Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
File:                     RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft (raw, json)
Hash identifier:          nFb8puFQ+NeenmC4BZyl9uSxF8pfMniva0jBXJnLSIs=
Subject key identifier:   06:01:DE:9F:AF:6B:40:49:72:05:13:07:19:31:8C:13:65:E1:FC:81
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Certificate issuer:       /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
Manifest number:          0152
Signing time:             Sat 23 Aug 2025 04:54:08 +0000
Manifest this update:     Sat 23 Aug 2025 04:54:08 +0000
Manifest next update:     Mon 25 Aug 2025 04:54:08 +0000
Files and hashes:         1: RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl (hash: Wvk/LHEU9D/bDJ76HJaRZf/+bHlJkmbYwflNHLj5/H0=)
                          2: 3115BA58AC9A11EFBB666976762E951A.roa (hash: bHbD7weS2dip8Z+GiQXd9+abXSVFw+tU7+Gs29hWT0o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
        Validity
            Not Before: Aug 23 04:54:08 2025 GMT
            Not After : Aug 25 04:54:08 2025 GMT
        Subject: CN=68a94970-9075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2c:32:2d:08:37:62:43:a5:a4:ec:b7:60:9f:
                    67:48:cd:81:a5:5a:8b:45:38:5d:5c:c5:42:f9:ea:
                    91:17:67:26:c0:ca:4d:2b:99:00:f7:4d:64:b8:41:
                    2d:bf:13:9a:08:ac:b5:71:5f:c9:ac:34:c0:2f:47:
                    50:61:19:d2:9e:a0:34:e4:7e:8d:96:5e:32:6b:ae:
                    b0:8c:0c:32:63:4c:31:18:70:b7:ab:09:2e:8e:a3:
                    a6:34:f2:46:ca:6b:84:f4:a9:25:99:29:b6:27:83:
                    41:98:49:99:b8:f6:3b:ed:e2:37:a4:98:f6:e4:27:
                    e6:d3:d6:99:15:ae:4b:82:b1:a2:ed:ed:8b:6a:c9:
                    30:f6:ff:5a:2a:24:00:6d:f9:1c:7b:be:ba:92:ab:
                    18:ab:05:11:ec:81:8f:f0:97:f8:fd:23:c0:66:d9:
                    f3:a2:5d:df:c2:98:23:2a:3b:33:0f:5a:6a:25:95:
                    f6:c8:0d:45:2e:21:d2:9b:37:ba:a4:40:9e:b8:9b:
                    82:c8:0a:56:d1:87:72:e4:bc:ba:14:18:23:5c:7a:
                    9d:f4:55:15:25:9b:61:01:a8:2b:12:a0:1f:19:a9:
                    21:1d:c1:62:bf:28:7f:25:d9:68:33:dc:8f:d8:20:
                    e6:2e:6c:94:c8:43:aa:75:78:3c:e4:7f:74:ec:98:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:01:DE:9F:AF:6B:40:49:72:05:13:07:19:31:8C:13:65:E1:FC:81
            X509v3 Authority Key Identifier:
                keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:2a:1f:8a:c7:0a:b4:aa:eb:09:90:d1:6f:1b:14:a3:55:
         c2:1a:e3:2e:7d:ee:95:60:3c:d5:3f:f2:34:e6:ab:32:fe:b4:
         ba:df:11:4f:3b:a5:6e:5f:5c:01:57:3b:4c:50:d3:84:29:4f:
         21:e1:7f:63:ec:e8:04:2f:8e:ce:8a:08:5f:a7:0c:2a:a6:78:
         70:51:00:e0:f8:d9:e8:37:25:0a:2f:5c:b3:75:1b:f0:18:67:
         2a:24:aa:af:44:25:5d:25:20:5e:ff:df:d5:ec:1b:98:ed:9c:
         87:eb:70:b9:c7:fb:9e:d4:a8:62:14:96:c7:3f:c7:a5:79:41:
         61:ec:3f:38:72:c5:cc:9c:15:c7:81:e2:a0:2c:9c:f5:17:2b:
         90:01:9e:f3:c0:26:84:9e:10:0b:9e:b2:bd:e9:2f:d8:9f:99:
         ff:eb:2d:e8:2f:a6:fe:00:b0:50:b7:8d:6a:20:5b:89:df:db:
         6c:03:cc:6f:00:de:4e:4a:c8:b8:b1:d9:0c:dc:8d:01:38:69:
         2c:3a:1d:a1:44:c5:93:a7:c3:3a:26:e6:5c:bd:64:3f:81:a5:
         92:49:a1:e2:29:41:61:2f:1d:34:1d:e7:37:46:26:67:6b:10:
         04:f3:4d:68:51:e0:48:f0:56:27:f6:34:3d:3b:b2:7a:5e:1f:
         5f:a0:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:17 2025 by rpki-client