Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          c1H1Rw0a2U67ROHdnhQHjuXLnQA7RdvoCS3A4Gnf+8c=
Subject key identifier:   8C:65:81:37:17:3B:65:56:A1:E6:E7:BC:CD:44:FA:7E:48:EF:47:35
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       0216
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          0214
Signing time:             Fri 04 Jul 2025 04:21:55 +0000
Manifest this update:     Fri 04 Jul 2025 04:21:54 +0000
Manifest next update:     Sun 06 Jul 2025 04:21:54 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: WlrXXYoERvNqKNb0TBudmLpOjU5WhdXyA38+VcwE9U4=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
                          3: A98258D0404C11EFA55BD559762E951A.roa (hash: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Jul  4 04:21:54 2025 GMT
            Not After : Jul  6 04:21:54 2025 GMT
        Subject: CN=686756e3-3228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:68:71:e9:f0:5a:5f:44:27:9a:89:2e:99:
                    db:eb:07:31:55:50:49:45:8c:1b:21:50:cb:e3:bb:
                    9f:fc:cc:e7:91:07:4b:0b:8f:32:78:fc:4e:64:39:
                    9c:f1:8e:b1:cb:32:82:2b:fd:9d:02:38:f8:de:1d:
                    48:f9:dc:e9:4d:9a:4d:e1:44:af:74:c0:9c:d5:24:
                    57:8b:60:e6:13:72:c3:84:72:c2:8c:a5:0c:52:dd:
                    e3:91:cc:10:cb:3f:35:99:0f:9d:1d:d8:b2:63:ff:
                    e3:0e:43:29:5e:0f:c0:f0:ce:e0:aa:4c:0d:73:2b:
                    11:c4:4d:e2:76:2c:6e:fc:a0:b1:de:7e:e3:1d:a4:
                    b5:63:0e:a8:3b:78:96:38:df:8d:07:c0:25:8f:f2:
                    4f:d2:1e:d6:ac:94:80:37:7a:a9:d7:5b:8f:7f:5e:
                    fc:09:2d:3f:52:12:df:24:c3:83:26:9a:a4:5f:d3:
                    f8:7a:bd:6c:7c:47:0a:7c:d4:1b:0b:bc:4b:bd:fa:
                    0e:83:06:cd:78:93:fd:31:85:2c:43:ab:83:ea:ed:
                    cf:39:b1:30:97:58:b7:ca:f6:70:ae:8b:c7:49:03:
                    fa:e4:22:90:b2:d0:f4:01:6a:e7:ed:05:71:a5:81:
                    20:f3:64:c7:6d:dd:d4:a0:91:10:61:3e:d4:2f:6c:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:81:37:17:3B:65:56:A1:E6:E7:BC:CD:44:FA:7E:48:EF:47:35
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:af:52:07:a0:d3:cc:7b:0f:7f:89:a3:47:58:d0:f2:1a:8c:
         eb:ee:15:a8:a2:52:64:04:be:5e:fb:f3:1f:64:8c:79:3e:85:
         ea:d3:b8:3e:3d:58:2f:fe:aa:05:99:72:3d:5a:a9:d8:94:dc:
         22:85:da:67:e5:b5:d4:42:fc:60:50:72:dd:31:aa:34:fd:db:
         68:fd:a0:a3:c1:29:d0:aa:a8:03:71:5d:44:09:40:6e:94:07:
         4e:54:91:e5:b7:7a:10:a1:55:ff:1f:10:53:a4:e2:06:98:83:
         49:d9:75:90:b7:41:4e:99:12:6c:76:3d:31:0c:36:07:38:6e:
         cb:bd:11:b2:01:90:e1:37:80:bd:92:63:13:f2:5e:35:d6:d8:
         52:f0:b9:6a:ff:88:24:ac:28:cf:93:4e:df:be:c2:2a:6f:09:
         64:3f:14:76:1b:b4:8a:61:24:25:ee:b1:19:6f:6d:97:57:2a:
         c7:0e:7a:34:d7:dc:73:4c:b9:9a:db:14:ff:7e:c2:e9:4d:8c:
         3e:7c:d7:6b:3a:e3:9a:c9:e1:be:44:71:f2:13:6d:12:f4:fb:
         4a:e7:aa:4e:31:9b:ab:ee:78:6e:ad:d1:05:ad:7c:05:90:bf:
         3d:05:91:dc:c4:de:e9:a1:34:5e:f6:8a:f8:d5:06:04:1a:ea:
         85:dc:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:11:52 2025 by rpki-client