Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier:          fOK3EdvuW9vcDp+UpIJTYDwd0TnIh3ZvCsOn6T4DGQM=
Subject key identifier:   D9:7D:DA:21:60:96:9F:F5:9E:A6:24:7F:B7:5A:60:55:F9:9A:DB:DC
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer:       /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial:       052B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number:          0529
Signing time:             Sat 23 Aug 2025 02:46:40 +0000
Manifest this update:     Sat 23 Aug 2025 02:46:40 +0000
Manifest next update:     Mon 25 Aug 2025 02:46:40 +0000
Files and hashes:         1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: EXazzKzAleNMLSnJGVXtFdS2Cx+EtW7+22KreNJqSoI=)
                          2: 5929BAD6881811EF9F8726B0762E951A.roa (hash: gqseLBT3raRF8qI8a39+TId/5s+ZYprcLYdDUSRWjC4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656387AF, serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Validity
            Not Before: Aug 23 02:46:40 2025 GMT
            Not After : Aug 25 02:46:40 2025 GMT
        Subject: CN=68a92b90-4db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d4:c6:15:45:b6:b3:7a:ff:ee:0e:53:d6:5f:
                    fe:e3:49:df:0a:f2:97:70:d0:05:4b:02:2b:15:0e:
                    d5:41:17:12:a2:16:19:f5:8c:18:51:5e:df:d9:d2:
                    89:6b:69:61:26:47:25:d4:db:b2:42:a2:1f:e1:a8:
                    ab:f5:d8:a5:9d:c1:a8:fb:78:eb:bf:bb:49:8e:cb:
                    37:9a:d2:91:15:21:03:2b:40:a1:d6:b3:6b:90:03:
                    65:b6:0e:3a:b9:03:07:e5:06:c6:2e:6a:a5:ef:e2:
                    df:30:96:52:6e:7d:f2:47:92:73:5d:90:79:29:6d:
                    dc:bd:55:be:34:d1:25:48:76:cb:c9:95:72:41:2a:
                    08:8d:51:d2:86:d2:f9:52:6d:ab:55:f9:b0:49:57:
                    ed:ab:06:d0:6b:ac:3a:36:77:2a:cf:72:d0:3f:fc:
                    b4:a4:42:cb:5d:d0:a1:da:f3:f6:73:8b:65:5f:6b:
                    83:c0:f3:61:51:ba:02:a6:c9:fc:38:d3:2c:2d:ba:
                    0f:fc:ac:63:e0:0a:78:70:5b:ef:70:fa:f6:82:0f:
                    15:38:0c:5e:5b:dc:7a:f3:3e:54:08:67:8d:e3:49:
                    75:fd:e6:db:5f:e5:6a:46:d1:df:8d:78:9e:02:8f:
                    49:12:ab:96:50:dd:33:4b:e6:cc:82:42:7f:2b:42:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:DA:21:60:96:9F:F5:9E:A6:24:7F:B7:5A:60:55:F9:9A:DB:DC
            X509v3 Authority Key Identifier:
                keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b0:74:43:71:23:44:dd:78:a6:c7:5a:86:57:89:b3:50:36:
         60:1a:bb:d2:7e:a8:e4:c0:ae:52:7b:98:d0:36:d2:8d:20:6a:
         99:12:89:a0:92:ec:b8:c0:78:25:dd:7b:67:5c:da:74:b3:3c:
         96:61:4f:c2:48:b8:f6:51:16:fb:cf:09:d8:29:ab:53:8d:ea:
         c8:21:8a:ce:94:3e:1e:3c:57:8c:ef:72:fd:1b:1a:3b:75:20:
         92:86:17:e5:4a:35:45:a6:1f:67:8c:08:f9:e6:46:50:e6:ea:
         29:bc:3c:c7:63:75:c1:0e:3d:79:bd:07:ae:57:76:a0:e3:4c:
         eb:5a:85:2f:16:d9:93:45:1a:c8:33:c8:6d:be:ac:17:98:6f:
         b1:0b:8f:c2:f5:0d:4e:67:1b:6b:ba:c1:51:83:50:83:03:e8:
         57:3d:18:63:b3:b8:c1:08:fb:5a:c1:09:5e:d7:cd:3b:78:4c:
         61:b0:31:a2:b5:b2:99:62:8a:0b:cd:a0:7c:b6:78:2e:0b:50:
         89:7b:27:66:ac:e7:5f:b4:f4:f1:68:5e:3a:6f:fd:15:d1:ee:
         8d:95:13:6d:a6:ca:dd:28:1c:0d:e0:a7:04:8e:95:98:b0:15:
         68:24:84:9e:65:ea:c2:2d:a8:6c:d7:90:2d:dd:2d:cd:5d:75:
         45:88:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:57 2025 by rpki-client