Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          UfT0e8lJAa20AKxmlwLebhYJfLWSO2eOArbEDfuxrRw=
Subject key identifier:   4B:C5:9C:60:6E:31:B7:02:B1:C4:36:0D:D6:91:E0:92:6F:F0:3C:7A
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       0683
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          067D
Signing time:             Mon 20 Oct 2025 02:12:43 +0000
Manifest this update:     Mon 20 Oct 2025 02:12:42 +0000
Manifest next update:     Wed 22 Oct 2025 02:12:42 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: /oSq9tqeXoNL0MpQdyNYFuToBsVTvxg/S5QzEksylA8=)
                          2: 1D79094AD6B211EFB2D3FF42762E951A.roa (hash: DubCazr+DZeeKepCVu6sjSupYBoZCqIo6H/IBZvf+PU=)
                          3: FB1FEEF4D6B111EF8099CF40762E951A.roa (hash: +7phxm5TzkZRyeFGhR37ALd4AEcaf9TKaQBnWBb/gF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Oct 20 02:12:42 2025 GMT
            Not After : Oct 22 02:12:42 2025 GMT
        Subject: CN=68f59a9b-c474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:ee:a1:d0:8e:d1:1c:76:8c:e7:97:f5:8e:
                    8f:09:35:26:7b:63:88:22:e0:d0:c9:ee:49:3b:5f:
                    be:43:2e:5e:f8:cd:ce:df:6f:34:3d:b4:19:5d:c4:
                    6d:be:84:30:3d:e8:bf:f9:72:24:5a:42:7f:89:28:
                    48:64:f3:9e:87:c2:b5:b5:61:a7:87:aa:e7:bb:a8:
                    fc:da:bd:80:c6:09:90:a8:ea:46:bb:7c:9b:28:cd:
                    74:1b:12:d1:a7:df:ee:6c:24:5d:f0:3c:f6:ec:51:
                    cb:64:3b:8d:34:e2:0e:3b:25:8d:af:ca:b4:4c:6d:
                    4a:55:8b:cb:6f:1e:4a:e8:5f:e6:e5:43:a9:0f:b8:
                    91:c1:60:91:95:2a:ef:60:6b:02:87:07:0b:28:bb:
                    2e:2a:10:28:4b:38:3e:33:13:ef:55:d1:f7:1c:20:
                    3c:33:88:60:0d:7e:27:0c:b8:d4:12:75:8f:99:7c:
                    42:30:8c:33:30:70:63:2d:08:45:65:9c:e1:76:a5:
                    a7:d4:40:32:21:d3:a1:0a:99:b1:97:ee:51:1f:8d:
                    e8:41:e7:f5:65:d4:88:54:0f:8f:36:08:22:84:ae:
                    19:64:75:3d:2c:b2:82:46:ed:5a:da:cb:1d:46:e8:
                    b8:2d:97:55:5b:fe:e4:9d:e8:1d:d1:a3:e5:b7:5e:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C5:9C:60:6E:31:B7:02:B1:C4:36:0D:D6:91:E0:92:6F:F0:3C:7A
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:f1:67:69:09:e3:f6:47:52:1c:d7:0e:39:76:c9:f8:e5:
         1f:06:a9:e5:7a:00:ed:fd:a3:bd:4e:5a:42:0f:21:db:97:8d:
         47:0d:94:89:3f:98:b7:63:a3:e8:aa:6a:db:41:e6:5b:be:94:
         0b:af:d4:39:46:85:26:80:f3:5d:42:b2:10:8c:fe:dd:63:8b:
         ad:66:4e:b5:a6:eb:83:e8:bd:de:fa:34:e6:de:be:f2:9a:22:
         e0:ec:97:11:30:a1:8f:08:5f:6f:5e:62:d8:a5:16:51:80:5d:
         ca:63:2e:84:a8:a4:3a:7a:45:98:15:8d:f9:d1:45:ab:57:c2:
         47:70:f2:89:1e:74:0b:89:5f:41:87:0f:8e:2f:3a:df:3e:19:
         32:09:1e:37:27:ca:48:70:a3:d6:59:ac:f3:d1:ac:62:93:5b:
         ca:86:de:00:33:c9:42:20:21:2c:1b:29:91:b9:e5:68:7c:2c:
         80:06:6d:71:97:b4:d5:74:68:14:94:47:ba:30:85:fe:e7:d1:
         47:5e:77:a2:27:06:4b:17:ae:29:58:82:22:38:12:f5:52:36:
         4a:5f:b7:08:2a:f6:e4:27:48:00:6a:df:35:b4:bf:e7:80:2a:
         83:35:f0:de:17:88:88:d5:ba:b7:93:bf:84:0d:17:e3:90:52:
         1c:76:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:41 2025 by rpki-client