Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
File:                     7P8kJrGvinEgph0zdg6QjBWcau8.mft (raw, json)
Hash identifier:          dqia2+fmBe3XpuvYcW1h8wms3l4QFgiAE0veFkQhSM4=
Subject key identifier:   21:51:D9:0A:86:1B:81:C4:CC:46:44:A6:32:8A:57:68:DE:B3:E9:EC
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Certificate issuer:       /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial:       0962
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
Manifest number:          095D
Signing time:             Mon 20 Oct 2025 01:24:20 +0000
Manifest this update:     Mon 20 Oct 2025 01:24:19 +0000
Manifest next update:     Wed 22 Oct 2025 01:24:19 +0000
Files and hashes:         1: 7P8kJrGvinEgph0zdg6QjBWcau8.crl (hash: yDqRYVTkXVpUGZHrR8/MIz0brpaUjHu0hZ7eT9ZGZOs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402 (0x962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AF, serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
        Validity
            Not Before: Oct 20 01:24:19 2025 GMT
            Not After : Oct 22 01:24:19 2025 GMT
        Subject: CN=68f58f44-00bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:b9:25:8c:6d:c4:ff:b7:3e:9b:a6:d0:32:
                    af:cc:bd:83:98:06:f6:9a:a6:56:94:1d:13:c9:95:
                    39:c1:5b:f1:03:aa:f2:a5:ef:f4:00:b5:64:cf:56:
                    48:a2:6e:fe:c7:77:8e:eb:57:43:e3:13:53:1f:fe:
                    f3:7c:8b:a9:dd:70:2d:ac:f4:a4:44:f8:c6:5e:f2:
                    35:b6:64:50:b0:09:27:ba:93:4a:18:99:ca:21:e2:
                    40:a6:c6:82:bc:4e:e0:bd:89:44:ed:20:58:fc:ac:
                    ad:e3:ac:6c:51:a8:d4:9b:b0:21:56:7c:4f:33:06:
                    61:5d:56:25:83:75:a9:89:83:dc:84:be:3d:96:1c:
                    ed:57:b2:10:fe:8e:bc:90:89:9d:8f:b5:f1:ee:97:
                    9c:15:9f:fc:bd:5a:93:e0:bf:2d:58:d5:21:a3:81:
                    18:c8:bc:1a:b2:a8:b6:d9:b9:e0:5a:7e:9f:47:a3:
                    ef:25:8e:50:0d:f4:26:0f:c6:55:e2:fe:c2:19:6b:
                    e9:44:29:10:6f:16:32:e5:54:3f:e7:16:b3:8e:76:
                    16:39:c3:7e:e8:a0:fc:0a:29:c0:a0:55:b3:16:b5:
                    dd:1c:4a:df:af:c4:99:a3:63:2e:d7:f0:8e:90:83:
                    81:89:16:9a:1b:5f:19:ff:c4:91:c0:d3:28:6f:03:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:51:D9:0A:86:1B:81:C4:CC:46:44:A6:32:8A:57:68:DE:B3:E9:EC
            X509v3 Authority Key Identifier:
                keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:07:8e:e0:ca:71:eb:41:d6:88:4f:15:f2:83:d9:ec:48:29:
         6f:70:2f:4d:53:a4:5a:5b:fc:e1:e9:f8:d7:c1:5e:5a:40:b0:
         cc:0b:9c:bb:67:cf:0a:c7:85:dd:5a:ce:ef:f7:5e:33:ef:fe:
         62:5a:d4:6a:06:21:93:83:49:67:67:e2:45:4d:1c:83:75:3d:
         04:13:5b:75:9f:78:16:87:de:b7:e3:34:6d:46:4d:e9:53:7a:
         51:55:a1:8a:d6:2c:a6:7d:9b:c8:8f:e9:97:41:4e:75:ed:e3:
         48:e7:ee:92:a3:e2:f6:21:c5:d8:38:95:dc:f7:28:f8:d3:14:
         9f:0a:1a:c6:8a:a5:1f:de:ea:52:16:e8:65:1d:c6:e7:83:29:
         a3:6a:92:7b:a4:f0:2d:18:8e:87:df:8c:f9:b7:56:14:18:19:
         5b:3e:5c:b8:10:16:df:59:fa:f8:ab:f4:50:80:29:c5:20:2a:
         0a:47:0b:08:80:3d:79:2f:d7:a0:84:39:c4:07:5f:00:a2:4f:
         73:6e:f0:7b:8e:b9:18:66:80:78:ba:7c:f9:e6:65:33:ef:d7:
         f3:d5:84:42:cd:40:c7:0c:d6:4a:95:1c:7c:1c:af:e6:86:69:
         75:0a:23:b8:cb:7f:44:7a:4f:c4:ac:77:62:fe:62:83:fb:38:
         5d:7c:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:38 2025 by rpki-client