Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
File:                     XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft (raw, json)
Hash identifier:          GyWvXA8ZX31ykSa1q7ganZk1uY003AxQP9BFo613usA=
Subject key identifier:   D1:24:28:86:A6:70:C2:CC:BF:CE:B8:DE:C2:F5:F1:37:4E:90:43:C1
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Certificate issuer:       /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial:       0394
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
Manifest number:          0390
Signing time:             Sat 23 Aug 2025 03:35:50 +0000
Manifest this update:     Sat 23 Aug 2025 03:35:50 +0000
Manifest next update:     Mon 25 Aug 2025 03:35:50 +0000
Files and hashes:         1: XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl (hash: uwdAkT7h2tvryUZlxDybmgT8oF4rBR9+ywLRVE1Fm+U=)
                          2: 1ED4202ECD7511EDB2ED6A96F1222468.roa (hash: 9yazktSrBnSqQLJYDiJlJ8U061x2FlDHFoEX+tDlWCY=)
                          3: 8981BFF8CD7511EDADBDC297F1222468.roa (hash: XHwwuY3b3DDaJzLvFzJY6Cge3h5RZq961ny7aXpfhL8=)
                          4: F9FA5CE6CD7411EDA8B70696F1222468.roa (hash: 8eDGMcM6rbtGPj7+umoDH74//2ioLQd3MbdNouRQeVo=)
                          5: 42F3F790CD7511ED90D70697F1222468.roa (hash: pBMuRG1HJgh4SVstyiUpIYlRbDo+xDDlMaQsl1/xXjw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
        Validity
            Not Before: Aug 23 03:35:50 2025 GMT
            Not After : Aug 25 03:35:50 2025 GMT
        Subject: CN=68a93716-6de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:92:3d:d0:45:de:0e:d8:0f:f4:dc:76:be:
                    8e:cf:32:21:af:85:21:27:67:79:9c:e7:7d:90:37:
                    da:62:08:2f:c0:98:5f:99:68:a7:9c:06:0c:77:7e:
                    ad:29:1e:f8:58:d5:89:cc:b0:fe:eb:31:c6:b6:cb:
                    7e:99:96:46:f9:95:32:66:a2:ff:0f:23:c9:48:1d:
                    83:51:0c:1a:72:49:6d:e0:19:cd:2f:75:e8:aa:da:
                    fc:74:ce:7b:84:38:25:b3:15:d4:f6:4d:f5:23:3b:
                    6c:ca:e5:b5:bc:b4:1a:86:01:98:91:47:19:a5:49:
                    2d:b8:51:66:5a:52:c8:f9:cf:18:bc:a4:11:68:3c:
                    fe:61:60:94:d3:74:f3:ab:80:81:c9:90:2c:53:41:
                    1e:01:d8:4a:c2:01:7d:4a:7f:a3:27:06:6e:91:c1:
                    29:51:c2:94:be:cc:2d:73:06:13:81:9e:64:41:96:
                    2e:3e:d5:ee:46:6f:4d:c7:8a:f7:f8:9d:ec:ba:8b:
                    8a:6c:d6:15:32:ac:1b:80:f1:ab:ba:6d:c2:ec:d4:
                    b2:3d:4a:1c:98:17:fa:d5:f0:32:fd:53:d3:23:fa:
                    55:ca:ef:e5:43:ca:83:aa:f9:06:bc:a6:de:0c:b6:
