Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
File:                     zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft (raw, json)
Hash identifier:          /TSHisTLayKNdgLMYpAlrGzk16PspR5Ove7MYpjHZbM=
Subject key identifier:   A9:D0:18:20:47:4E:D7:7D:1F:22:17:5C:AD:BE:3C:0E:6B:D1:81:9D
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Certificate issuer:       /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial:       08A9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
Manifest number:          08A6
Signing time:             Mon 12 May 2025 01:34:30 +0000
Manifest this update:     Mon 12 May 2025 01:34:29 +0000
Manifest next update:     Wed 14 May 2025 01:34:29 +0000
Files and hashes:         1: zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl (hash: kiNtchjjno7UoqX8G9PYnjCCZRWGnLQln9ErdN8gnKg=)
                          2: 8D638E94EA6911EBA5AD1D78D8A014CE.roa (hash: TSjbcBjzqOEDoCJOFKA/gcs+86bsN6ECxtsUBjgtesg=)
                          3: 318EA42098F711E9A08C1176F8AEA228.roa (hash: w0LdOEkkXXKRsW1PLK4DZkJUwY2G0SIkANImRgbjTcI=)
                          4: 7F9AB1CC98F711E9BABB4B76F8AEA228.roa (hash: jzZ3XEm/0+bQmIh4jXGZex7PIgjtpornzaVmedGVKeA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                          rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
        Validity
            Not Before: May 12 01:34:29 2025 GMT
            Not After : May 14 01:34:29 2025 GMT
        Subject: CN=68215026-d94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:43:3f:a5:cf:44:83:17:c1:8e:9d:3b:51:
                    8d:e3:79:c9:0a:5f:f6:dc:2e:cf:79:c2:4e:bf:e4:
                    40:c3:fb:35:8f:01:ed:d8:7d:65:6b:55:8a:15:fc:
                    87:24:28:bd:d2:ab:0d:2d:cc:04:c5:d1:47:b1:11:
                    45:33:dc:39:da:7c:9b:cd:4c:34:b1:21:08:a7:be:
                    77:ad:49:35:7b:61:28:70:3c:74:60:7e:9d:7f:6d:
                    e4:fe:e1:73:bd:bb:63:03:f1:1f:4f:5d:11:53:dc:
                    3a:80:80:df:ab:6e:57:11:39:ec:32:fd:d1:17:89:
                    88:2a:ac:de:6e:65:b2:b8:e8:2c:4d:3d:be:4a:37:
                    f8:c4:68:ef:a8:bd:d0:f1:c4:08:14:13:79:31:c4:
                    d0:2b:72:60:45:c1:f4:ce:e0:e0:35:9e:a2:35:ea:
                    c8:44:47:4d:4e:5a:f3:58:0f:51:76:0e:a1:27:c6:
                    a9:c8:b2:e0:82:71:02:89:1a:3f:a5:21:00:b2:39:
                    59:33:ad:fc:77:8d:1a:ea:85:11:d0:86:4b:03:c8:
                    c0:8e:12:63:14:b2:40:63:cb:98:17:67:5f:38:95:
                    9c:10:1f:6a:00:c5:c0:d8:20:8a:ad:cc:0c:f3:df:
                    c3:5b:8a:78:93:da:1b:c5:43:42:d3:c2:2e:9b:27:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D0:18:20:47:4E:D7:7D:1F:22:17:5C:AD:BE:3C:0E:6B:D1:81:9D
            X509v3 Authority Key Identifier:
                keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:30:0c:94:42:33:3d:9e:65:e2:e4:d0:13:aa:e9:80:92:ec:
         9f:2b:8b:9a:34:27:b0:37:66:c3:ef:46:fd:6a:e7:01:90:f5:
         57:4d:13:e2:df:8e:27:1d:2f:48:71:8e:4b:5c:99:7b:7e:d5:
         6b:b4:e9:2b:42:24:1e:b4:1d:8e:c2:ba:eb:5b:ca:f2:b4:39:
         05:75:90:ad:c6:1c:a8:ed:f0:55:73:b2:ec:c3:90:28:4e:ce:
         60:b7:b8:b8:cd:58:1d:db:cc:76:a1:29:10:2c:00:27:ff:ae:
         7f:c8:0a:d3:c7:57:74:15:1c:fd:60:be:93:3e:ff:5c:64:05:
         67:fc:b5:b2:dc:a0:c4:a8:f9:30:6b:2b:ed:94:2b:6d:ae:be:
         b7:ce:3e:45:3d:1b:73:8f:3f:2f:b9:eb:13:86:2e:f5:83:98:
         b6:f0:8f:ee:e4:f7:db:01:87:fa:9e:67:98:1a:a6:bc:2a:e1:
         80:b4:51:6f:13:c9:71:c0:49:0f:cd:e0:fb:cb:19:e1:eb:b5:
         a6:02:db:6b:91:74:3f:77:51:e1:ea:03:c4:c4:62:60:51:25:
         e1:89:2a:85:37:7f:eb:f3:3a:cd:c7:3b:58:7a:fa:b8:af:d2:
         43:cc:92:4f:90:cf:ce:37:e9:fb:0e:b4:56:41:28:b9:0a:27:
         2a:1f:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:38:14 2025 by rpki-client