Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
File:                     g9HRV2Bl4FAfLXR0TVFF001qcqo.mft (raw, json)
Hash identifier:          By0KeHQ9s6ZmdUwbOOeppIImc6ZAorEQDvs+UHD+y3E=
Subject key identifier:   A2:F1:B6:D1:DC:CF:A1:B5:8C:3A:AE:D0:0F:A2:9E:E2:7B:B5:C3:F4
Authority key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Certificate issuer:       /CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
Certificate serial:       02C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
Manifest number:          02C7
Signing time:             Sat 23 Aug 2025 04:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:49 +0000
Manifest next update:     Mon 25 Aug 2025 04:00:49 +0000
Files and hashes:         1: g9HRV2Bl4FAfLXR0TVFF001qcqo.crl (hash: apv2UmojJRMbziqF8i2vE7DGnC/bnkyVFLdR1rnYYJM=)
                          2: B5BAB51C637E11EEBB2D437E4AD9E6FC.roa (hash: lTgo88jgYIBRxqWVkQ/cnQHAMBRJfU2wE+z/YeI8Onc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690D01AF, serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
        Validity
            Not Before: Aug 23 04:00:49 2025 GMT
            Not After : Aug 25 04:00:49 2025 GMT
        Subject: CN=68a93cf1-1fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:73:93:a4:72:d1:66:e9:78:3a:c3:73:57:
                    24:46:b7:16:f2:3e:61:b0:58:3a:5a:91:22:c3:34:
                    4c:f6:13:03:81:f1:57:0a:68:76:b1:ad:be:d0:92:
                    a2:9e:be:75:06:11:e5:b6:1b:8c:c8:af:a1:96:13:
                    1e:a0:60:c8:eb:c9:a8:69:79:91:b5:2e:79:02:c7:
                    f1:3b:b8:ba:33:46:43:9c:7e:00:dd:26:0b:4f:b1:
                    5f:f8:15:1b:97:36:fe:d2:71:65:e4:09:d8:1c:5c:
                    ec:d3:ab:86:c9:57:66:e1:1b:ff:e4:b8:f7:f2:43:
                    6f:3c:4c:83:c7:64:bd:fd:a0:44:b6:44:a2:97:4c:
                    a7:9c:58:74:9d:50:53:58:76:15:ca:ff:28:a7:35:
                    2e:12:d8:21:8b:e8:54:7c:c0:55:62:92:de:17:c9:
                    36:38:59:9c:f4:cc:03:ec:81:14:51:34:8e:b9:48:
                    54:de:0b:9d:81:b8:cc:bb:75:c4:fb:6c:2e:ad:10:
                    80:72:22:e6:34:38:df:28:9b:9a:c8:36:70:4e:f7:
                    06:1a:e2:1e:1c:78:f5:c8:8a:eb:db:de:e0:27:3b:
                    57:ae:be:1e:df:f5:aa:25:be:17:9f:cb:d4:86:8a:
                    ca:c0:0b:25:2a:89:d5:2c:37:17:18:49:4a:51:85:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F1:B6:D1:DC:CF:A1:B5:8C:3A:AE:D0:0F:A2:9E:E2:7B:B5:C3:F4
            X509v3 Authority Key Identifier:
                keyid:83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:95:10:32:e3:4d:33:1f:cb:c7:78:2a:2f:64:1e:23:8a:
         d0:44:b6:24:b9:eb:e1:fd:c1:86:1c:18:bb:d8:f3:78:69:87:
         2c:00:e6:16:e3:eb:2c:8a:6e:6b:fd:99:4c:45:e9:d9:7a:b0:
         94:b7:ea:36:00:d9:55:91:3e:e7:9e:57:83:25:19:d0:6d:20:
         30:71:1b:2c:5d:6a:e3:43:d6:e7:8e:ea:78:f9:22:c6:e3:65:
         e0:74:31:54:45:a4:53:1e:a5:ff:ef:28:7a:a3:c9:07:49:ab:
         36:f5:f2:e3:e5:a3:df:ef:42:1a:e7:d9:ef:1e:54:5c:5a:7d:
         74:15:09:de:24:18:4f:a7:23:dd:6d:fd:e4:fc:f3:b8:9a:63:
         9b:cc:89:f1:94:f9:be:63:a4:51:c5:2d:28:4e:9d:a4:5f:e2:
         91:b3:64:4c:fa:83:4d:8a:8f:a1:2e:34:97:99:b3:21:e8:f2:
         1a:5f:ed:8b:3c:7a:af:07:1b:5b:22:0c:3d:04:8d:cd:30:83:
         45:4f:64:74:e8:54:1f:2a:28:db:7a:71:eb:95:5c:1d:5f:23:
         fa:11:08:89:82:fd:25:a4:b9:41:fb:c6:10:74:a3:52:d4:c6:
         ac:d9:6e:24:e8:c9:3c:97:5f:1e:bd:da:ef:b1:89:8c:40:3c:
         51:66:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:39 2025 by rpki-client