Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
File:                     FU_bBWSxN90ijzXfSvbkB4DvENY.mft (raw, json)
Hash identifier:          WNHMCMQ2tut0NeUEo3zSn5ljmZf8dMSs1d5XP/ojdac=
Subject key identifier:   25:C1:B5:57:C4:E0:99:EE:62:C2:9B:5E:E2:17:4E:E7:51:B3:49:1A
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Certificate issuer:       /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial:       0817
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
Manifest number:          0815
Signing time:             Mon 20 Oct 2025 01:47:02 +0000
Manifest this update:     Mon 20 Oct 2025 01:47:02 +0000
Manifest next update:     Wed 22 Oct 2025 01:47:02 +0000
Files and hashes:         1: FU_bBWSxN90ijzXfSvbkB4DvENY.crl (hash: FtKuXyYkcYDWCZMTCbPJ3roV95h8ZOapWM6SaFl29T0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683ABDAF, serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
        Validity
            Not Before: Oct 20 01:47:02 2025 GMT
            Not After : Oct 22 01:47:02 2025 GMT
        Subject: CN=68f59496-6a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:ff:83:82:d8:d3:88:a7:1b:af:85:04:92:
                    a2:3a:fc:77:20:cd:e6:1e:48:48:fd:0d:5a:4a:1d:
                    e6:5f:60:b9:6a:36:98:26:e6:70:3f:58:4d:26:98:
                    e3:90:f5:86:8f:bb:96:de:6c:f7:46:f3:1f:ff:0f:
                    74:54:03:03:ab:9b:34:b5:9c:d0:48:8c:07:8c:56:
                    25:4b:63:55:4c:cc:96:b4:07:45:5a:19:32:fd:e1:
                    82:10:8c:83:44:69:c8:b7:21:cb:2c:1d:83:95:a9:
                    a5:05:23:19:f9:e1:cd:8f:5e:5d:74:67:f2:5c:50:
                    81:a9:84:c8:85:88:52:a6:3f:50:d5:d3:6a:72:f1:
                    e0:54:23:4a:09:a7:ed:a7:b1:dd:d9:2c:c3:50:e7:
                    b3:1c:f8:ca:8d:41:55:9b:90:9c:04:b5:12:18:f0:
                    83:33:5f:c7:f8:32:39:ab:8a:3b:03:eb:62:9d:9f:
                    d9:f4:de:74:19:b7:23:a7:08:e2:9b:09:43:b5:da:
                    68:06:e6:39:40:43:76:38:2e:ab:c8:9e:b3:39:48:
                    e5:ef:6c:4e:4d:92:3d:fb:21:08:df:2e:04:31:d2:
                    7f:be:22:d1:a6:bb:39:71:db:a9:4a:a8:f8:ff:11:
                    1f:15:74:a6:35:5b:36:46:89:54:e7:c5:ba:00:31:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C1:B5:57:C4:E0:99:EE:62:C2:9B:5E:E2:17:4E:E7:51:B3:49:1A
            X509v3 Authority Key Identifier:
                keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:e8:9a:e1:6a:a3:b6:d0:cc:25:5f:25:fe:34:a9:12:d0:
         22:72:f6:e9:96:25:b9:66:20:ed:c8:2a:1f:be:9f:35:94:1e:
         7a:8b:64:23:0b:da:7d:43:cd:58:bc:67:ce:b5:ea:14:6c:22:
         de:57:79:d9:59:97:c9:16:82:f6:1c:83:3f:4a:e7:49:87:9c:
         85:29:69:ed:77:6e:f2:ef:ec:30:1e:28:d0:22:4e:98:bc:e4:
         85:85:25:02:f7:5d:be:30:1d:a3:bd:8d:a2:5c:d4:7a:1e:64:
         8a:8c:08:95:21:c3:8d:0f:bd:86:69:e2:4c:ce:64:ea:1b:0a:
         4b:a7:55:9f:6f:91:7b:74:8d:5d:bd:7b:ac:e1:1d:af:37:8c:
         7d:9b:68:d9:36:f5:2b:e1:79:ab:7c:ca:34:e3:3f:71:9a:c2:
         1c:ca:d6:4d:35:19:8b:4f:ed:99:33:2a:ea:eb:20:4f:c1:95:
         dc:30:23:19:d0:ff:4e:ac:13:74:7d:11:c9:f0:26:57:e1:71:
         de:e7:11:61:d8:a8:28:39:0e:dd:1a:27:22:e7:66:64:c1:25:
         47:18:e5:e7:35:38:36:48:2e:b6:e2:94:fc:6c:02:13:3a:f1:
         b3:ec:db:cb:39:e0:ec:62:cb:cc:b5:37:7b:72:79:12:86:7e:
         a5:ca:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:57 2025 by rpki-client