Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
File:                     GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft (raw, json)
Hash identifier:          T6Iswp++vsrB4yrzRH0PXv+RMWiYf/hA1krRjx+xhAM=
Subject key identifier:   F5:69:C8:7C:24:70:0B:58:19:5E:2B:4C:C6:F1:BC:10:EA:A3:74:4E
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Certificate issuer:       /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
Manifest number:          21
Signing time:             Sat 23 Aug 2025 05:25:07 +0000
Manifest this update:     Sat 23 Aug 2025 05:25:06 +0000
Manifest next update:     Mon 25 Aug 2025 05:25:06 +0000
Files and hashes:         1: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl (hash: XE0HGEo1bLm/5XtQI7jQNW8ld3pwiGTX471gwYXc23g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
        Validity
            Not Before: Aug 23 05:25:06 2025 GMT
            Not After : Aug 25 05:25:06 2025 GMT
        Subject: CN=68a950b3-ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:c8:1f:86:84:4e:34:e9:d7:7f:36:58:b2:
                    13:e7:05:d0:82:f4:1d:8c:ba:c7:43:94:94:d1:0e:
                    bc:90:bb:85:ac:92:2f:7e:23:c9:0b:3b:69:91:78:
                    d5:a6:53:c0:ba:03:68:c2:ab:86:91:58:46:f9:54:
                    33:bf:5d:a4:da:10:43:9a:78:9a:d7:50:e8:ad:99:
                    e8:b4:99:66:0a:7f:84:83:5d:3d:74:01:97:4d:ef:
                    8a:22:0f:70:b3:0d:80:d5:e8:1a:0b:88:0a:31:70:
                    40:73:c0:a9:3d:4c:3d:9b:81:03:7b:c3:6f:8f:0c:
                    2f:53:1b:7b:8d:f3:aa:10:db:7e:bf:46:e6:58:f8:
                    67:58:7b:e9:bb:22:b7:be:f3:a8:09:f4:0a:4b:11:
                    fe:ab:99:e9:eb:c4:0f:8d:da:e8:c9:50:de:8a:34:
                    f7:d6:ac:8f:c8:30:5c:39:ec:76:c9:6d:49:46:65:
                    14:e0:17:8d:3a:85:a4:f6:2d:7a:bd:20:4a:27:ba:
                    ab:61:a7:13:38:c0:96:c7:6a:f4:89:43:46:5a:c1:
                    b0:ac:98:95:73:a6:06:7b:d0:de:2e:18:9a:8a:3f:
                    a4:95:3d:b9:6b:0a:4e:39:77:80:e0:3f:e1:6e:d8:
                    34:6e:f3:0b:e1:d6:d3:47:26:2b:1f:6b:35:77:70:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:69:C8:7C:24:70:0B:58:19:5E:2B:4C:C6:F1:BC:10:EA:A3:74:4E
            X509v3 Authority Key Identifier:
                keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:06:2f:a7:50:12:69:4d:79:c6:f6:0e:13:f8:ce:18:1c:a9:
         77:b8:5a:96:16:70:19:38:32:c9:13:81:13:33:51:f9:74:22:
         c5:1d:3c:f7:39:7b:d9:56:16:85:13:8e:7c:fa:1e:c3:d0:bc:
         47:dc:5f:d3:24:ed:ba:d7:fe:57:22:46:e1:45:98:a1:f3:ac:
         20:73:55:11:11:56:34:f8:f8:34:68:5f:54:6f:dc:c9:c5:c5:
         a3:a4:96:52:58:e9:8f:68:31:2a:0c:22:61:ea:5f:be:91:2c:
         30:f5:58:27:84:59:08:0f:7b:e0:d8:96:cd:fe:d9:3b:fe:f6:
         cc:09:c1:d0:98:9d:6a:be:d2:6e:b1:d4:91:84:20:18:15:d5:
         fc:f9:8b:b8:82:e7:1a:49:ac:95:7d:2f:75:20:0e:5a:a4:fd:
         ad:7f:d1:e0:f8:87:be:78:dd:ba:b3:30:d7:62:8e:23:06:86:
         d9:82:0a:fd:10:5d:79:ed:06:f5:e7:f7:e3:42:21:20:21:5a:
         31:98:e3:93:e4:57:ad:94:22:51:41:a4:c0:4d:17:ae:6f:0d:
         d2:b2:1e:98:bd:99:69:56:54:7e:06:63:a0:3b:09:c9:c9:82:
         b4:aa:ee:45:62:6a:06:fe:e8:b5:86:af:5c:6e:0d:f7:43:4c:
         9c:67:ad:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:12 2025 by rpki-client