Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
File:                     agXQ7beSVTGJRs3ZHy36Wnh__xM.mft (raw, json)
Hash identifier:          ph/cbKV6Gr8mLo6gDW/8T/ft1WabRswzG+9bOAHUqbs=
Subject key identifier:   35:11:3C:32:BA:0A:80:F3:AE:A1:8F:A5:3E:C8:AF:AD:9C:54:8B:01
Authority key identifier: 6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13
Certificate issuer:       /CN=F3658AF9AF/serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
Manifest number:          0C
Signing time:             Sat 23 Aug 2025 05:28:36 +0000
Manifest this update:     Sat 23 Aug 2025 05:28:35 +0000
Manifest next update:     Mon 25 Aug 2025 05:28:35 +0000
Files and hashes:         1: agXQ7beSVTGJRs3ZHy36Wnh__xM.crl (hash: HXkybvgdNI3phyqxhLFheskBZtY4RcbQ2dNmWP5vHg4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AF, serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
        Validity
            Not Before: Aug 23 05:28:35 2025 GMT
            Not After : Aug 25 05:28:35 2025 GMT
        Subject: CN=68a95184-c88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:57:99:c8:2e:98:66:5b:b0:05:9c:1a:cb:
                    dc:95:48:1c:b3:16:1f:6f:f9:cc:db:99:35:a9:a0:
                    1b:30:91:0b:2c:38:52:bb:bd:e7:e6:ef:58:09:f1:
                    a1:e7:5a:ee:25:ac:d9:6e:76:6c:69:c8:06:00:59:
                    fd:54:b1:ea:5d:76:34:e8:c2:b7:fa:be:e6:d7:d4:
                    c9:73:ca:20:c0:bb:5d:0d:30:75:ac:c3:02:ac:70:
                    0e:9e:44:61:bb:15:fe:06:bf:6e:d3:5f:01:17:96:
                    5f:da:3b:b4:d6:4f:fb:a9:11:6a:d2:b7:e7:bc:05:
                    62:08:5c:30:5f:03:4a:5b:34:a9:9e:08:d5:92:e6:
                    5e:d4:ac:b9:ec:d0:f0:48:27:8b:57:b2:03:d4:ec:
                    36:c2:5d:4b:a2:8d:b9:97:b1:dc:cd:89:b7:dc:06:
                    14:04:ac:86:c7:e9:e9:3e:16:59:40:a7:e7:49:0e:
                    5f:8c:9c:52:d2:d0:ce:93:e0:0c:a1:6c:cb:c3:c2:
                    ac:21:2e:e2:f1:49:5f:52:b7:50:97:70:f8:23:2b:
                    50:39:2e:f7:50:0f:a6:fa:93:b3:44:97:f2:13:21:
                    c8:f2:30:14:cd:8a:db:a2:19:e1:46:16:32:c8:94:
                    e3:c6:d6:a9:a7:30:90:5f:16:6a:87:27:6e:ae:38:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:11:3C:32:BA:0A:80:F3:AE:A1:8F:A5:3E:C8:AF:AD:9C:54:8B:01
            X509v3 Authority Key Identifier:
                keyid:6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2d:7e:83:22:8e:7c:bd:de:fb:f7:55:20:e8:86:48:8e:5f:
         dc:69:64:d8:0e:cf:74:38:16:43:09:f1:c0:17:cf:8b:77:20:
         f8:cb:f4:e6:15:2b:2b:ff:31:3a:cf:12:51:e9:06:e2:a8:51:
         3a:e7:34:41:b9:c7:9f:c9:3c:45:77:84:d8:ce:5f:83:21:fb:
         9c:e8:73:7e:53:56:3b:f9:3c:ac:fc:84:fd:c5:37:28:82:5f:
         37:ee:af:da:72:15:40:9a:26:94:b9:4e:aa:e2:15:0b:e2:f1:
         3d:07:c7:d4:00:eb:23:26:29:29:9e:0c:15:ca:b1:6f:fd:1a:
         3f:6e:9e:f6:85:6a:ee:bd:75:31:b6:41:45:bc:1a:4a:3a:a6:
         38:56:db:aa:f4:f0:c0:c6:bc:27:03:81:29:23:a7:70:c6:fe:
         d3:6a:a1:23:8c:02:4c:a5:b8:02:1d:cd:73:35:46:3e:50:2d:
         43:5f:ce:36:3a:8a:77:0f:b0:26:00:06:e6:a2:e2:0b:fe:43:
         ed:73:36:bd:d2:d8:7b:b0:84:95:e7:fd:ea:e5:fa:e6:63:6e:
         eb:4f:17:c7:88:db:5f:8b:34:db:7f:2c:04:c8:58:e6:c7:4a:
         f3:11:f3:5b:00:58:66:2e:dd:f4:f3:0c:4a:34:e5:5c:a8:98:
         39:ff:ff:55
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
OEFGOUFGMTEwLwYDVQQFEyg2QTA1RDBFREI3OTI1NTMxODk0NkNERDkxRjJERkE1
QTc4N0ZGRjEzMB4XDTI1MDgyMzA1MjgzNVoXDTI1MDgyNTA1MjgzNVowGDEWMBQG
A1UEAxMNNjhhOTUxODQtYzg4YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUsV5nILphmW7AFnBrL3JVIHLMWH2/5zNuZNamgGzCRCyw4Uru95+bvWAnx
oeda7iWs2W52bGnIBgBZ/VSx6l12NOjCt/q+5tfUyXPKIMC7XQ0wdazDAqxwDp5E
YbsV/ga/btNfAReWX9o7tNZP+6kRatK357wFYghcMF8DSls0qZ4I1ZLmXtSsuezQ
8Egni1eyA9TsNsJdS6KNuZex3M2Jt9wGFASshsfp6T4WWUCn50kOX4ycUtLQzpPg
DKFsy8PCrCEu4vFJX1K3UJdw+CMrUDku91APpvqTs0SX8hMhyPIwFM2K26IZ4UYW
MsiU48bWqacwkF8Waocnbq44ky8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBQ1ETwy
ugqA866hj6U+yK+tnFSLATAfBgNVHSMEGDAWgBRqBdDtt5JVMYlGzdkfLfpaeH//
EzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NThBRjkvNDM5NDZBQjg3ODM2MTFGMDk1RjE3N0UzREFFNEVDOUMvYWdYUTdi
ZVNWVEdKUnMzWkh5MzZXbmhfX3hNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYWdYUTdiZVNWVEdKUnMzWkh5MzZXbmhfX3hNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1OEFGOS80Mzk0NkFCODc4MzYxMUYwOTVGMTc3RTNEQUU0
RUM5Qy9hZ1hRN2JlU1ZUR0pSczNaSHkzNlduaF9feE0ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAMItfoMijny93vv3VSDohkiOX9xpZNgO
z3Q4FkMJ8cAXz4t3IPjL9OYVKyv/MTrPElHpBuKoUTrnNEG5x5/JPEV3hNjOX4Mh
+5zoc35TVjv5PKz8hP3FNyiCXzfur9pyFUCaJpS5TqriFQvi8T0Hx9QA6yMmKSme
DBXKsW/9Gj9unvaFau69dTG2QUW8Gko6pjhW26r08MDGvCcDgSkjp3DG/tNqoSOM
AkyluAIdzXM1Rj5QLUNfzjY6incPsCYABuai4gv+Q+1zNr3S2HuwhJXn/erl+uZj
butPF8eI21+LNNt/LATIWObHSvMR81sAWGYu3fTzDEo05VyomDn//1U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:09 2025 by rpki-client