Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          0SzH5bsvQhzOJKfISPFG5oGUR2IYtMFkuwzgetMS4PU=
Subject key identifier:   15:19:4A:8A:05:77:D3:C0:18:27:10:81:04:B3:A1:29:19:5D:41:9D
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       0319
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          0319
Signing time:             Sat 23 Aug 2025 03:50:20 +0000
Manifest this update:     Sat 23 Aug 2025 03:50:19 +0000
Manifest next update:     Mon 25 Aug 2025 03:50:19 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: nqam5qHZwIpSNB2znTX1rbPv0ZtskgVlPzi93CJ2D9o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: Aug 23 03:50:19 2025 GMT
            Not After : Aug 25 03:50:19 2025 GMT
        Subject: CN=68a93a7c-6a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:51:24:16:8d:0e:55:19:ed:26:b7:58:2a:
                    7b:39:7d:2e:73:ad:bf:62:6c:87:06:8c:68:f0:51:
                    f8:c9:08:4a:be:fc:61:a5:21:d1:74:33:75:0b:51:
                    f6:42:4c:eb:c5:81:17:8a:6d:f8:5f:c8:96:0c:81:
                    b7:f3:7a:9f:36:90:e1:bf:9e:ee:ba:ab:da:fe:b4:
                    28:7f:ae:e3:e9:63:9f:76:b6:52:0a:d3:f0:af:56:
                    1c:78:1f:38:d4:bd:0c:fb:c3:e4:40:a0:c9:52:9d:
                    65:e4:32:59:e2:b0:94:c0:8b:8a:33:15:9f:33:c1:
                    f7:24:34:b6:61:89:1d:e5:40:d3:ad:91:33:37:cd:
                    3a:16:75:1c:7d:c4:9e:14:a4:b6:b3:19:cb:ae:eb:
                    35:2a:f0:3f:0c:bc:ec:84:13:b4:ab:f3:78:0e:31:
                    9a:19:58:a1:09:bc:77:30:c1:89:8f:5e:06:5e:8f:
                    8d:e2:d4:42:98:bb:1e:67:7e:c8:77:5b:1f:c8:2c:
                    e6:64:75:f2:ef:1f:af:0b:4f:a3:ef:04:f4:30:07:
                    c9:25:02:70:1f:2e:ab:b0:9d:7b:3d:d9:93:6a:81:
                    1e:07:c6:84:4a:39:27:59:87:10:03:7d:ad:92:c9:
                    9a:d9:de:e9:6a:37:b4:82:84:b2:98:11:d8:2f:24:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:4A:8A:05:77:D3:C0:18:27:10:81:04:B3:A1:29:19:5D:41:9D
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1d:50:32:f6:a0:b9:3d:b8:ba:3d:c1:5e:e8:06:b7:45:b2:
         62:48:6c:8d:f3:ce:42:fc:ce:44:53:07:65:b1:f6:32:d2:33:
         ba:b6:f6:75:80:61:a6:63:bd:4c:ab:a5:c2:ca:60:8e:fc:8d:
         41:bf:8a:0b:14:8f:c9:eb:a8:ea:aa:86:e9:41:14:0d:74:c7:
         8c:08:e8:75:a4:47:ac:e7:49:cb:58:a1:38:7a:84:03:a9:e2:
         83:9f:40:7b:24:e5:eb:01:d4:a7:16:92:52:7c:e6:3f:ca:ae:
         83:57:de:cd:65:8c:9f:3c:03:fd:97:aa:94:62:24:53:45:52:
         8a:99:a8:e9:b8:fa:f8:bf:cc:0f:b2:8b:8e:15:62:52:af:c7:
         3e:58:94:16:ea:57:80:f6:d0:55:cc:d6:ba:da:2c:2e:56:e1:
         6b:95:b3:ce:07:e8:2f:39:04:f2:35:73:5f:3e:e7:70:70:6a:
         1a:88:00:60:7e:1d:69:f4:9c:3f:21:3b:1c:e5:25:23:aa:b2:
         ec:e0:ff:2e:74:0c:c6:0a:97:8c:00:1b:77:3e:46:6f:74:ad:
         c4:50:39:0f:05:cb:ca:66:b2:94:88:5f:ab:2b:af:12:51:8e:
         17:ec:42:5f:ad:e4:22:94:75:3e:40:a5:47:bd:70:3f:42:a0:
         ce:be:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:20 2025 by rpki-client