Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
File:                     SbTWGQldlDKvZGCFPhR7710cSLA.mft (raw, json)
Hash identifier:          +3K/ZyPhdhHIrWq4cBf0dPtHtH/QeGjtt0uh/rEaBsU=
Subject key identifier:   0A:57:E3:11:E5:53:41:C4:5E:02:B9:75:7B:5B:90:31:5A:7B:C3:BD
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
Manifest number:          B8
Signing time:             Mon 20 Oct 2025 05:00:29 +0000
Manifest this update:     Mon 20 Oct 2025 05:00:28 +0000
Manifest next update:     Wed 22 Oct 2025 05:00:28 +0000
Files and hashes:         1: SbTWGQldlDKvZGCFPhR7710cSLA.crl (hash: HgTIIlbCbUGN+MD0dZIJWSNM3mvYuVmRxLIbVZd1R4s=)
                          2: 5CCD6440299D11F0AD38AFE3DAE4EC9C.roa (hash: v4mhR83sjeZ2vAC+mHBy4f+8KOxUX5jeOYSaA7j55RU=)
                          3: A16D1040299E11F0A0371BECDAE4EC9C.roa (hash: ZIN6qTu+myOk/8/Xm5JH6ilbBdHCnz+M7KKnKepnBtM=)
                          4: 61D2FD9229B111F0B5081FE6DAE4EC9C.roa (hash: Brop1ncWpX/uNNO0gkigSNxXGhoMQh9wWM/lUreXu7I=)
                          5: 1B78052229B111F0A88218E6DAE4EC9C.roa (hash: lTtW4+RgQEGUJjKPbZNiHvs7ergbcAvfTNYM91hQFPM=)
                          6: 4C7A7612299A11F0B84321CFDAE4EC9C.roa (hash: Nlw1hIVnnrnHZycVHji07xpZ7hIoViBxXu2uxKW1+Ms=)
                          7: E383333E299D11F0A8FCB4E5DAE4EC9C.roa (hash: WNjVtEQEJnEB14WwlXqxjZdHQ29UrTDBkSgpJfcS8fE=)
                          8: 8B97C97C29B211F0BE9210EFDAE4EC9C.roa (hash: YWliehZSLVKOUVOtFDH1Zw4P9bTGn6VPsgJOpr2PpdI=)
                          9: C5A5AC4229B211F0881C16EFDAE4EC9C.roa (hash: 2J30cLTQTWAiY7lgicRA7cWnsPM0f3v7LmXj0giF2nM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Oct 20 05:00:28 2025 GMT
            Not After : Oct 22 05:00:28 2025 GMT
        Subject: CN=68f5c1ed-d7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:d7:4c:c4:6f:e5:35:05:38:0e:14:9c:38:
                    ed:7c:e6:6e:eb:c1:fb:ee:f8:90:c2:59:0e:36:6a:
                    e8:78:a4:5d:cd:0b:9d:67:94:fe:f3:1b:5a:27:78:
                    ad:ee:cf:a7:84:48:a5:44:32:1d:8d:0b:3d:24:7d:
                    27:76:f6:78:cd:24:9f:b6:60:0f:35:db:f2:9d:6d:
                    d7:ce:05:da:3c:17:64:9e:7c:9a:00:12:f6:17:aa:
                    68:ef:03:9d:17:0f:3d:76:7f:8e:37:61:72:a9:c8:
                    6f:94:b6:41:e8:3a:bd:b7:2a:1e:6e:c0:6e:c6:80:
                    69:ba:a3:b7:a7:49:18:b5:f7:73:0a:7c:90:a5:8b:
                    73:2a:16:1a:5a:98:ff:12:9c:ea:c3:73:fa:f9:ac:
                    75:47:3e:56:00:ab:81:87:fa:75:8c:84:88:10:ea:
                    88:e7:e6:f6:b4:3d:6b:bc:af:d5:ce:fb:b9:53:cd:
                    7a:58:5a:be:98:36:44:1f:74:70:b0:ed:65:6b:6b:
                    6d:af:63:cf:cd:25:9e:da:52:40:20:c3:3e:02:c0:
                    7a:18:5b:3d:0e:8e:87:e7:ce:48:90:aa:57:f9:55:
                    de:45:99:72:88:20:51:87:2b:b1:53:ab:c2:28:2e:
                    42:10:6d:4f:1a:66:15:72:9a:2c:05:45:61:8b:53:
                    19:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:E3:11:E5:53:41:C4:5E:02:B9:75:7B:5B:90:31:5A:7B:C3:BD
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:e6:2c:a2:4e:98:af:ea:95:73:d9:ca:06:ad:40:00:bb:
         57:8a:e1:5b:a8:68:fd:5e:1a:d8:4c:dc:4a:42:6d:64:41:75:
         b7:68:9c:38:7d:6f:d2:78:23:55:ea:5b:b6:e3:8e:aa:30:e6:
         09:1d:25:dd:a8:78:8a:ce:7a:86:8f:be:44:5d:49:39:22:63:
         bd:d2:31:c3:02:32:e7:72:2b:f2:e3:95:02:1e:f7:9a:b8:14:
         42:96:ec:d8:77:aa:94:cf:b6:3c:57:6c:07:49:29:e9:b3:e3:
         52:ec:0b:0d:c8:6e:6b:ed:4e:02:d1:15:fe:c2:72:4c:f4:89:
         d7:30:70:25:88:83:42:8e:c2:70:cf:e0:ba:21:c8:e2:ff:36:
         35:5c:ea:ce:e0:69:8b:da:90:39:47:af:85:3a:27:21:10:c5:
         a1:99:11:40:3b:be:dd:f2:a5:2a:66:dd:89:f9:76:56:ea:e4:
         75:7d:9f:ee:4c:21:ba:83:bc:65:ab:4e:9d:1b:02:80:72:97:
         21:f2:19:bd:ef:80:5a:ed:b9:fc:53:d1:1f:61:e2:34:44:c0:
         03:28:8c:c5:64:ef:6e:f6:b8:81:aa:94:5f:c3:51:8c:db:33:
         f4:88:c7:98:fa:0e:d6:4a:7c:60:8a:18:3a:31:2f:44:81:35:
         32:30:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:36:34 2025 by rpki-client