Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
File:                     AfVtzr_vO4iPtcCITF0ZFyWORaM.mft (raw, json)
Hash identifier:          w8mBee4P5AR+RMKCf304pMgMdYiZFzbYGxqySDYrz6Y=
Subject key identifier:   41:77:A9:C0:6C:2C:DC:0A:94:64:91:26:E3:33:5F:5B:54:F2:42:ED
Authority key identifier: 01:F5:6D:CE:BF:EF:3B:88:8F:B5:C0:88:4C:5D:19:17:25:8E:45:A3
Certificate issuer:       /CN=F362D276AF/serialNumber=01F56DCEBFEF3B888FB5C0884C5D1917258E45A3
Certificate serial:       011A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
Manifest number:          0119
Signing time:             Sun 29 Jun 2025 04:57:53 +0000
Manifest this update:     Sun 29 Jun 2025 04:57:53 +0000
Manifest next update:     Tue 01 Jul 2025 04:57:53 +0000
Files and hashes:         1: AfVtzr_vO4iPtcCITF0ZFyWORaM.crl (hash: iDy+MkzRrj4AIl2oui4P+WbXZ2oDxuhzKyLLSazb0Ls=)
                          2: 44B4293280DA11EF82CAAF8B762E951A.roa (hash: JpEuKkjfhV0QAzt6LDFVNnb+azEcOUEfekHUP5VBwUI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D276AF, serialNumber=01F56DCEBFEF3B888FB5C0884C5D1917258E45A3
        Validity
            Not Before: Jun 29 04:57:53 2025 GMT
            Not After : Jul  1 04:57:53 2025 GMT
        Subject: CN=6860c7d1-199e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:36:85:c3:22:41:2e:b8:6e:ae:20:f0:cc:
                    6e:42:b1:74:5f:71:43:76:16:b0:8b:47:c4:c1:29:
                    29:ba:dc:43:43:d9:7f:27:f4:7c:4c:c1:6a:90:fd:
                    c9:4f:1b:43:ec:cc:14:bf:89:a8:19:bf:ac:a7:c6:
                    f3:32:b4:52:5c:a7:a7:9a:70:4e:4a:11:30:d2:08:
                    c4:c4:17:bf:19:92:46:6b:9d:3e:bc:a4:d8:d4:e2:
                    d5:fa:9b:73:93:24:ed:44:7a:6c:43:44:84:14:b1:
                    a5:75:b9:18:1e:c4:3e:d0:b1:9d:a2:6b:94:36:f1:
                    ed:7e:26:dd:04:15:f2:ed:12:5e:4a:32:ff:48:46:
                    d9:be:d0:49:62:08:0c:26:52:2c:8a:a5:c5:5b:e8:
                    b7:49:4a:0e:8e:7a:ad:91:37:7e:81:5b:41:38:d3:
                    14:58:f2:74:e4:fa:d1:fc:2f:14:eb:56:3c:97:94:
                    bc:53:7b:82:f6:bc:b3:ab:4d:61:77:99:93:8c:d5:
                    8e:82:b6:95:2e:6e:f1:a0:2e:c3:46:95:ad:a3:06:
                    43:07:3e:12:c9:01:a4:00:1c:b5:17:25:29:62:7f:
                    41:4a:b1:97:09:a1:62:21:01:d7:21:45:53:fd:49:
                    5a:32:30:37:88:9e:5d:c7:ad:c4:09:5f:20:d9:f2:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:77:A9:C0:6C:2C:DC:0A:94:64:91:26:E3:33:5F:5B:54:F2:42:ED
            X509v3 Authority Key Identifier:
                keyid:01:F5:6D:CE:BF:EF:3B:88:8F:B5:C0:88:4C:5D:19:17:25:8E:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:d8:89:b1:11:a6:ee:79:d3:b1:c9:60:e4:ae:99:c0:94:
         80:78:38:4d:db:af:5a:22:6f:9d:75:af:54:5f:52:72:28:a0:
         04:79:f4:23:4e:14:44:a7:2a:1b:4c:b1:04:9a:7f:cd:b8:bd:
         ff:b5:d2:ea:5a:37:81:e2:56:a7:87:80:1c:df:d8:71:3d:5b:
         ed:e3:31:2d:38:05:36:23:a9:02:73:12:ff:c6:ce:74:d9:b4:
         77:81:07:09:e9:70:a3:01:13:f6:79:fe:5a:f2:ef:8e:f4:02:
         bd:4f:f0:7c:c9:02:99:38:e0:52:f2:27:43:1b:5a:39:2a:62:
         9d:6b:3b:23:26:89:d3:a1:7d:99:62:b5:d6:00:80:11:62:e8:
         ec:1b:81:b2:a6:65:bf:7e:41:d5:7d:de:e6:0d:70:ad:9e:e7:
         2b:ca:cd:18:12:ff:24:0e:aa:d4:cb:00:2b:c5:09:10:dd:7f:
         19:68:54:84:b6:3e:0a:54:04:e1:c3:2d:49:4f:42:8c:59:56:
         8e:22:34:a4:be:85:d0:e7:82:f4:5e:8e:08:96:f4:7c:c2:48:
         1d:03:6a:ca:4b:9e:75:dd:5b:d4:38:0e:b0:0c:cf:ca:b9:f6:
         d8:5d:c8:cb:1b:f0:83:c7:6f:c2:d1:76:b5:e3:e1:a2:1d:4a:
         38:fc:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:06:22 2025 by rpki-client