6b:6c:dc:08:dd:ff:5b:5a:d9:07:16:99:fb:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E8:B4:28:04:68:28:F8:76:4B:92:BE:1D:9E:9D:EF:45:F9:8D:09
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:bd:18:97:0f:57:2a:c4:dc:4c:3a:7c:69:b8:cf:fb:5b:
         c2:26:b9:c7:e5:1e:42:8f:03:a6:f1:88:34:5c:6f:6d:37:c1:
         b5:ff:a3:ee:47:51:03:21:5b:62:29:4b:e7:f1:ab:1d:6d:4d:
         27:e1:00:e0:9e:43:cf:ef:47:82:60:f1:d8:35:05:85:f9:f0:
         d2:7c:9d:7a:6d:a4:55:c9:15:f0:05:12:d8:73:25:18:76:20:
         77:02:ba:1c:22:48:de:5d:5a:49:b8:5c:fa:80:c6:9a:59:d2:
         a8:4a:3c:f1:c5:76:70:9c:9a:c5:99:43:54:44:05:1f:4b:2f:
         11:49:5f:ba:e1:d1:93:7a:cd:a3:36:1e:be:67:d6:62:db:bd:
         e7:51:64:df:24:b2:5b:4e:6a:2b:5d:3e:66:07:1c:7a:6c:0c:
         f3:30:7e:0d:b3:05:5b:ff:4b:87:3c:f4:66:c8:75:37:4b:40:
         c0:89:0c:27:44:b7:24:7b:68:b7:2f:31:79:0c:b0:e3:e3:0a:
         ae:79:c9:9b:eb:d1:a5:f4:59:59:22:78:d5:88:44:53:9e:24:
         60:d3:fc:1d:4d:df:5f:3d:cf:a1:67:e1:9c:38:1f:58:f6:a7:
         f1:17:9d:30:1f:c4:1d:37:76:00:70:50:26:9a:85:6f:7a:39:
         71:af:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:27:06 2025 by rpki-client