Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
File:                     AIjURX5EJgLXZtupDh_CJL1-i7Y.mft (raw, json)
Hash identifier:          kbApTvvko8LH7tKFVWFt+i+oJZRw9T1QdxcY58RQlqw=
Subject key identifier:   F3:ED:73:9B:89:1D:0D:B3:0B:E0:49:9B:41:7E:02:B2:1D:B2:D4:AE
Authority key identifier: 00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6
Certificate issuer:       /CN=F3640D65AF/serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
Certificate serial:       5E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
Manifest number:          5D
Signing time:             Mon 20 Oct 2025 05:09:58 +0000
Manifest this update:     Mon 20 Oct 2025 05:09:57 +0000
Manifest next update:     Wed 22 Oct 2025 05:09:57 +0000
Files and hashes:         1: AIjURX5EJgLXZtupDh_CJL1-i7Y.crl (hash: kgqAJPLG4rKak1kbf8GvgepcBpTAFn0pHT2RgzlRswI=)
                          2: AF736D22669511F0AE6F0B7FDAE4EC9C.roa (hash: z5Q6Me8+hrh2wppVl3E0nnD4XDb7iRxKouJNGG6mdYs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640D65AF, serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
        Validity
            Not Before: Oct 20 05:09:57 2025 GMT
            Not After : Oct 22 05:09:57 2025 GMT
        Subject: CN=68f5c426-98a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:ff:d6:f5:ea:b0:f5:c2:b1:f2:48:04:68:
                    52:36:51:81:cb:c8:73:88:f4:de:ae:48:7e:05:2d:
                    30:b2:c3:e9:1e:49:56:93:30:90:3e:5b:95:ca:07:
                    f5:f9:6e:89:b7:8a:57:b3:19:84:21:52:48:c9:10:
                    1d:75:93:b4:82:7a:9d:a0:6e:2c:d2:56:83:23:4e:
                    58:a6:37:4e:b2:c5:f3:92:ca:23:40:3e:58:49:35:
                    dc:01:66:43:15:1c:d5:d7:d1:f8:0d:8d:83:4f:ac:
                    5f:bb:04:f8:79:f7:86:b4:da:97:b2:84:e6:5c:47:
                    33:ab:f8:b7:d6:b1:96:d3:5a:38:32:c8:61:0d:bd:
                    da:8b:bb:33:63:57:8e:25:db:85:0d:08:cf:5d:10:
                    54:69:ed:7f:68:0f:f3:87:b8:60:d6:9a:fa:66:3b:
                    87:84:81:6f:e3:66:95:af:25:08:06:05:24:dc:58:
                    49:28:83:7d:77:b0:57:2a:a4:ef:42:1a:b1:ca:f4:
                    82:33:3e:72:10:28:47:36:56:92:b2:b7:15:94:c7:
                    a6:86:d3:9f:6a:f5:9e:69:f3:43:e4:1f:39:97:88:
                    f2:ea:60:6d:5c:9b:cb:8a:be:17:53:e8:9c:e4:9a:
                    20:e3:e7:35:3d:29:4f:58:4a:97:a6:ab:bd:09:3b:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:ED:73:9B:89:1D:0D:B3:0B:E0:49:9B:41:7E:02:B2:1D:B2:D4:AE
            X509v3 Authority Key Identifier:
