Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
File:                     1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft (raw, json)
Hash identifier:          1IDZveZNocR9Zg8S/McNzj216DUHw/cu2nLg+S6SsOg=
Subject key identifier:   C0:AF:E1:B6:F3:8D:4D:74:6A:38:57:65:F7:97:75:EC:78:E0:33:27
Authority key identifier: D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10
Certificate issuer:       /CN=F363E214AF/serialNumber=D5B8FA3AAD406962EFAACADF0002A1CCEF84B610
Certificate serial:       0965
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
Manifest number:          0962
Signing time:             Mon 20 Oct 2025 01:22:25 +0000
Manifest this update:     Mon 20 Oct 2025 01:22:25 +0000
Manifest next update:     Wed 22 Oct 2025 01:22:25 +0000
Files and hashes:         1: 1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl (hash: oYTEEvVenKR+FXRPxZ8eocwnkVKQkK1PPweL/cfG8cE=)
                          2: 3ACCA76E7D4D11E9BA82FB71F8AEA228.roa (hash: yC1yqZLK/mn5O8oPUPstRFKqoZMenamr5HvhnVgkq2M=)
                          3: 7B80003A7D4D11E98C653A72F8AEA228.roa (hash: Pf4+vucLWS0+RlRnSnEIXgYSOdRPDXw0o293VLaPD8U=)
                          4: ECE818207D4D11E9ACBE8A72F8AEA228.roa (hash: lFX/K+uRha67tPuzFLrmfgCjnGBWbSFiv83qQNOXpEo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E214AF, serialNumber=D5B8FA3AAD406962EFAACADF0002A1CCEF84B610
        Validity
            Not Before: Oct 20 01:22:25 2025 GMT
            Not After : Oct 22 01:22:25 2025 GMT
        Subject: CN=68f58ed1-5ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:ab:e3:59:c1:32:27:8c:df:2c:07:80:21:
                    01:ed:03:52:8c:d2:82:55:9a:4e:e6:89:a4:47:96:
                    4f:23:52:a1:96:05:4f:0f:19:51:ba:a8:92:b0:be:
                    c6:6c:bf:e6:37:ff:1f:cd:89:5d:31:f5:66:c2:b5:
                    d8:f3:29:e5:da:41:cc:f0:40:4e:86:9f:29:c8:71:
                    83:e8:d6:68:7a:ca:02:1b:e1:e4:8f:df:75:7b:84:
                    00:5e:b0:83:04:83:fe:55:0e:74:ed:20:c0:54:c2:
                    99:25:6b:f5:47:69:c9:2a:93:2a:62:77:71:ec:15:
                    e4:7f:1e:2f:4e:7d:4d:a9:a1:e7:05:fb:fe:2b:ae:
                    d0:7b:9d:ff:82:0c:6c:f8:84:33:c4:25:5e:4d:aa:
                    ad:1f:92:f9:01:1c:18:f2:22:68:d8:02:42:95:1d:
                    91:09:89:30:ec:99:f3:5b:31:2c:de:b6:d0:10:c0:
                    6a:ea:e8:47:b2:c5:cf:66:e4:6c:fe:32:14:de:37:
                    78:bc:ef:a7:4c:28:e3:7e:a3:5e:65:74:5f:56:cf:
                    e4:ad:68:2f:51:87:b8:5f:be:63:32:eb:f6:b7:a8:
                    a9:3b:47:cd:c1:d3:37:9e:3b:a6:d7:1b:74:53:5e:
                    fe:2e:54:d0:d4:66:d5:be:d9:44:70:ed:a1:97:12:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AF:E1:B6:F3:8D:4D:74:6A:38:57:65:F7:97:75:EC:78:E0:33:27
            X509v3 Authority Key Identifier:
                keyid:D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7b:92:aa:b6:20:a1:da:c2:1e:e8:04:82:f7:df:d9:a3:82:
         31:9b:6a:04:ca:9c:51:2d:43:1e:6f:ae:d1:36:6d:57:d5:c7:
         0e:9b:f9:0b:c8:dd:9b:f1:fe:f5:a4:ee:d4:42:ae:3f:22:93:
         0c:e8:f1:42:7d:80:56:9d:f0:88:e9:00:f3:1d:e8:be:6c:1f:
         e6:b5:8f:3a:78:de:97:ae:b0:37:43:64:69:14:d6:4d:e6:29:
         a9:9c:5c:b1:cd:27:21:d8:af:bc:a2:7b:67:45:d3:12:62:80:
         e5:4f:da:90:f2:04:47:38:a6:ac:35:bf:7e:0c:5b:b6:fa:2d:
         0e:fb:1e:85:94:a6:b3:f6:2f:25:b1:aa:44:00:d9:d9:f1:ac:
         8f:7b:11:91:bc:cf:55:d3:1e:4c:f4:6e:82:91:64:e0:8e:a5:
         c1:53:ed:18:2b:17:54:3c:18:80:90:b5:f6:7a:3c:a6:27:10:
         b5:3a:f4:76:e8:e8:70:60:bb:28:bd:4c:a7:25:d7:71:bf:7e:
         46:3c:fd:85:18:f8:87:33:b0:44:cd:8c:6f:c0:04:a6:d9:2c:
         f5:a0:51:48:db:1b:9d:e1:84:26:c6:e4:89:4d:88:60:cf:03:
         c3:b5:32:80:82:50:89:d9:ca:98:59:bb:40:4e:06:c7:7e:66:
         59:46:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:30 2025 by rpki-client