Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
File:                     J8yUlEs4mAyi4IYqXfxE2GQEF88.mft (raw, json)
Hash identifier:          LujN/6Kmigu+n8NaetijFxq1gO7pzZI88VE121uiq2A=
Subject key identifier:   FF:5E:66:DD:EE:A2:1B:3C:B0:D2:22:B1:6D:E0:02:5F:93:1D:17:7D
Authority key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Certificate issuer:       /CN=F3698401AF/serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Certificate serial:       03BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
Manifest number:          03BC
Signing time:             Mon 20 Oct 2025 03:27:58 +0000
Manifest this update:     Mon 20 Oct 2025 03:27:58 +0000
Manifest next update:     Wed 22 Oct 2025 03:27:58 +0000
Files and hashes:         1: J8yUlEs4mAyi4IYqXfxE2GQEF88.crl (hash: X+KnpraSBCJZnxs9f8Uau9HTkxy6pheUgeYcH0gi/Ls=)
                          2: 35441182D53311ED963F8F99F1222468.roa (hash: gr96mVOMzkU8Q9PplUdoOUbnlh56hiVDAqPFQPickwU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957 (0x3bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698401AF, serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
        Validity
            Not Before: Oct 20 03:27:58 2025 GMT
            Not After : Oct 22 03:27:58 2025 GMT
        Subject: CN=68f5ac3e-989b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:ea:fe:cf:bf:4f:18:3c:5c:59:7c:4c:69:
                    88:78:26:8a:14:ee:44:00:13:59:8c:fe:d1:94:8b:
                    a5:79:c0:4a:6b:4b:6b:cc:44:a3:5b:9f:54:65:ad:
                    c1:5f:76:4e:3f:92:6a:93:21:38:8d:72:e0:a2:62:
                    2f:69:02:01:14:82:57:e5:c8:1f:29:11:e2:34:2c:
                    dd:63:01:20:8d:bb:21:0e:d8:2e:af:29:d9:fb:38:
                    ba:03:46:24:b6:61:01:88:fb:1e:dc:5f:5d:19:af:
                    44:6f:88:35:78:5a:e0:92:ea:20:35:b6:56:d3:43:
                    bb:98:e6:12:ef:40:03:89:2a:9c:cb:83:7d:eb:21:
                    db:1b:ed:ec:c2:88:2e:4c:5e:96:2d:7b:d4:66:0f:
                    49:2e:3a:a1:21:9f:a0:e3:c8:e4:bf:b8:f8:f7:05:
                    20:26:bc:6a:a1:89:a6:ef:df:eb:4f:fb:21:78:29:
                    b7:89:1b:2f:2c:a8:87:a4:d4:0c:2a:37:5a:d7:ab:
                    ae:34:1f:cf:0c:19:d7:80:25:3d:b2:4a:90:ca:0b:
                    92:5d:fa:ea:ed:ff:98:c4:b5:d4:45:ed:0e:ab:db:
                    c4:bf:7e:bd:26:f7:07:5a:7c:59:b1:1c:fd:5c:4e:
                    a6:42:7c:b1:16:a0:a2:3e:1c:7d:a0:42:6f:bf:6e:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:66:DD:EE:A2:1B:3C:B0:D2:22:B1:6D:E0:02:5F:93:1D:17:7D
            X509v3 Authority Key Identifier:
                keyid:27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:16:81:ed:b4:53:bb:8e:7b:a0:00:2c:1e:ef:c7:d7:c6:a3:
         d3:80:1a:50:05:ed:c1:f1:54:e7:c1:89:49:cd:2b:0a:81:0e:
         c5:49:ed:11:ee:af:90:a7:c3:82:b0:49:03:9a:98:6d:84:1c:
         23:cd:5a:cd:89:87:6c:2e:1f:97:46:26:10:ae:b7:3c:f8:93:
         40:e3:b6:67:6e:5e:93:a0:b6:a6:61:e9:2a:6d:fd:1a:7e:63:
         f2:07:f2:ce:50:8b:5b:db:57:b5:17:7e:07:58:50:3b:dc:73:
         ca:d4:74:af:18:c2:7c:5c:d1:4d:e6:b6:8e:24:c7:55:c7:73:
         09:10:fa:ba:fb:f5:94:0b:a0:16:bd:ef:a5:a0:6a:19:ec:53:
         c5:c5:78:60:fa:73:10:24:99:69:55:67:5d:4c:c0:ae:53:9c:
         b1:e0:2d:04:9c:c6:af:5a:09:e1:f2:d2:d5:c1:53:b0:90:27:
         d5:39:ef:52:99:16:a1:61:73:e0:69:5f:f0:8e:1f:80:70:c5:
         eb:f7:4e:56:af:21:00:15:77:8a:84:b5:1a:f9:4f:0e:6b:b6:
         3d:50:0a:9a:71:d0:2d:7f:de:df:82:cb:09:73:8f:23:74:47:
         a1:e8:38:b4:83:55:77:b3:1b:08:8c:63:e0:48:e2:28:39:1a:
         3f:5a:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:47 2025 by rpki-client