Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
File:                     dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft (raw, json)
Hash identifier:          qWo1GkE7YYN+CL9l2H/KfRQ5o/JoTQFoTjj3Qu4cdOE=
Subject key identifier:   5D:7C:5C:B9:EA:48:84:71:30:E8:6A:C1:41:58:C4:65:46:DF:C5:A0
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Certificate issuer:       /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial:       41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
Manifest number:          3D
Signing time:             Sat 23 Aug 2025 05:21:24 +0000
Manifest this update:     Sat 23 Aug 2025 05:21:23 +0000
Manifest next update:     Mon 25 Aug 2025 05:21:23 +0000
Files and hashes:         1: dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl (hash: u9TBNesQHkDYK1n8NgkBLujWhuuJuamRNj7r67tRG3w=)
                          2: 845849AA629911F094123B7FDAE4EC9C.roa (hash: Yquy7lg+89nLssAsEAQYTmSrAV7dfqopFLqC+l9lG4Q=)
                          3: 0CCEA6DC5E9211F08D7B5BC0DAE4EC9C.roa (hash: mAyYLRcyIUE3TElt1ycaBN45k+kC6zc7xFNJFD0mN6o=)
                          4: 50FB913E629911F098850F7FDAE4EC9C.roa (hash: eDO1JULENP2DvOHSotlUtwQVGoJC7gZEaQKOXc6qaIw=)
                          5: 8F43C038568211F0A084117BDAE4EC9C.roa (hash: hs3YcRNfxTcnmTfPtPelb4H6GgCa1TzrxcefG9XnVyQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
        Validity
            Not Before: Aug 23 05:21:23 2025 GMT
            Not After : Aug 25 05:21:23 2025 GMT
        Subject: CN=68a94fd4-93f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:f9:10:81:61:c6:1e:de:05:b7:9f:d9:2e:
                    51:60:5b:86:65:6c:4a:8f:b1:66:e0:9b:bb:b6:3b:
                    47:44:75:45:f2:42:a9:7d:64:67:ca:d1:70:fe:bf:
                    74:00:81:63:de:e5:0d:71:76:fa:21:f2:62:fc:1c:
                    9e:57:b7:dc:bd:7f:e4:98:48:de:75:e0:54:40:32:
                    aa:52:ca:16:42:64:12:d4:7a:01:e2:35:20:37:d5:
                    2d:d6:50:e3:c2:56:b0:54:46:64:3d:ae:f4:43:af:
                    aa:91:f6:c5:79:b0:5a:fa:3c:bb:fe:a1:40:cd:b6:
                    a4:8b:3c:94:cc:67:d4:4d:de:20:b3:22:e2:15:32:
                    db:90:8e:4d:45:33:01:f5:9f:f0:9c:d5:54:a3:6c:
                    18:1b:0d:fd:20:23:74:2b:32:2b:c7:26:e8:38:d7:
                    ea:30:1d:82:d2:f6:7d:e7:99:63:56:26:35:a8:c7:
                    f8:95:35:f7:41:c8:a1:e3:03:63:97:3f:e9:ea:95:
                    60:f2:4d:25:88:c9:c7:c0:40:43:9a:10:a2:c8:94:
                    9b:8e:77:2c:52:0d:ba:69:5d:5b:90:3b:b8:3e:98:
                    8e:0e:e6:ac:f5:89:13:31:52:13:df:f2:2f:b1:8d:
                    ae:6e:cb:8a:c5:24:c0:d6:01:34:70:d8:4a:25:dd:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7C:5C:B9:EA:48:84:71:30:E8:6A:C1:41:58:C4:65:46:DF:C5:A0
