Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
File:                     IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft (raw, json)
Hash identifier:          3DMWhQ8za1/1G/3BJXvdIjNYNxNcTCV0ObdybXh1z1A=
Subject key identifier:   67:35:0C:E1:09:C9:E9:33:0D:8A:88:6D:78:25:6B:3D:91:AA:50:DC
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       04F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
Manifest number:          04EF
Signing time:             Mon 20 Oct 2025 02:51:16 +0000
Manifest this update:     Mon 20 Oct 2025 02:51:15 +0000
Manifest next update:     Wed 22 Oct 2025 02:51:15 +0000
Files and hashes:         1: IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl (hash: 1sNq4wR5KsOoar+1Z5C8LcLJ3RjrZ91+XvX6rbSf4vI=)
                          2: 2AE6A618901511ED97E821A8F1222468.roa (hash: l6cBhURgmoDE6HHZxn6Sr3D0gRmA3gv1jsIUfHqy/fE=)
                          3: 341444A4EE0611ECA47D4F8CF1222468.roa (hash: 5YbdNBfbmz1C6LgL/EGyM06dpl98H6mogKseSBeoHI4=)
                          4: E33731DE901411ED873666A7F1222468.roa (hash: DQCVLS0+9ICNcSNGa3FetGyRMxihYZeODa4YHrZFCDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Oct 20 02:51:15 2025 GMT
            Not After : Oct 22 02:51:15 2025 GMT
        Subject: CN=68f5a3a3-1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:e3:3f:1e:eb:5b:50:5d:0f:fa:e2:30:e7:
                    24:55:4d:5d:0e:b8:41:04:ca:9a:08:4e:0c:b5:6f:
                    04:b5:40:a8:66:53:c1:ae:05:98:3b:f1:13:d1:c6:
                    92:67:4e:ab:d7:55:59:a7:76:3b:54:df:fe:3f:74:
                    15:63:24:0b:e7:a9:35:69:5f:ef:26:c8:82:e0:c7:
                    1b:ea:e5:f9:78:68:47:21:c4:99:31:22:60:ff:a7:
                    43:7a:4c:50:7c:26:ae:cd:2a:6f:4b:38:bb:0c:b2:
                    aa:65:ea:f2:bf:a1:84:67:37:5c:fd:0f:9f:2c:a1:
                    ca:b7:73:df:50:5e:78:d9:5d:49:47:db:17:4d:99:
                    ff:fa:68:fc:da:90:0c:40:85:a1:20:06:db:83:b6:
                    32:ad:a0:d7:6d:45:48:b8:4e:1e:d0:7c:fb:2e:50:
                    0c:a1:f1:7c:3b:f1:9d:62:92:ff:c2:e1:cd:b9:fe:
                    d3:6b:55:a9:e0:32:d0:70:04:e7:31:cb:a4:12:a8:
                    5c:c0:13:6f:f1:60:76:2c:90:f1:35:0c:7f:c0:c2:
                    c8:8a:00:8e:24:e1:b9:ba:d6:81:80:96:18:3a:7b:
                    a6:b1:b5:65:9d:be:06:eb:d0:2b:24:2f:7b:48:09:
                    17:dc:21:30:c2:2d:9b:e9:99:07:f2:ff:14:0b:16:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:35:0C:E1:09:C9:E9:33:0D:8A:88:6D:78:25:6B:3D:91:AA:50:DC
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:63:66:d3:e7:fe:43:c0:30:94:05:95:93:6d:0b:d5:48:1b:
         9c:9f:23:78:9b:aa:ab:60:eb:08:7b:69:e0:33:20:9a:6e:d9:
         7d:64:e4:2c:b9:78:3c:1d:23:a2:d9:4c:8b:ca:f7:e3:5d:20:
         42:ca:68:83:6c:b6:21:9f:3d:06:61:57:77:4c:7f:f2:2a:4f:
         c6:9b:db:5a:ff:3b:2b:53:58:ca:f2:78:eb:19:d3:ea:e0:af:
         0a:b7:4d:c5:8f:d1:62:a0:22:17:55:1d:2c:0c:d4:68:b4:06:
         c7:60:58:41:7e:3b:d9:8c:57:05:27:96:01:51:8c:77:6f:f9:
         92:a3:87:7b:05:6f:e8:4f:82:4f:77:56:75:75:62:f7:9f:43:
         32:f0:c2:6e:f7:5b:14:7f:b2:b1:77:60:d0:ba:c3:20:e6:61:
         33:6c:89:7d:cf:1e:1b:1d:2f:ba:c9:39:c8:77:6c:56:c9:79:
         66:79:e1:18:8b:b9:9a:ed:bf:6c:a2:f7:f6:9d:78:65:60:93:
         b3:52:7c:a3:1a:2a:3a:a5:90:61:ee:00:3e:5b:bc:e8:79:70:
         ce:44:8b:c5:99:6a:cb:1d:8c:30:40:c5:fc:b9:45:45:18:6f:
         b1:3a:f7:6a:7b:49:c8:96:bf:d8:50:14:f8:84:a6:65:b1:69:
         6b:47:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:06 2025 by rpki-client