Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
File:                     8qncFw2PMqBEwa8QUgRdbU4kIus.mft (raw, json)
Hash identifier:          0E1x2Tdt3WpvhkB9GdZdqSbEo+htuTD78FD8oUDe1uc=
Subject key identifier:   49:D0:08:CF:B8:3D:19:B9:04:69:72:38:84:A1:3E:E8:BC:BB:6C:6B
Authority key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Certificate issuer:       /CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Certificate serial:       01A1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
Manifest number:          019D
Signing time:             Sat 23 Aug 2025 04:40:55 +0000
Manifest this update:     Sat 23 Aug 2025 04:40:54 +0000
Manifest next update:     Mon 25 Aug 2025 04:40:54 +0000
Files and hashes:         1: 8qncFw2PMqBEwa8QUgRdbU4kIus.crl (hash: rcHQk+GnGLBqDqkt8wDv5QvgNctYD3SYQmo7+eoDsaY=)
                          2: 6943C2245A1C11EF8AD3AB9F762E951A.roa (hash: 4I82hmzIVlcUSpjIKbPk3aHDkUVJd1jgQcDFX1IaaAM=)
                          3: E0539FCE5A1211EF8F707262762E951A.roa (hash: bcfZ/95PQQlS2eDlkdUzWliC6UA2tyCBDeR/FA3hgqE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                          rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65RI, serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
        Validity
            Not Before: Aug 23 04:40:54 2025 GMT
            Not After : Aug 25 04:40:54 2025 GMT
        Subject: CN=68a94657-42db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:31:5d:50:23:35:62:ce:f7:fb:90:a8:ef:
                    0c:82:87:5c:b3:be:62:1d:db:e3:ed:dc:e2:ff:02:
                    80:63:8d:60:21:9d:b8:d9:59:aa:c8:58:e5:87:90:
                    35:be:eb:11:54:9b:b3:d7:49:c5:04:d0:67:61:e1:
                    3a:d6:01:f5:04:38:7e:66:06:31:94:cb:23:0d:b3:
                    00:d2:8d:eb:cf:0a:69:06:fe:b3:10:01:9d:4b:7e:
                    75:25:28:2b:3a:a3:d1:a8:ae:31:59:34:0c:de:fc:
                    97:db:60:d9:ed:d1:08:28:23:5e:81:41:92:65:63:
                    9e:2e:25:fe:32:dd:7c:d9:97:c8:45:d0:ae:a6:49:
                    36:71:8b:f6:1f:72:da:ae:ae:66:4a:59:6f:63:80:
                    8a:c2:e0:e8:e6:7a:df:00:4f:78:8a:ae:de:d3:e6:
                    74:ce:2d:d9:6e:a9:dc:58:cd:8b:19:ca:b5:0e:6a:
                    4b:6d:4e:49:2a:c6:4a:2e:cf:d1:18:46:c0:d0:11:
                    e2:58:27:0a:f1:19:b7:76:f6:96:d6:cd:54:db:77:
                    e8:ab:53:25:a8:29:44:45:45:d3:12:c0:a4:5f:9e:
                    a9:cc:8a:c4:c1:29:01:f5:8f:36:7a:1f:3a:be:bf:
                    c0:a2:c5:44:8e:fc:2e:57:04:c3:39:3a:2e:b6:cc:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D0:08:CF:B8:3D:19:B9:04:69:72:38:84:A1:3E:E8:BC:BB:6C:6B
            X509v3 Authority Key Identifier:
                keyid:F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:d3:3e:ca:b3:4b:4d:8c:7c:33:9a:d0:e8:34:6b:95:0e:
         01:bb:7f:98:1f:ff:aa:11:e9:16:72:fc:69:11:2d:26:d0:ad:
         5b:69:1b:fe:ec:f6:d2:7a:a3:b6:42:96:b9:f5:95:97:98:c6:
         89:e4:93:46:db:58:91:5c:e6:64:cb:ed:2a:cf:57:23:5d:2f:
         3b:5e:9d:8c:3e:ae:4c:65:31:a7:20:ad:1e:72:a4:94:7d:dd:
         e3:52:4b:9a:36:dd:94:6f:11:13:10:18:a6:c1:cb:a5:da:61:
         23:0c:02:f0:9f:d3:03:84:21:af:29:0f:0e:c5:0c:b2:f3:38:
         72:70:42:2b:21:23:56:98:5d:3e:66:4e:8d:84:c6:cc:45:80:
         a5:0c:4a:59:88:29:ff:86:d5:c2:a8:c9:c3:6e:84:46:d7:2d:
         6a:e9:f7:20:90:49:c6:48:33:76:c7:f4:fd:b7:f5:8c:94:90:
         23:f3:97:17:c8:c4:f7:bc:5a:bd:92:04:8b:99:00:aa:d3:cf:
         0f:c4:13:25:41:07:3c:17:35:66:05:b6:13:d3:3d:05:f3:5e:
         04:4d:57:73:c8:af:35:48:f9:66:9a:f9:1b:11:82:50:59:47:
         cb:02:c7:e6:ac:6e:1f:a0:0c:74:9c:d0:47:db:40:4e:d8:ad:
         80:98:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:53 2025 by rpki-client