Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
File:                     tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft (raw, json)
Hash identifier:          jDQkj36ervHoJfb5La6SxYMEBxuzV8fckHEifO1WIOE=
Subject key identifier:   8F:C9:39:08:EC:D1:96:C7:70:B3:6A:98:B3:08:64:D8:D4:68:DC:B4
Authority key identifier: B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4
Certificate issuer:       /CN=F364563FAF/serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
Certificate serial:       5E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
Manifest number:          5C
Signing time:             Mon 20 Oct 2025 05:10:47 +0000
Manifest this update:     Mon 20 Oct 2025 05:10:46 +0000
Manifest next update:     Wed 22 Oct 2025 05:10:46 +0000
Files and hashes:         1: tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl (hash: NWVhKmmuQ15pUCp0aYuSWuDaxP7P6LlOX4YYVZTu3MI=)
                          2: 0D8258E0A06811F092E080CCDAE4EC9C.roa (hash: jAYBUqDBzFC3MpXtI17Ah8/ursFRmSV68BlqHI1aKEo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364563FAF, serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
        Validity
            Not Before: Oct 20 05:10:46 2025 GMT
            Not After : Oct 22 05:10:46 2025 GMT
        Subject: CN=68f5c457-f94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:c8:9a:09:e2:94:0b:d3:da:56:83:c9:cc:
                    7e:e6:44:39:2f:f7:ff:7d:1f:d8:28:86:eb:fe:11:
                    04:8b:a1:6a:ac:95:aa:06:6b:76:c7:82:20:a3:94:
                    70:18:f8:97:89:85:38:4d:36:0f:d7:f7:6f:08:78:
                    50:90:07:76:e3:dc:3d:69:fa:96:2f:a3:ef:6f:d1:
                    57:58:fe:39:4d:b9:b4:ba:6a:f3:ce:7f:b6:9a:a8:
                    af:8b:6c:05:90:a3:1c:6d:eb:a3:23:11:0c:e7:34:
                    99:58:6e:1d:cf:b5:ce:7a:da:ee:ef:10:9c:30:c3:
                    df:3b:3a:68:21:ed:3a:2b:cf:a5:83:d7:9b:c7:fa:
                    0b:b6:3b:dc:13:4d:04:97:fb:c3:d9:6b:06:ed:a7:
                    0b:fa:79:a2:48:d8:9c:70:01:48:6e:f0:19:db:9b:
                    34:62:da:73:68:8d:a1:87:04:ee:99:2f:b8:4c:d3:
                    bc:58:7e:cd:4f:0b:5a:0c:45:6c:1e:05:b3:99:f5:
                    ed:b7:57:dd:c4:3f:12:f2:9c:6f:ca:00:fa:ae:73:
                    9c:f5:77:e0:d6:32:66:bc:91:44:e1:95:12:44:6a:
                    35:7c:a1:3c:ff:a5:7f:46:00:a5:61:36:2a:17:cf:
                    0b:e3:2e:3f:99:78:ea:33:0d:bf:0d:b0:55:2a:9c:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C9:39:08:EC:D1:96:C7:70:B3:6A:98:B3:08:64:D8:D4:68:DC:B4
            X509v3 Authority Key Identifier:
                keyid:B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:86:62:f1:f9:9f:5a:a8:68:44:65:5b:a9:9d:23:55:d4:ed:
         73:b3:4b:51:0c:80:7b:96:9f:2c:ed:d0:bd:8f:8f:10:8c:0e:
         be:43:7c:db:af:6b:f2:ac:e1:e8:4d:6e:df:20:de:3b:f9:30:
         50:1f:34:b4:f0:27:e7:17:7d:5c:5d:25:c3:40:df:e8:5c:16:
         5e:04:44:2d:16:79:6f:d0:27:58:bc:a5:16:a6:ef:ea:f2:40:
         e4:5a:88:0d:0b:bf:ca:c2:94:89:69:ee:ee:a2:fe:45:91:60:
         0b:18:85:0c:8a:63:00:a3:a9:d5:c6:af:67:54:2f:c5:99:d6:
         7f:be:d3:85:a1:cb:47:18:e1:6f:29:34:3e:64:fb:58:10:ec:
         3d:4c:ee:46:a6:f6:b1:49:1f:e2:77:38:87:2f:9e:71:a2:99:
         ee:c7:06:15:1d:3e:32:ea:ae:b6:19:59:00:f7:3e:06:77:39:
         04:ae:d5:61:2e:f9:9a:48:b2:d7:54:c7:ed:fb:f3:01:a4:6d:
         e0:e6:13:ff:dc:87:77:ed:fa:fc:b1:c7:37:b6:8e:24:e5:44:
         ff:f1:c5:55:0c:a3:a4:b0:83:a0:81:06:a3:d4:b1:e6:da:76:
         1f:0c:35:89:02:da:2c:62:87:bc:29:92:b2:1e:c7:ef:6c:99:
         48:14:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:32:25 2025 by rpki-client