Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
File:                     m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft (raw, json)
Hash identifier:          gc4k8nyx0bg3lP0OaOYG7ilSCT+LOCfliETyARIEzvg=
Subject key identifier:   57:7B:31:71:69:B9:F8:F1:95:70:97:73:EC:D9:7A:16:66:26:FF:69
Authority key identifier: 9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76
Certificate issuer:       /CN=F3674116AF/serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
Certificate serial:       0580
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
Manifest number:          057E
Signing time:             Sat 23 Aug 2025 02:39:55 +0000
Manifest this update:     Sat 23 Aug 2025 02:39:54 +0000
Manifest next update:     Mon 25 Aug 2025 02:39:54 +0000
Files and hashes:         1: m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl (hash: gK+AuHIrAbK9ui6FTMk15FSWawH2dq/RXsaXDyh9Hv4=)
                          2: 51CD22A06E3F11EC8BCA63C15A40D577.roa (hash: E5rUiTU+lgeiOsadbVjO4CnL7A4nHG6PajRp8I6dh5k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674116AF, serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
        Validity
            Not Before: Aug 23 02:39:54 2025 GMT
            Not After : Aug 25 02:39:54 2025 GMT
        Subject: CN=68a929fb-c49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:81:bd:d6:df:29:26:bb:02:24:5a:84:3e:
                    22:eb:89:1f:ed:d2:2a:d1:a7:a5:47:8b:c6:79:ef:
                    38:60:53:cd:ae:9b:2a:1e:b3:48:2d:b0:ae:32:5a:
                    be:e8:00:aa:97:dd:3c:ef:d1:9d:fc:19:b6:30:ee:
                    0a:78:bf:9c:8d:32:f9:57:f3:15:36:28:3d:46:e8:
                    4d:dc:a8:e6:25:d9:59:31:4a:25:77:59:f7:84:2a:
                    35:2b:fe:db:3a:2b:a3:aa:47:1b:02:fe:28:ae:e1:
                    a7:f4:95:d0:cf:f1:29:23:ac:a7:16:a3:e5:cc:e0:
                    31:d5:d1:fc:a5:4b:05:64:25:8a:7a:22:d6:7c:e9:
                    34:7e:13:91:b6:89:12:51:ba:56:c8:b8:7c:b4:68:
                    85:2a:57:7b:09:41:3e:14:ba:5c:2d:77:7e:35:b6:
                    92:2c:1d:c3:1e:85:fa:9f:3d:ba:40:66:74:99:b6:
                    55:df:8c:1d:dd:d8:50:dd:a6:02:71:69:31:a9:ff:
                    37:06:97:64:15:d2:8b:39:23:2b:2c:f4:d2:4b:f7:
                    15:dd:b0:f7:78:1d:b0:da:99:5e:2a:5c:98:fb:bf:
                    1a:bc:29:8d:39:0a:4e:5f:46:88:04:98:4b:68:74:
                    87:9a:89:20:aa:f1:46:c1:c5:d4:e0:01:4c:c8:34:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7B:31:71:69:B9:F8:F1:95:70:97:73:EC:D9:7A:16:66:26:FF:69
            X509v3 Authority Key Identifier:
                keyid:9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d3:74:29:05:9f:aa:da:66:de:61:bc:ad:8f:26:60:73:0b:
         69:52:c9:d9:d9:96:a6:a3:3f:c1:16:3f:69:73:c3:ff:24:ee:
         35:57:ae:ab:e7:77:e9:cf:2c:38:20:13:69:8d:b3:28:15:bb:
         78:88:aa:3c:1e:39:ac:3c:17:c0:0e:ac:2f:8e:c1:7c:86:03:
         04:3e:64:2c:a1:e2:93:4c:6a:d2:4a:3f:f5:27:79:9a:84:ad:
         56:81:dc:9f:f2:39:f6:f9:5f:a2:e2:c5:20:be:e8:66:9c:9a:
         35:0f:a5:6e:2a:3d:5f:ab:84:34:11:72:dd:74:d1:20:7f:fd:
         80:5d:49:69:33:f6:68:4f:86:78:87:8a:4f:ff:0f:de:16:13:
         13:4d:23:ab:f9:7f:03:c7:33:3c:69:bc:11:42:6d:eb:87:3f:
         a6:3e:92:96:c4:22:33:d1:e9:50:f5:b2:05:cd:0d:38:b8:d0:
         38:35:7d:95:aa:3f:37:bb:ee:81:27:35:0b:35:e1:28:f1:b3:
         82:5b:88:96:fb:53:84:0a:db:ca:ef:14:3c:95:35:11:7d:51:
         92:01:c3:76:e2:4d:82:8e:e5:f9:a3:e6:de:86:9c:36:91:8f:
         83:79:ed:8f:b1:56:4f:59:53:2d:cc:2b:62:3a:f8:2a:8f:4b:
         4d:e3:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:11 2025 by rpki-client