Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36852F0/ABABDB00825811F0BDEE618ADAE4EC9C/F57VfDLDfAAT9WUvPsZqeGz4lSQ.mft
File:                     F57VfDLDfAAT9WUvPsZqeGz4lSQ.mft (raw, json)
Hash identifier:          6DyA4CRtrfW/fwt7RRl4v/DIOpOqKoqHM7Ve0AlfQSE=
Subject key identifier:   2D:64:DD:EF:14:E1:A3:8C:C5:3D:FB:74:BE:3D:E2:71:4E:32:49:51
Authority key identifier: 17:9E:D5:7C:32:C3:7C:00:13:F5:65:2F:3E:C6:6A:78:6C:F8:95:24
Certificate issuer:       /CN=F36852F0AF/serialNumber=179ED57C32C37C0013F5652F3EC66A786CF89524
Certificate serial:       38
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F57VfDLDfAAT9WUvPsZqeGz4lSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36852F0/ABABDB00825811F0BDEE618ADAE4EC9C/F57VfDLDfAAT9WUvPsZqeGz4lSQ.mft
Manifest number:          38
Signing time:             Mon 20 Oct 2025 05:16:23 +0000
Manifest this update:     Mon 20 Oct 2025 05:16:22 +0000
Manifest next update:     Wed 22 Oct 2025 05:16:22 +0000
Files and hashes:         1: F57VfDLDfAAT9WUvPsZqeGz4lSQ.crl (hash: 0Jw194aNb3kqyFbqOCi+Y4ppy9UR3hwh1V7OMyrEO+g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36852F0/ABABDB00825811F0BDEE618ADAE4EC9C/F57VfDLDfAAT9WUvPsZqeGz4lSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36852F0/ABABDB00825811F0BDEE618ADAE4EC9C/F57VfDLDfAAT9WUvPsZqeGz4lSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F57VfDLDfAAT9WUvPsZqeGz4lSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36852F0AF, serialNumber=179ED57C32C37C0013F5652F3EC66A786CF89524
        Validity
            Not Before: Oct 20 05:16:22 2025 GMT
            Not After : Oct 22 05:16:22 2025 GMT
        Subject: CN=68f5c5a6-67ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:8f:18:41:02:ac:c6:8c:48:31:ef:61:cd:
                    18:0c:e9:b4:88:0e:f2:42:da:c0:df:7b:91:ad:80:
                    c6:21:40:65:42:c3:fb:d5:ee:db:1c:bd:62:2c:d7:
                    8a:fe:2a:93:a0:3e:8a:3c:25:4f:ff:8c:a1:7a:85:
                    4e:0a:8e:5e:d1:71:33:17:20:af:b8:8e:85:11:56:
                    d3:bc:a5:83:4a:c8:3f:56:a3:4c:4e:4b:0d:2e:8a:
                    fd:bd:7b:d8:1b:b0:bc:89:ad:ce:19:ee:be:2d:4c:
                    99:42:17:b3:0d:ab:98:15:27:32:db:a1:6b:ba:5d:
                    08:f0:8b:88:97:e4:14:41:94:95:d4:ad:58:ab:71:
                    96:a1:01:e9:77:c8:d3:40:b6:cf:c8:9a:96:57:f2:
                    60:3e:bb:2f:d3:77:59:c2:7d:88:05:84:45:f6:98:
                    ac:69:e2:f5:5c:d7:0f:ab:43:9b:b6:fa:03:96:f5:
                    63:3b:fd:6e:7f:84:3d:4b:a5:83:59:e5:e9:b9:e7:
                    91:50:26:c7:e8:13:12:db:22:79:b2:72:05:ae:98:
                    e6:38:8b:3a:0f:11:e9:a0:6c:82:a8:06:c6:fe:d2:
                    e3:60:4a:3c:6a:73:73:d2:ff:54:66:69:66:e5:26:
                    4a:69:d2:19:b8:2b:60:49:7c:57:25:76:9a:b2:9b:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:DD:EF:14:E1:A3:8C:C5:3D:FB:74:BE:3D:E2:71:4E:32:49:51
            X509v3 Authority Key Identifier:
                keyid:17:9E:D5:7C:32:C3:7C:00:13:F5:65:2F:3E:C6:6A:78:6C:F8:95:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/ABABDB00825811F0BDEE618ADAE4EC9C/F57VfDLDfAAT9WUvPsZqeGz4lSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F57VfDLDfAAT9WUvPsZqeGz4lSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/ABABDB00825811F0BDEE618ADAE4EC9C/F57VfDLDfAAT9WUvPsZqeGz4lSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:61:7c:98:d4:e9:a4:b6:37:b2:e3:f6:b7:74:30:41:ae:
         ae:63:50:ac:75:3d:bb:e7:6e:db:1a:c6:c3:3c:6e:c5:7c:04:
         bd:25:c5:42:b1:91:7e:52:c4:3d:a4:03:69:6a:9b:9c:de:70:
         58:e4:60:d7:51:e8:17:fa:75:ab:51:39:25:a5:59:b7:35:84:
         28:b9:25:a7:99:b0:ca:67:52:4f:a3:b7:8c:3b:e1:e5:c7:a4:
         c6:d3:db:ac:31:60:3f:7a:4d:a2:21:e1:e5:dc:62:fa:ae:a2:
         88:d7:01:ef:41:4a:79:f3:ec:18:8b:47:8d:7b:15:9c:d3:dc:
         78:70:dd:a8:b2:36:b7:d0:ea:9e:bd:72:8d:ab:69:1a:19:bc:
         2f:30:5a:ac:0f:7f:ed:6a:32:fd:a2:a1:d1:47:45:fd:31:8b:
         2f:3d:30:5f:3a:89:a7:0d:e4:f1:bb:e1:74:2c:0a:cc:f5:9f:
         31:c6:4e:26:f8:63:61:62:6f:dc:28:c3:b6:7b:4f:3a:2e:78:
         cd:d9:32:99:2b:21:f0:32:fc:40:b5:10:9e:7b:2d:f4:6f:58:
         b2:cc:34:7d:f3:b2:f6:08:fa:32:f6:36:30:b2:61:aa:b8:e8:
         b8:d0:5a:eb:c7:f7:0b:f7:3e:23:11:c0:0c:77:9f:4e:29:02:
         e9:d2:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:38:28 2025 by rpki-client