Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
File:                     YFf0ifWtxOkmnCYNcCyBqraqLm0.mft (raw, json)
Hash identifier:          +zOhAtTavRblx5FWK8ZlreOj/x97WgojsY8fO+LSiE8=
Subject key identifier:   D9:E0:FD:07:9F:DE:37:38:C6:39:D9:4A:CB:D1:03:74:BC:F4:04:CA
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Certificate issuer:       /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial:       0916
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
Manifest number:          08F8
Signing time:             Sun 29 Jun 2025 01:34:02 +0000
Manifest this update:     Sun 29 Jun 2025 01:34:01 +0000
Manifest next update:     Tue 01 Jul 2025 01:34:01 +0000
Files and hashes:         1: YFf0ifWtxOkmnCYNcCyBqraqLm0.crl (hash: ylc8TZS1V7tLbRU7WQjSK2RWPaiRvMvDOVJ3bNJQjoo=)
                          2: 84F696F64D5D11F080180D7BDAE4EC9C.roa (hash: swzBgBe/f/e8nnNX8zXOKzJcs3dORLtUJ8Tf1x7g3Lc=)
                          3: A06496004D5C11F0B2A5E6F4DAE4EC9C.roa (hash: 4XR2j+/NLb1ztcRR3dm4pm4LqJngIiYwC9GvDxQoWAI=)
                          4: 8E0A1A0634F811F0AB18B2D1DAE4EC9C.roa (hash: XHOR283ax2rx3AB8crsGaviXsoeaRKmNrjOf7hjFHLk=)
                          5: 16D39CCA34F611F09F59ACC1DAE4EC9C.roa (hash: RxF4o6Ulg0ztZxmKsLmY9mSzJVG0CHOUQubaXMUFO4s=)
                          6: ECE620A296AB11E9A2CC3244F8AEA228.roa (hash: qOlZLpS7RK9Dr36jbEKFtmL31ZZpQ1zZJ9/887yVsqY=)
                          7: 328C6FC64D6211F0AD55C399DAE4EC9C.roa (hash: fTXMrk6MaVx+Vz3X94ONvIvYavpJxBujUP2X/gitxFU=)
                          8: 0A728C7696AE11E994BEB045F8AEA228.roa (hash: jhN1xgY7+Ai6dzJNk3/cbOqfB/7bGkdkvygH1Fmr1S4=)
                          9: 46C3E730371411F0A97A07EFDAE4EC9C.roa (hash: AYG+6HmkrjhdWL+g6OSdrYX4YzA3XUT6eAmv6J44htM=)
                          10: 1C77837AEA6911EBB1386377D8A014CE.roa (hash: nonq4YKeFdyfGHlNe6qVL9cZdmNNsbyIqMggp/PfHrg=)
                          11: CE94967E4D6111F0AAD95E97DAE4EC9C.roa (hash: 7rdbTlAjTgRw8z1A0CsVSwKwjuBDcL8yOjtypnJ1RcY=)
                          12: 3124E4A43ADB11F0B661DF8CDAE4EC9C.roa (hash: /KfsPoT5qUOvysKqMbWcrWqL7gfEaFiGmlBdWNzpvz4=)
                          13: 52F0650A925C11E9BD13DA51F8AEA228.roa (hash: XSD+lLyh6gJ5eKzdsK6grPxNsYTYn3uqUENZtP+UtNo=)
                          14: E5AA00004D6211F0AC68229EDAE4EC9C.roa (hash: FFpe2j0kKVSEwHCfSHDGXq/7B3Sg772Erl/WQUL0TyQ=)
                          15: D8E8FD60350411F0897885A2DAE4EC9C.roa (hash: mc0y5tagpi0VzxRygdWRbkqcLhucEQ0fjmPuvflY+7c=)
                          16: 738EE6D4371411F0ABDB67F1DAE4EC9C.roa (hash: Pnoufo51Boc6osEqzpQNtYpeESQehuk0VfMb6lBYWrA=)
                          17: 76FF3C2034F711F09F02A6CADAE4EC9C.roa (hash: Gk8WolnjJk7TV4ax01HymP3sKCzxlNV/zespCqdSJE0=)
                          18: D3FE9980926311E9AC9B3D57F8AEA228.roa (hash: k+tP9kkRYqNuPlHHDfKmXRa9tcEV2O5bcyJHIwCTg6w=)
                          19: CA5E35964D5D11F081F26F7DDAE4EC9C.roa (hash: Us3q9+/9+/1NHCw+98NDB70+pRf/ME9h+nC4WOddXaw=)
                          20: 0C9B1CF034F711F0886E98C8DAE4EC9C.roa (hash: gHqLyeYrTXc19awMiYxuSagPUbblnNPsfRcbEsJqQ+Q=)
                          21: 4F2412D2258D11EEBF2506674AD9E6FC.roa (hash: TPzyP84gVaSBDrHT8ykUyVh7PurvnTJdR22a1A7ZsZE=)