                keyid:00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:e6:b7:4c:c7:04:d9:32:69:e1:c2:8c:b1:df:e3:b0:09:53:
         f5:b8:94:a9:68:f1:9c:c6:81:98:1b:09:b6:05:06:7c:aa:f0:
         96:aa:78:f6:50:21:76:a9:1a:6d:66:da:8c:2f:a2:14:5d:c9:
         d8:62:f7:cc:c3:62:fd:ee:27:db:1a:eb:e9:83:72:bd:6d:3c:
         d0:fa:6b:4b:e3:a3:ed:a5:3f:1b:28:cd:77:f5:db:e6:7a:80:
         9b:8d:c5:50:a1:2a:b5:78:d5:33:a9:30:79:30:0a:0f:e5:56:
         21:5e:54:57:3e:5e:57:cf:43:44:b6:5b:33:d4:1b:eb:60:0b:
         3f:f0:27:88:d4:c0:af:6c:14:f8:58:cd:6c:ed:31:89:c3:03:
         58:7a:86:2c:6e:e6:24:54:4a:f0:e9:f9:c2:f6:75:3c:f1:53:
         ea:ff:66:3c:47:d1:2e:9d:da:7b:27:ca:09:2b:bf:67:63:99:
         5a:5a:55:85:dd:2a:07:ac:8e:53:6e:8f:4c:8e:96:01:29:4e:
         67:e5:d2:71:02:11:14:3a:49:59:81:52:d3:fc:e9:63:59:be:
         60:20:b5:29:61:d5:d5:3d:e3:be:59:00:80:68:6e:71:c3:2d:
         dc:95:65:8e:c9:5f:36:52:3e:ec:81:38:10:e8:06:32:89:f9:
         65:0b:b9:1e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBXjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MEQ2NUFGMTEwLwYDVQQFEygwMDg4RDQ0NTdFNDQyNjAyRDc2NkRCQTkwRTFGQzIy
NEJEN0U4QkI2MB4XDTI1MTAyMDA1MDk1N1oXDTI1MTAyMjA1MDk1N1owGDEWMBQG
A1UEAxMNNjhmNWM0MjYtOThhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKGJ/9b16rD1wrHySARoUjZRgcvIc4j03q5IfgUtMLLD6R5JVpMwkD5blcoH
9fluibeKV7MZhCFSSMkQHXWTtIJ6naBuLNJWgyNOWKY3TrLF85LKI0A+WEk13AFm
QxUc1dfR+A2Ng0+sX7sE+Hn3hrTal7KE5lxHM6v4t9axltNaODLIYQ292ou7M2NX
jiXbhQ0Iz10QVGntf2gP84e4YNaa+mY7h4SBb+Nmla8lCAYFJNxYSSiDfXewVyqk
70Iascr0gjM+chAoRzZWkrK3FZTHpobTn2r1nmnzQ+QfOZeI8upgbVyby4q+F1Po
nOSaIOPnNT0pT1hKl6arvQk7vUUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTz7XOb
iR0NswvgSZtBfgKyHbLUrjAfBgNVHSMEGDAWgBQAiNRFfkQmAtdm26kOH8IkvX6L
tjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDBENjUvRDZFN0RFNzI2NjkyMTFGMEIyMzZEQkVCREFFNEVDOUMvQUlqVVJY
NUVKZ0xYWnR1cERoX0NKTDEtaTdZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQUlqVVJYNUVKZ0xYWnR1cERoX0NKTDEtaTdZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MEQ2NS9ENkU3REU3MjY2OTIxMUYwQjIzNkRCRUJEQUU0
RUM5Qy9BSWpVUlg1RUpnTFhadHVwRGhfQ0pMMS1pN1kubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAOPmt0zHBNkyaeHCjLHf47AJU/W4lKlo
8ZzGgZgbCbYFBnyq8JaqePZQIXapGm1m2owvohRdydhi98zDYv3uJ9sa6+mDcr1t
PND6a0vjo+2lPxsozXf12+Z6gJuNxVChKrV41TOpMHkwCg/lViFeVFc+XlfPQ0S2
WzPUG+tgCz/wJ4jUwK9sFPhYzWztMYnDA1h6hixu5iRUSvDp+cL2dTzxU+r/ZjxH
0S6d2nsnygkrv2djmVpaVYXdKgesjlNuj0yOlgEpTmfl0nECERQ6SVmBUtP86WNZ
vmAgtSlh1dU9475ZAIBobnHDLdyVZY7JXzZSPuyBOBDoBjKJ+WULuR4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:29 2025 by rpki-client