Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File:                     xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier:          ze/led/oiGaUGhYonaTpSlaVLUc7SNDcQ5Vi8tpR4jE=
Subject key identifier:   DB:5F:A8:01:EE:AE:CA:CB:53:49:A3:8A:5D:11:07:CF:0A:A6:CE:5A
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer:       /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial:       05A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number:          05A7
Signing time:             Sun 29 Jun 2025 02:32:46 +0000
Manifest this update:     Sun 29 Jun 2025 02:32:46 +0000
Manifest next update:     Tue 01 Jul 2025 02:32:46 +0000
Files and hashes:         1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: gWkWYI/McBgJm6sNv3hXwNONiwrVH5MqPJFxYgLPcNQ=)
                          2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
        Validity
            Not Before: Jun 29 02:32:46 2025 GMT
            Not After : Jul  1 02:32:46 2025 GMT
        Subject: CN=6860a5ce-6b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:41:63:9f:72:a2:54:ed:7b:9e:c0:b6:9b:
                    2d:57:90:cb:fd:b7:d9:24:6d:f1:e6:3d:8b:de:ba:
                    d7:64:ec:38:9c:d4:79:c8:62:1a:86:89:b1:8f:07:
                    c7:7b:6e:eb:a5:2c:8f:dd:74:14:a1:09:12:49:3f:
                    9f:28:d5:2e:14:d0:0f:80:e4:f4:db:b1:dd:02:bf:
                    9c:6c:11:df:99:ae:2e:f9:28:ff:62:97:72:04:c1:
                    2f:a4:0d:f0:05:96:3f:bc:2f:4e:95:3c:33:f7:28:
                    bc:51:de:a7:06:9a:b3:58:a4:5e:62:b7:28:b6:c3:
                    44:73:4b:69:87:f3:54:29:dd:52:1f:84:c9:31:cf:
                    01:4f:cc:4b:92:2d:da:e8:40:e7:92:c4:cd:59:5e:
                    4c:35:e8:4c:33:69:15:05:a9:45:de:4a:5e:87:03:
                    72:00:60:1e:5c:6c:1b:28:e9:f7:31:55:99:1c:43:
                    ed:8e:1d:4e:e6:27:2c:e2:f5:45:b8:f9:41:d4:82:
                    42:6b:e2:ef:57:dc:af:c6:b2:6b:1d:89:7a:b3:6e:
                    c4:7d:5c:16:af:51:a0:7d:32:a3:5a:85:d8:20:0d:
                    ac:3b:1c:2b:aa:7c:84:24:92:37:83:dc:eb:4c:da:
                    4c:ec:43:ba:40:b6:84:85:74:2f:27:fc:2f:33:52:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5F:A8:01:EE:AE:CA:CB:53:49:A3:8A:5D:11:07:CF:0A:A6:CE:5A
            X509v3 Authority Key Identifier:
                keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:9e:42:65:50:6a:d3:81:46:e2:f5:38:a1:63:7c:e0:a6:
         a3:d1:55:d6:2c:6e:10:29:18:a1:08:e1:e4:60:14:8f:23:c7:
         bf:4b:d2:90:1a:c7:7a:1f:2b:15:cd:be:7d:78:02:82:39:b4:
         cc:69:57:24:a9:15:6b:fd:b9:b3:ab:f2:10:31:6e:2d:9d:60:
         73:69:3a:88:e9:0b:e8:ea:38:c2:4f:0d:e5:69:5b:b0:7c:be:
         7d:2e:26:0e:a2:b1:09:36:a2:57:14:1f:e1:bd:2b:27:36:58:
         0d:90:2c:34:f5:b8:44:76:53:d7:75:7f:25:a9:2c:52:22:ef:
         a9:93:e8:56:3f:7c:b3:7d:f5:dd:26:4b:fd:68:da:7c:ac:a8:
         2c:2e:9c:3b:30:21:17:92:76:a0:2b:14:2d:6f:9a:c1:04:2a:
         e3:ca:28:39:79:14:54:0e:d7:83:19:fb:c8:65:b8:15:1d:68:
         23:8f:f0:88:02:36:c2:8f:5e:a7:df:31:25:36:d8:d8:bd:3c:
         c6:57:c4:76:b0:2c:45:22:99:9b:fb:88:a4:0a:bf:10:5c:d7:
         5b:53:e6:ae:bf:cf:63:65:6e:7f:ba:b0:46:bb:5b:6d:72:44:
         20:b3:b2:31:e6:44:96:3e:be:8d:c3:39:3b:3c:d2:f0:f0:f9:
         d4:06:70:79
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Njc4ODVBRjExMC8GA1UEBRMoQzRBNzk2MUUwMDJBQTg5RDUwQkVBMjI1MkQ0Rjk0
QjFFRUY2NkEyMzAeFw0yNTA2MjkwMjMyNDZaFw0yNTA3MDEwMjMyNDZaMBgxFjAU
BgNVBAMTDTY4NjBhNWNlLTZiNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyU0Fjn3KiVO17nsC2my1XkMv9t9kkbfHmPYveutdk7Dic1HnIYhqGibGP
B8d7buulLI/ddBShCRJJP58o1S4U0A+A5PTbsd0Cv5xsEd+Zri75KP9il3IEwS+k
DfAFlj+8L06VPDP3KLxR3qcGmrNYpF5ityi2w0RzS2mH81Qp3VIfhMkxzwFPzEuS
LdroQOeSxM1ZXkw16EwzaRUFqUXeSl6HA3IAYB5cbBso6fcxVZkcQ+2OHU7mJyzi
9UW4+UHUgkJr4u9X3K/GsmsdiXqzbsR9XBavUaB9MqNahdggDaw7HCuqfIQkkjeD
3OtM2kzsQ7pAtoSFdC8n/C8zUtMBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU21+o
Ae6uystTSaOKXREHzwqmzlowHwYDVR0jBBgwFoAUxKeWHgAqqJ1QvqIlLU+Use72
aiMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY3ODg1LzJGNzMyNDkwMDY3ODExRUNCNUQ1OTQ1QUQ4QTAxNENFL3hLZVdI
Z0FxcUoxUXZxSWxMVS1Vc2U3MmFpTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hLZVdIZ0FxcUoxUXZxSWxMVS1Vc2U3MmFpTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Njc4ODUvMkY3MzI0OTAwNjc4MTFFQ0I1RDU5NDVBRDhB
MDE0Q0UveEtlV0hnQXFxSjFRdnFJbExVLVVzZTcyYWlNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAApZ5CZVBq04FG4vU4oWN84Kaj0VXW
LG4QKRihCOHkYBSPI8e/S9KQGsd6HysVzb59eAKCObTMaVckqRVr/bmzq/IQMW4t
nWBzaTqI6Qvo6jjCTw3laVuwfL59LiYOorEJNqJXFB/hvSsnNlgNkCw09bhEdlPX
dX8lqSxSIu+pk+hWP3yzffXdJkv9aNp8rKgsLpw7MCEXknagKxQtb5rBBCrjyig5
eRRUDteDGfvIZbgVHWgjj/CIAjbCj16n3zElNtjYvTzGV8R2sCxFIpmb+4ikCr8Q
XNdbU+auv89jZW5/urBGu1ttckQgs7Ix5kSWPr6Nwzk7PNLw8PnUBnB5
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:47:49 2025 by rpki-client