                          22: FC00EAA4371311F0A9CEF9EEDAE4EC9C.roa (hash: Q4m0b1uWFzhLDSfGIcY57zIKhG5rB1HYViD6WNKMhQs=)
                          23: 795A84B04E6111F0B0BA1EABDAE4EC9C.roa (hash: w5VXv9R5oUGxHevdMOJcXmqGrjg68tuvJ52NZFvQzag=)
                          24: EF92EAC6969011E9A4280D31F8AEA228.roa (hash: 0a9ry7ZLBGBSaODuOljud7Umzq6/+ULq8KkP/gJoptA=)
                          25: 8E75DA584D6111F083FA6595DAE4EC9C.roa (hash: DULZu5NdjWLBHQ9nCeFB0REGbrNQCky9pb1BZ89cFsU=)
                          26: D309A74834F811F0BAC585D3DAE4EC9C.roa (hash: AJ5mBGCbRyHsPx3Z/g7LsKTjB0yWmNlgitYk3Dnv4W4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
        Validity
            Not Before: Jun 29 01:34:01 2025 GMT
            Not After : Jul  1 01:34:01 2025 GMT
        Subject: CN=6860980a-2c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:7a:ca:b6:bc:6f:fa:61:b4:a7:ba:0c:3a:
                    6f:d8:96:0a:fb:59:10:98:66:d3:03:f7:4e:a0:81:
                    4d:df:bd:81:5e:00:b7:e7:c5:30:ae:ea:fd:a4:83:
                    93:02:a0:25:d5:63:f7:0b:9a:7a:52:24:a8:64:2d:
                    f4:38:0e:ab:35:2f:e3:1a:08:0b:cb:49:94:1e:f6:
                    1d:a3:e0:ca:a7:97:08:b1:c0:e1:85:35:85:86:c5:
                    85:9b:01:ca:88:e3:67:a0:6c:61:0c:ea:84:cb:dc:
                    7c:9f:34:da:49:c3:a9:1f:94:49:0e:59:c2:43:9d:
                    25:f8:7d:bf:bf:39:1e:9f:14:71:a5:ca:dd:c7:d9:
                    54:fc:dc:e5:c5:de:0a:a6:f1:01:b0:78:0f:7a:d4:
                    a1:d7:c7:3e:c3:fe:e1:04:c5:27:d2:b9:51:5e:24:
                    37:0c:0f:1e:b5:ea:00:17:69:fc:e4:2f:58:6f:65:
                    8f:90:05:bc:d7:8e:4a:30:8f:aa:84:40:0b:c7:52:
                    33:d0:b3:11:63:31:15:7a:7e:c6:5e:a6:38:63:0b:
                    24:6f:45:71:ae:14:55:c4:66:32:db:90:04:c7:31:
                    81:63:0a:08:e9:f9:a3:3b:b6:41:82:34:e4:99:86:
                    00:af:48:1b:2f:9f:ae:eb:26:bc:8d:1b:70:ee:dd:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E0:FD:07:9F:DE:37:38:C6:39:D9:4A:CB:D1:03:74:BC:F4:04:CA
            X509v3 Authority Key Identifier:
                keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:ed:6b:4e:6d:9d:18:b8:20:42:58:bb:98:47:0c:69:4e:
         45:7f:3a:71:22:ed:e0:e4:ff:72:93:4b:72:c5:0b:68:81:5b:
         3c:c5:36:d8:93:ae:af:f7:65:34:29:2b:5c:95:b7:4b:2e:89:
         2b:a7:8c:64:81:30:6e:8f:12:3b:e7:31:c1:1f:ea:ad:42:07:
         a7:80:03:18:86:ad:b7:91:fd:30:a5:c5:16:62:c0:0f:62:c2:
         e2:b3:64:7e:95:7e:17:fb:31:5e:a6:b0:6b:84:5c:f6:4b:52:
         9b:78:c6:54:cb:f3:6e:77:13:ba:fb:bc:f5:42:7a:58:a3:20:
         77:f9:1c:33:b2:38:ce:96:2c:2a:2c:f9:3a:85:c4:bd:33:36:
         e7:1c:39:18:73:5a:94:5a:8b:62:0a:16:53:78:7e:f9:38:60:
         73:b7:a1:32:96:d7:ba:04:ef:4e:3b:b5:10:f9:35:ea:5a:38:
         ad:ad:6c:30:38:28:6d:77:9f:03:bf:26:cb:70:78:89:7a:5f:
         bc:c6:22:22:28:b3:d6:ed:8a:d3:5c:a3:70:7e:39:86:80:42:
         6a:ea:ce:46:54:d7:5f:71:ba:91:98:43:5e:0c:a8:a1:6e:8f:
         ce:62:b6:fe:2f:5a:d2:cf:03:2c:a6:7f:fc:7e:4b:be:f5:19:
         35:6a:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:59:49 2025 by rpki-client