Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          73C6G/pQ3SjgA6kVskAztrVtNrV1DoZeduxTdIbIYcw=
Subject key identifier:   6D:6A:6F:7E:90:C2:43:69:BF:93:5F:08:5F:81:AB:09:3B:C1:E3:7B
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       45
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          45
Signing time:             Mon 20 Oct 2025 05:13:42 +0000
Manifest this update:     Mon 20 Oct 2025 05:13:41 +0000
Manifest next update:     Wed 22 Oct 2025 05:13:41 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: rcllZ98bYrxlwcdDv6XCzETrFo/byv1hYe18OWI1G+A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Oct 20 05:13:41 2025 GMT
            Not After : Oct 22 05:13:41 2025 GMT
        Subject: CN=68f5c505-fcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:c3:bf:4f:45:53:4e:70:35:45:12:af:7f:
                    cb:4f:e3:2d:14:60:47:78:73:60:8d:36:29:53:54:
                    be:36:f7:ea:89:28:4a:37:cf:f0:7d:3a:1a:c8:3e:
                    f0:f8:4c:60:64:7a:b1:93:65:5d:3a:79:9b:12:e4:
                    f5:5c:ac:a4:d1:40:7b:ff:3d:19:cb:28:0d:a1:43:
                    71:55:81:56:9e:0f:c0:af:6f:9b:2d:a5:12:e9:e1:
                    18:46:a3:28:10:aa:6a:49:17:57:7c:62:e8:8a:71:
                    83:2f:74:8b:22:64:50:83:4b:40:7a:ff:f9:a8:a4:
                    8b:e1:33:84:8b:39:f4:ac:04:33:7d:ee:8d:ff:06:
                    40:65:29:f2:6c:4d:9b:64:b2:33:43:8a:ff:40:46:
                    c5:19:0b:43:66:2c:39:12:93:ce:59:ac:a9:41:3a:
                    c5:a2:6f:a7:10:03:1b:d6:90:d8:50:f5:12:29:2a:
                    44:e8:f5:17:29:84:f8:f7:56:c9:ed:c0:ca:da:fc:
                    99:5e:4e:57:ce:7a:14:cb:0f:90:a3:25:a7:ef:40:
                    84:d7:b5:e0:3b:2e:1b:ad:c5:dd:8f:32:de:73:3b:
                    82:e8:8a:05:1b:43:ee:6f:3c:de:f0:57:34:1f:ec:
                    ed:4b:42:b9:d7:b7:c0:76:10:84:e7:03:c9:cf:73:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6A:6F:7E:90:C2:43:69:BF:93:5F:08:5F:81:AB:09:3B:C1:E3:7B
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:29:61:b4:e4:bb:ef:e3:bc:50:7e:6e:e6:2a:35:61:ba:f6:
         fb:e7:76:62:14:c8:4f:80:80:df:90:94:52:d6:20:bf:15:85:
         88:a0:fa:5b:9c:7f:f9:b3:9e:8b:36:42:a6:09:59:08:43:cf:
         dd:1f:c7:76:45:0a:af:6d:b8:3f:44:cc:8b:16:47:44:2d:db:
         60:ad:e6:f2:45:3c:c2:18:85:3f:71:88:dc:ba:30:f7:03:7b:
         2c:af:9c:d4:88:ad:02:df:66:36:f7:0a:9d:ad:c4:da:16:11:
         b3:00:86:b5:60:d1:0f:21:61:b1:eb:e1:8f:5d:5d:b8:db:d2:
         1e:f2:d5:f8:84:c8:4f:12:53:4e:94:1a:34:de:d5:2e:2a:86:
         e1:e8:4a:4f:29:8c:96:01:c5:c7:aa:7d:68:bf:e0:43:33:c0:
         c6:89:41:19:81:da:5f:31:71:6e:dc:01:51:9c:98:8a:56:16:
         66:49:fb:24:d0:74:a8:9f:8b:41:f6:94:b0:d4:f6:d6:25:32:
         8c:6a:c0:73:e6:b0:e7:b4:b9:85:12:6d:77:d5:2c:ee:47:3e:
         5d:bd:5f:8f:fe:7a:34:00:9a:95:75:19:10:ea:f1:b1:f6:ea:
         d3:f2:ae:cb:86:7f:71:42:7c:74:4e:52:32:88:36:91:ef:d2:
         fe:24:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:49 2025 by rpki-client