Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File:                     zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier:          Z2OTgsOTZAhWhuKjf3VfYf9H5ytyWGNy7GrU0JUIYL0=
Subject key identifier:   6A:83:49:A6:7E:1A:08:94:A0:CE:E8:F0:21:60:0C:B1:4A:26:65:0F
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer:       /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial:       AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number:          A9
Signing time:             Thu 15 May 2025 05:05:46 +0000
Manifest this update:     Thu 15 May 2025 05:05:45 +0000
Manifest next update:     Sat 17 May 2025 05:05:45 +0000
Files and hashes:         1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: 5BynsDMoVXFsXCx+JIh1oCv4HcsS0RHz2T+1vvdr5bc=)
                          2: 9D0722C8B24511EF879E88B5762E951A.roa (hash: re1+1WPfPmFof+DoUwQFqcaVy7veeKE2VogjJwa7xs8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 May 2025 00:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
        Validity
            Not Before: May 15 05:05:45 2025 GMT
            Not After : May 17 05:05:45 2025 GMT
        Subject: CN=6825762a-2164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:ae:b8:67:ba:85:2f:e3:b9:bb:d7:8b:a4:
                    30:e0:75:70:08:c7:85:cc:b9:b1:7b:9d:37:50:88:
                    73:9d:de:03:65:f2:bc:83:d8:4c:6d:fe:61:f8:31:
                    9b:67:5c:f1:05:de:b3:1d:9a:5e:79:1a:e3:67:fe:
                    dc:ff:85:45:3d:1c:62:22:7d:bc:8e:98:73:45:b0:
                    0f:c4:4e:0a:13:5f:fa:c6:6c:ac:70:22:0a:9b:0f:
                    90:1a:25:56:eb:25:0e:64:bb:a5:0f:22:05:d2:76:
                    83:42:7d:32:84:a0:b4:bc:3e:c0:98:fa:ce:0b:4c:
                    74:39:e8:a2:d5:b4:42:d6:9a:59:fd:df:51:9f:5c:
                    d2:9b:d9:fb:c2:8b:a6:ac:1d:18:2c:23:5b:a2:61:
                    6a:91:78:9c:5c:85:db:33:ae:b4:88:08:56:c4:87:
                    3c:a3:02:25:0f:90:cd:c2:16:49:e6:0a:e1:eb:1d:
                    b6:61:df:22:4d:cb:08:35:fd:00:df:c2:0d:6b:07:
                    35:40:e5:7a:08:73:32:e5:f7:63:6d:e4:f8:76:d7:
                    2b:8c:3e:4f:7c:10:4a:97:f7:e8:16:71:0c:f6:6d:
                    69:13:20:72:0d:19:17:98:16:09:71:92:91:70:5a:
                    ad:5d:fb:75:d1:94:5a:8a:e3:47:3d:0a:d2:6c:68:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:83:49:A6:7E:1A:08:94:A0:CE:E8:F0:21:60:0C:B1:4A:26:65:0F
            X509v3 Authority Key Identifier:
                keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:53:f6:b0:2d:1e:4b:5d:f8:63:ac:2e:48:f5:c7:f7:81:f5:
         30:70:b6:f6:c2:fb:97:cb:04:ee:b9:9b:25:12:b6:a6:52:07:
         a4:65:7f:14:ac:2d:cd:82:7a:22:ff:45:e5:58:0a:7a:ef:d2:
         0d:96:af:7a:84:16:5c:7f:db:ea:82:32:c2:60:30:62:ba:4f:
         a4:50:e1:8a:d4:96:18:f8:20:80:53:d6:06:49:d5:6d:e9:3a:
         32:41:43:0e:5b:a9:57:0c:28:6a:64:b7:dd:f9:13:62:f4:48:
         b8:03:67:f7:7c:ac:b2:c8:95:f4:05:71:50:c2:34:f0:a3:1e:
         7b:b7:79:88:a9:87:ea:7d:86:a4:d4:22:15:0d:64:93:58:a9:
         c8:3a:fa:22:84:1f:b4:a7:d7:35:20:f6:bb:a6:fe:5a:ee:72:
         05:8c:6b:be:42:1b:80:ee:eb:62:e5:50:e7:18:b4:29:01:cb:
         7c:71:7b:8f:ba:26:aa:90:06:9d:a2:fa:d5:a4:57:e5:e6:9f:
         15:96:9d:ff:a0:54:0a:d6:17:f9:ab:5b:70:cc:fd:9b:95:1d:
         a5:10:1d:6d:cb:05:60:b3:6c:5d:0f:b1:ef:3d:0f:e0:d5:72:
         6e:e2:28:ad:38:58:7e:8e:42:69:1e:e3:5b:28:c9:f6:25:7a:
         7e:bd:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:48:25 2025 by rpki-client