            X509v3 Authority Key Identifier:
                keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:13:b4:23:01:a5:dd:0d:1f:9d:97:fc:a5:39:73:bc:22:
         d9:c6:6c:e0:70:1f:21:82:11:62:ff:02:5a:42:30:87:dc:79:
         56:8b:a1:7a:a4:da:61:16:11:f6:33:89:2b:64:eb:4f:70:53:
         e2:85:e4:d7:57:97:d9:3d:f2:a0:aa:3c:0c:9c:13:b1:c5:23:
         60:f3:25:38:36:81:7b:73:a7:e3:5c:c8:2a:30:e2:b8:e4:bb:
         08:5b:eb:5b:50:d3:0f:4e:7a:6b:c6:85:af:97:4e:07:95:ad:
         bf:90:4e:ab:95:34:ae:2e:3d:42:85:c8:e2:57:7e:d1:ee:f3:
         e6:ce:85:7d:46:6b:9a:6f:d6:19:85:67:2d:c4:9a:ff:65:fd:
         ba:35:77:32:c3:a7:39:d4:b6:20:db:82:fa:71:ca:ee:f0:e3:
         6d:b4:67:c0:f1:fe:c5:39:c9:d0:31:64:8f:43:cd:97:40:82:
         6f:b2:ac:e8:e3:27:93:a8:8e:0b:b1:4c:55:fa:9e:1c:aa:81:
         98:13:c2:b5:a9:28:85:87:b9:1b:4a:39:7b:00:8e:c9:f8:c8:
         3a:c7:84:21:fd:5f:32:9c:56:d7:fe:72:2d:d8:22:54:b6:58:
         5f:4e:e9:1e:ee:bb:13:38:99:c0:db:1a:49:fb:0a:cd:7f:97:
         2d:60:fb:b4
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBQTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NjEzNEFGMTEwLwYDVQQFEyg3NEIwM0I4RkQ4RjUzQkVGNDg4N0I3ODY5OEY5RUNB
QjFCMUY2OUIwMB4XDTI1MDgyMzA1MjEyM1oXDTI1MDgyNTA1MjEyM1owGDEWMBQG
A1UEAxMNNjhhOTRmZDQtOTNmMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOZa+RCBYcYe3gW3n9kuUWBbhmVsSo+xZuCbu7Y7R0R1RfJCqX1kZ8rRcP6/
dACBY97lDXF2+iHyYvwcnle33L1/5JhI3nXgVEAyqlLKFkJkEtR6AeI1IDfVLdZQ
48JWsFRGZD2u9EOvqpH2xXmwWvo8u/6hQM22pIs8lMxn1E3eILMi4hUy25COTUUz
AfWf8JzVVKNsGBsN/SAjdCsyK8cm6DjX6jAdgtL2feeZY1YmNajH+JU190HIoeMD
Y5c/6eqVYPJNJYjJx8BAQ5oQosiUm453LFINumldW5A7uD6Yjg7mrPWJEzFSE9/y
L7GNrm7LisUkwNYBNHDYSiXdwCcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRdfFy5
6kiEcTDoasFBWMRlRt/FoDAfBgNVHSMEGDAWgBR0sDuP2PU770iHt4aY+eyrGx9p
sDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzYxMzQvMzM2MkMxQUE1NjdFMTFGMEIwMTRGOURFREFFNEVDOUMvZExBN2o5
ajFPLTlJaDdlR21QbnNxeHNmYWJBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZExBN2o5ajFPLTlJaDdlR21QbnNxeHNmYWJBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3NjEzNC8zMzYyQzFBQTU2N0UxMUYwQjAxNEY5REVEQUU0
RUM5Qy9kTEE3ajlqMU8tOUloN2VHbVBuc3F4c2ZhYkEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAC8hE7QjAaXdDR+dl/ylOXO8ItnGbOBw
HyGCEWL/AlpCMIfceVaLoXqk2mEWEfYziStk609wU+KF5NdXl9k98qCqPAycE7HF
I2DzJTg2gXtzp+NcyCow4rjkuwhb61tQ0w9OemvGha+XTgeVrb+QTquVNK4uPUKF
yOJXftHu8+bOhX1Ga5pv1hmFZy3Emv9l/bo1dzLDpznUtiDbgvpxyu7w4220Z8Dx
/sU5ydAxZI9DzZdAgm+yrOjjJ5OojguxTFX6nhyqgZgTwrWpKIWHuRtKOXsAjsn4
yDrHhCH9XzKcVtf+ci3YIlS2WF9O6R7uuxM4mcDbGkn7Cs1/ly1g+7Q=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:25 2025 by rpki-client