Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
File:                     PTg51e4dl7STFVYoMdygQJMxSB8.mft (raw, json)
Hash identifier:          F+Hrz959jmELpNNzdPlfAuIVxSK2cp8Y65CRigj5urU=
Subject key identifier:   98:05:5E:29:61:9B:8B:E4:76:C2:4E:BE:DB:09:44:FD:14:D5:74:66
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Certificate issuer:       /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial:       08AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
Manifest number:          089D
Signing time:             Sat 23 Aug 2025 01:41:24 +0000
Manifest this update:     Sat 23 Aug 2025 01:41:23 +0000
Manifest next update:     Mon 25 Aug 2025 01:41:23 +0000
Files and hashes:         1: PTg51e4dl7STFVYoMdygQJMxSB8.crl (hash: vRHjBWAM4nXFIEKJi7vchbYjNGWer4ZzOl2Zta2ZLCw=)
                          2: 4B570182DD7E11EF953B3052762E951A.roa (hash: cnNWOgAP08vu5OxVNv8TRnI6O25BJrmogxuLKnzytb8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36763E5AF, serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
        Validity
            Not Before: Aug 23 01:41:23 2025 GMT
            Not After : Aug 25 01:41:23 2025 GMT
        Subject: CN=68a91c44-8afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:c3:a7:4a:74:22:a5:4b:94:22:7b:35:e6:
                    01:33:2a:db:aa:e3:bd:d0:90:90:fe:d0:a4:1f:24:
                    16:d0:50:1d:fc:20:96:ae:4d:b6:ea:df:3b:bb:68:
                    af:11:0c:63:16:60:32:82:ef:0c:26:cf:1a:ee:1e:
                    5a:0c:17:08:d3:a2:c4:d5:10:8f:9b:39:0d:a0:b7:
                    db:b8:69:ac:67:6b:ed:fa:94:2e:53:ab:88:b0:c2:
                    a4:7a:5b:84:f5:e0:1d:fb:e4:d3:1b:35:67:1a:a6:
                    fc:64:5f:e3:be:f6:0b:af:aa:9e:b4:33:b4:27:c7:
                    5d:df:ac:bf:d9:aa:ad:5d:3a:99:c6:6d:3a:02:1f:
                    34:9d:5b:72:e4:0b:6b:18:f3:d7:45:b9:01:cc:69:
                    5d:f9:9f:0a:e1:3a:cc:7b:6c:d2:04:b4:29:e3:67:
                    ae:c2:fb:5c:09:07:1e:0d:7f:91:c6:2b:be:5c:3d:
                    06:0b:81:55:86:6f:7c:0b:5c:75:e0:98:f1:ed:2c:
                    3a:f8:59:3c:35:b8:ad:1a:97:35:c7:be:52:36:f7:
                    b2:74:76:3c:c3:3b:74:3b:af:e6:a0:90:8c:eb:62:
                    f8:16:28:be:49:ca:db:62:94:65:79:6b:42:30:c6:
                    63:2a:77:37:70:e4:3f:40:d6:d0:e5:b2:2e:bc:b6:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:05:5E:29:61:9B:8B:E4:76:C2:4E:BE:DB:09:44:FD:14:D5:74:66
            X509v3 Authority Key Identifier:
                keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:48:47:e3:17:00:13:ba:3f:a6:de:62:a2:81:29:9e:d7:b2:
         d5:9b:90:36:90:7e:05:1c:97:a6:0f:e3:33:45:c3:9d:a7:8e:
         98:ec:3a:c9:06:58:15:cb:ad:a4:f7:22:cd:23:18:89:b1:61:
         6f:12:52:69:5c:5f:12:08:be:e7:9b:68:0f:4d:83:d5:e1:48:
         75:26:9e:24:87:d3:0b:4b:20:73:a6:c5:04:32:4e:84:95:b0:
         72:42:9a:fb:35:e7:0e:9f:08:86:d4:4b:4c:a6:bd:6d:61:4f:
         0d:9c:c0:1a:c7:10:de:dc:79:f5:12:54:f1:69:33:4e:2a:b2:
         20:62:71:e4:e2:03:79:e0:e0:e4:12:64:a9:47:48:ee:c4:3f:
         25:b5:96:f9:1e:30:32:e9:3a:ce:2d:47:f1:0c:d1:cf:d9:7d:
         7a:82:78:8d:9b:66:0a:1f:84:2d:f9:b9:0e:81:1e:51:64:36:
         1d:8a:2a:d2:d7:f4:40:cc:48:12:94:c1:b4:89:72:cb:0e:9f:
         d0:ed:ad:d5:1a:2e:24:68:54:01:b4:d1:fa:a4:b0:84:71:51:
         d7:5b:c9:b3:9b:75:b9:8a:37:b5:e6:4e:04:36:7c:2b:21:52:
         7d:bc:54:d9:96:50:69:71:ca:b5:2b:fd:d1:f0:f7:6c:a8:92:
         1c:b9:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:31 2025 by rpki-client