Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          BpjLhsBu7wBQnX7FvdYaGRZA2SzkVSy2xttC+V6/Ep0=
Subject key identifier:   AC:17:46:1F:9A:1C:2C:AA:AF:87:15:A6:F5:60:A5:3A:48:A7:2A:C9
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       09CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          09C9
Signing time:             Sat 23 Aug 2025 01:19:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:19:03 +0000
Manifest next update:     Mon 25 Aug 2025 01:19:03 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: YKSrsVFFWKWZHHXLkKV/pnN9QLEblpKdPjkqPPZ1XF0=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF, serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Aug 23 01:19:03 2025 GMT
            Not After : Aug 25 01:19:03 2025 GMT
        Subject: CN=68a91708-8b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:b7:a2:cd:33:6e:47:d3:ff:3f:ae:48:b6:
                    b4:dd:12:a8:50:ac:a0:f0:14:1f:0e:e8:c4:59:0d:
                    b4:2a:39:91:ab:e2:93:24:6b:38:2f:4d:4d:2e:9b:
                    9c:2d:cf:a6:fd:18:85:a4:74:7a:6b:fe:67:62:f1:
                    85:63:a0:4b:5a:34:f6:7f:f6:b6:8d:b4:61:0e:a4:
                    73:cb:11:db:cf:0f:76:65:46:b3:4e:48:a9:c5:35:
                    ea:d9:51:24:67:a2:12:02:c6:36:22:4c:a2:c7:12:
                    7e:45:e2:8a:71:b7:87:4c:56:cc:23:ac:9e:1c:40:
                    0e:80:00:c2:26:e1:9c:94:72:d7:e0:86:84:40:36:
                    e2:58:28:a3:f4:6e:b2:4e:3a:f4:09:98:f4:73:c8:
                    38:e3:8b:73:44:2d:9b:eb:9f:87:5f:75:bd:f0:a9:
                    a4:9d:20:95:ec:cb:fc:e8:2e:c3:15:74:58:c6:40:
                    3c:15:52:d3:73:e8:27:d8:c6:ab:be:e0:24:f3:cf:
                    f3:34:27:b7:e8:73:d2:46:9d:f0:f4:72:f0:e2:8e:
                    26:10:d8:09:16:b9:87:65:a4:31:67:0f:a9:42:67:
                    81:87:7c:63:e4:be:95:8f:04:0f:77:f9:15:b6:6e:
                    c0:cc:37:e0:3a:94:46:d1:0b:fc:a8:c0:2c:ca:f1:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:17:46:1F:9A:1C:2C:AA:AF:87:15:A6:F5:60:A5:3A:48:A7:2A:C9
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:09:5d:61:11:26:de:e4:f9:ad:7b:99:d7:db:fc:ba:5b:
         33:6a:d3:9a:6e:b0:8d:fe:2b:46:03:a8:cc:bd:85:8b:a9:2f:
         8d:f5:ac:7f:d3:b4:62:88:53:25:74:90:6a:18:0c:30:39:93:
         41:d9:4e:c4:d0:5a:20:a0:b0:91:d4:25:d9:b3:2e:ad:37:9b:
         fc:90:3c:b6:d7:ef:68:e9:1a:b8:a3:ba:e8:41:88:5e:69:6b:
         64:e3:d1:1e:d7:39:38:ae:d8:89:9f:4e:73:e6:7b:9e:b7:a5:
         a0:77:46:0c:12:9d:bc:b4:15:0c:b8:f9:82:c9:dd:10:70:4b:
         88:f1:ab:81:e2:bf:3e:97:0d:d8:e1:a7:8c:46:5e:4d:86:a3:
         48:05:db:12:32:54:6e:a6:b2:43:be:cf:e4:23:c4:77:b0:ec:
         50:f7:33:c9:5f:e3:dc:a5:68:70:0d:1c:89:d5:46:25:cc:d9:
         d6:bb:97:fa:73:c4:10:cf:96:25:76:ff:7a:35:b3:f7:6e:ef:
         4d:b1:cc:12:85:76:3b:70:01:62:17:9d:1a:f2:90:cc:33:f4:
         f7:fd:ea:b3:ce:5d:9b:f1:6e:c2:20:1f:76:b3:68:51:21:a3:
         5f:71:49:60:a5:ed:21:12:1e:ef:d8:3d:42:26:fe:2f:d2:c0:
         ab:f0:f7:2c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCcowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk0MkVBRjExMC8GA1UEBRMoNEUyNjUwRTJBQkEzNjVCMzlDRkUxNThFQ0E0REI0
OEQ2NDJDREI2NTAeFw0yNTA4MjMwMTE5MDNaFw0yNTA4MjUwMTE5MDNaMBgxFjAU
BgNVBAMTDTY4YTkxNzA4LThiNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9AbeizTNuR9P/P65ItrTdEqhQrKDwFB8O6MRZDbQqOZGr4pMkazgvTU0u
m5wtz6b9GIWkdHpr/mdi8YVjoEtaNPZ/9raNtGEOpHPLEdvPD3ZlRrNOSKnFNerZ
USRnohICxjYiTKLHEn5F4opxt4dMVswjrJ4cQA6AAMIm4ZyUctfghoRANuJYKKP0
brJOOvQJmPRzyDjji3NELZvrn4dfdb3wqaSdIJXsy/zoLsMVdFjGQDwVUtNz6CfY
xqu+4CTzz/M0J7foc9JGnfD0cvDijiYQ2AkWuYdlpDFnD6lCZ4GHfGPkvpWPBA93
+RW2bsDMN+A6lEbRC/yowCzK8SwxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrBdG
H5ocLKqvhxWm9WClOkinKskwHwYDVR0jBBgwFoAUTiZQ4qujZbOc/hWOyk20jWQs
22UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5NDJFL0Q1QTg5MDVDRkYwMDExRThCNDk2MDEyQUY4QUVBMjI4L1RpWlE0
cXVqWmJPY19oV095azIwaldRczIyVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1RpWlE0cXVqWmJPY19oV095azIwaldRczIyVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTk0MkUvRDVBODkwNUNGRjAwMTFFOEI0OTYwMTJBRjhB
RUEyMjgvVGlaUTRxdWpaYk9jX2hXT3lrMjBqV1FzMjJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBscgldYREm3uT5rXuZ19v8ulszatOa
brCN/itGA6jMvYWLqS+N9ax/07RiiFMldJBqGAwwOZNB2U7E0FogoLCR1CXZsy6t
N5v8kDy21+9o6Rq4o7roQYheaWtk49Ee1zk4rtiJn05z5nuet6Wgd0YMEp28tBUM
uPmCyd0QcEuI8auB4r8+lw3Y4aeMRl5NhqNIBdsSMlRuprJDvs/kI8R3sOxQ9zPJ
X+PcpWhwDRyJ1UYlzNnWu5f6c8QQz5Yldv96NbP3bu9NscwShXY7cAFiF50a8pDM
M/T3/eqzzl2b8W7CIB92s2hRIaNfcUlgpe0hEh7v2D1CJv4v0sCr8Pcs
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:38 2025 by rpki-client