Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
File:                     X-MxcqYILFSryRHxn1edSf2AmBQ.mft (raw, json)
Hash identifier:          +7UijDibI0s9+uit4xCJxY0AMkGj8qGPn7LEoxSV5tE=
Subject key identifier:   29:A2:D0:8C:6B:C6:FB:E8:FF:DC:AA:2D:7F:8C:D3:CB:38:A0:CD:19
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Certificate issuer:       /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial:       0666
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
Manifest number:          0662
Signing time:             Sat 23 Aug 2025 02:13:20 +0000
Manifest this update:     Sat 23 Aug 2025 02:13:19 +0000
Manifest next update:     Mon 25 Aug 2025 02:13:19 +0000
Files and hashes:         1: X-MxcqYILFSryRHxn1edSf2AmBQ.crl (hash: 2DEMzUGaEedDzbCnk89RZ81tRYTs40rTr9rr2cAuazg=)
                          2: AEEE236EC67911EEAD12F8AE775412E6.roa (hash: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=)
                          3: 74F314B2C67911EEB6CAC8AE775412E6.roa (hash: yQ5Y5mos3jGJ876UZawgqxeARaqaofzDLCBHBUrxZE4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690793AF, serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
        Validity
            Not Before: Aug 23 02:13:19 2025 GMT
            Not After : Aug 25 02:13:19 2025 GMT
        Subject: CN=68a923c0-23c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:2c:71:97:6f:6f:0f:61:84:84:16:df:b9:
                    fb:b3:08:42:6c:2f:15:1f:47:e6:76:82:16:93:19:
                    3d:8c:90:b4:14:cd:39:6e:f2:3e:53:f3:29:36:8e:
                    b4:a1:f5:d8:0a:36:a8:ec:3e:f6:df:15:22:c4:9f:
                    40:0d:49:34:26:1f:82:1b:48:69:21:19:a0:6c:b9:
                    fd:f1:33:0b:08:25:d8:06:23:7d:74:a8:5e:97:8b:
                    c9:d5:cd:85:a9:ca:42:c5:33:41:45:7a:30:fe:57:
                    14:e1:7d:c1:f2:84:4a:6a:15:4a:4e:c8:4d:8b:03:
                    4c:87:87:fa:6e:84:ef:75:f6:d2:5c:5a:7c:51:67:
                    c1:81:27:98:4e:4d:3e:d9:ae:8f:92:4c:dc:ff:99:
                    13:29:71:9d:f2:da:12:3d:b5:4e:0a:d2:7b:0c:49:
                    ed:72:01:35:b7:9b:a2:9e:04:2f:11:b9:a7:2e:ab:
                    51:98:89:05:e2:ad:f8:a0:a6:d0:75:55:53:cd:e0:
                    b6:3b:66:57:ba:c5:60:9d:5b:88:d7:d6:42:43:78:
                    07:9b:45:b9:0c:da:04:a5:a1:f3:6e:76:47:67:7f:
                    d4:45:99:3f:25:92:55:3b:c0:cb:6e:bc:72:dc:1b:
                    35:9a:df:2a:22:28:5b:0c:cd:67:09:52:c4:68:11:
                    27:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A2:D0:8C:6B:C6:FB:E8:FF:DC:AA:2D:7F:8C:D3:CB:38:A0:CD:19
            X509v3 Authority Key Identifier:
                keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:d0:6b:9e:60:6c:6e:8d:85:0c:56:c5:75:f7:96:7f:14:
         31:7b:e1:b9:3f:06:7b:d9:2b:69:3a:ca:87:3c:c4:3a:24:ff:
         1b:c0:63:d8:55:39:60:0e:cf:64:3b:17:32:33:9f:3d:fd:26:
         e0:68:b9:6f:72:6e:74:11:95:74:ff:65:93:84:7d:95:2b:4d:
         82:b1:fb:8f:5b:91:6f:66:2b:81:3e:e4:9a:1f:85:4d:c1:a9:
         49:f9:65:02:a0:a5:63:4f:12:0f:28:01:a9:f6:34:74:7d:3f:
         69:1c:a8:2e:94:dd:ca:60:b5:65:90:36:41:04:0c:d9:61:16:
         91:17:61:a9:32:a5:87:30:ae:87:0b:24:22:d2:99:0a:c7:66:
         2d:f8:36:2d:75:15:55:ca:a7:eb:5b:26:c0:b8:19:ec:1e:10:
         38:85:f6:39:d0:f2:69:9a:d7:8a:10:57:73:6a:c7:5c:37:97:
         3d:52:1a:2c:12:63:53:18:a7:6b:72:a5:86:3c:5b:39:52:4c:
         c1:8c:1a:89:da:75:8c:4a:da:d1:49:c7:46:50:74:32:2e:49:
         b0:bb:b6:6d:43:40:25:0e:56:b9:ec:eb:15:dd:52:c8:0a:e9:
         0a:93:3e:a8:f3:71:d3:7b:a5:f0:dd:f8:3f:32:44:ba:90:a7:
         59:b1:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:46 2025 by rpki-client