                    d8:b7:e6:f3:0e:c2:1f:5d:2e:a8:22:ec:d7:76:3e:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:28:86:A6:70:C2:CC:BF:CE:B8:DE:C2:F5:F1:37:4E:90:43:C1
            X509v3 Authority Key Identifier:
                keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4d:6c:ac:40:94:0d:a9:5f:b9:98:21:66:63:fa:0c:7b:cb:
         2a:ac:34:2e:86:90:5c:50:8a:e6:bd:a3:3b:dd:43:55:08:6a:
         bd:bf:95:07:57:de:33:c5:ec:b2:f0:a1:60:cb:7c:25:0f:e4:
         f9:7e:da:38:ca:73:bf:f4:e7:ea:ed:f6:36:44:70:82:ea:87:
         84:9f:02:07:98:11:69:c6:8e:b1:40:6c:45:00:1f:b9:87:05:
         23:d1:3e:0f:f3:89:4e:9a:86:a4:0f:60:69:85:70:9a:08:61:
         dd:5a:14:e5:be:f9:51:58:bb:ef:a8:5f:fb:8c:ca:a3:19:76:
         20:ac:c6:12:af:09:de:a7:7f:89:5e:26:5e:d4:1a:8a:bf:51:
         ca:25:c8:4b:82:64:e9:73:dc:00:1c:46:87:c6:ae:ad:a6:96:
         20:80:a7:9b:53:a2:41:09:59:a6:a3:6c:90:c6:9e:0a:26:99:
         8b:9f:82:67:a4:84:2a:f2:a2:88:cf:50:4c:81:00:64:05:61:
         fe:df:22:37:24:c3:0c:b9:b5:d0:31:02:b7:eb:b2:8f:94:7a:
         f3:4f:0c:fd:14:4f:e2:07:dd:23:1a:59:5c:24:6e:86:66:2a:
         23:70:e9:60:48:9b:da:c5:aa:68:18:f4:ff:81:21:d8:c8:d1:
         77:bd:1f:cd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA2MkFBRjExMC8GA1UEBRMoNUQyNTRDQkM5RENBMjQ3NjdFMjQ4NjAwOTY4MEI3
NDM0MTFGMDhGODAeFw0yNTA4MjMwMzM1NTBaFw0yNTA4MjUwMzM1NTBaMBgxFjAU
BgNVBAMTDTY4YTkzNzE2LTZkZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCf55I90EXeDtgP9Nx2vo7PMiGvhSEnZ3mc532QN9piCC/AmF+ZaKecBgx3
fq0pHvhY1YnMsP7rMca2y36Zlkb5lTJmov8PI8lIHYNRDBpySW3gGc0vdeiq2vx0
znuEOCWzFdT2TfUjO2zK5bW8tBqGAZiRRxmlSS24UWZaUsj5zxi8pBFoPP5hYJTT
dPOrgIHJkCxTQR4B2ErCAX1Kf6MnBm6RwSlRwpS+zC1zBhOBnmRBli4+1e5Gb03H
ivf4ney6i4ps1hUyrBuA8au6bcLs1LI9ShyYF/rV8DL9U9Mj+lXK7+VDyoOq+Qa8
pt4Mtti35vMOwh9dLqgi7Nd2PrX/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0SQo
hqZwwsy/zrjewvXxN06QQ8EwHwYDVR0jBBgwFoAUXSVMvJ3KJHZ+JIYAloC3Q0Ef
CPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNjJBL0Q2QUVBRjY0Q0Q3MjExRUQ5MUJDQ0I4RkYxMjIyNDY4L1hTVk12
SjNLSkhaLUpJWUFsb0MzUTBFZkNQZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hTVk12SjNLSkhaLUpJWUFsb0MzUTBFZkNQZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA2MkEvRDZBRUFGNjRDRDcyMTFFRDkxQkNDQjhGRjEy
MjI0NjgvWFNWTXZKM0tKSFotSklZQWxvQzNRMEVmQ1BnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBITWysQJQNqV+5mCFmY/oMe8sqrDQu
hpBcUIrmvaM73UNVCGq9v5UHV94zxeyy8KFgy3wlD+T5fto4ynO/9Ofq7fY2RHCC
6oeEnwIHmBFpxo6xQGxFAB+5hwUj0T4P84lOmoakD2BphXCaCGHdWhTlvvlRWLvv
qF/7jMqjGXYgrMYSrwnep3+JXiZe1BqKv1HKJchLgmTpc9wAHEaHxq6tppYggKeb
U6JBCVmmo2yQxp4KJpmLn4JnpIQq8qKIz1BMgQBkBWH+3yI3JMMMubXQMQK367KP
lHrzTwz9FE/iB90jGllcJG6GZiojcOlgSJvaxapoGPT/gSHYyNF3vR/N
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:26 2025 by rpki-client