Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File:                     zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier:          nbN8YDX6VqSxczKj5EN4k/kDtOcX52zPAAnHmF2hIp0=
Subject key identifier:   9D:CA:EA:F6:CB:BC:F6:27:8B:CE:4B:80:7C:43:92:E9:C8:C6:E1:F8
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer:       /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial:       0149
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number:          0148
Signing time:             Mon 20 Oct 2025 04:48:59 +0000
Manifest this update:     Mon 20 Oct 2025 04:48:59 +0000
Manifest next update:     Wed 22 Oct 2025 04:48:59 +0000
Files and hashes:         1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: J0SS7pe8mHHl/uEXeTozKr7F/sh+/3JbdgXOf62iO+U=)
                          2: 9D0722C8B24511EF879E88B5762E951A.roa (hash: re1+1WPfPmFof+DoUwQFqcaVy7veeKE2VogjJwa7xs8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
        Validity
            Not Before: Oct 20 04:48:59 2025 GMT
            Not After : Oct 22 04:48:59 2025 GMT
        Subject: CN=68f5bf3b-bc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:13:96:ea:0b:78:4f:b8:41:86:2a:66:4e:
                    e1:9e:2c:20:17:b9:0c:a4:44:29:f7:45:28:ba:ff:
                    d0:9b:a8:54:1a:38:a2:96:0a:73:dc:9a:af:36:82:
                    e9:5b:3e:41:e6:a7:f2:26:61:42:d9:73:9f:82:6b:
                    06:c0:0f:86:af:47:9d:43:05:37:b8:fa:0b:9b:f7:
                    0d:6e:33:4c:2f:69:ca:ba:5e:a9:ce:9e:09:d3:f3:
                    da:8f:cf:20:a3:a8:b3:d2:d5:d0:c0:55:d5:4d:f6:
                    8c:37:c3:22:45:4b:f0:8f:3c:d4:94:87:9e:f2:1d:
                    d7:96:4a:ef:7d:08:1a:58:38:68:b7:69:36:d3:aa:
                    e8:c7:64:55:51:e1:a8:9b:4a:78:0e:2e:a1:22:d5:
                    82:9d:4a:d9:b5:d6:ba:d7:18:cd:6e:c6:a6:3d:73:
                    75:c0:4d:5e:93:42:80:2d:ac:b6:9c:ec:eb:cf:0e:
                    6b:a6:65:c4:02:5a:2d:41:a9:d5:af:3d:d7:2a:cf:
                    35:49:03:c5:24:72:3a:cd:57:b8:a2:72:76:0d:0a:
                    f2:88:b7:18:1b:32:41:a5:2b:a6:58:76:1c:aa:9e:
                    27:8a:1f:52:6c:47:21:62:9c:ea:f3:18:ff:19:e9:
                    c4:a8:80:0c:81:7d:c0:e2:e8:7f:20:48:80:c8:ff:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:EA:F6:CB:BC:F6:27:8B:CE:4B:80:7C:43:92:E9:C8:C6:E1:F8
            X509v3 Authority Key Identifier:
                keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:a1:69:b1:74:64:62:fa:69:98:5f:17:d5:8a:81:f6:ae:
         4c:5d:57:7a:bf:04:58:f1:ca:16:ef:9d:01:74:37:bb:b6:85:
         2c:82:c8:05:43:ad:de:0b:f0:b4:f1:5d:22:43:30:3e:8e:b8:
         f4:21:b4:08:0a:55:c1:7b:14:ba:68:e6:a4:f1:91:b6:27:4b:
         4c:a2:c5:b0:4f:37:80:37:9d:a4:35:e9:f0:7d:ba:86:5d:f4:
         3e:88:de:65:1e:99:d0:8f:0b:9d:3b:ec:fd:c7:f1:ce:0e:e6:
         f7:14:ad:a7:6f:31:a0:cb:8f:90:27:1b:f1:ef:fe:1b:7f:ab:
         43:6a:6a:ee:09:98:68:0c:be:00:67:8c:3d:7a:34:e5:b3:44:
         3a:a8:e9:21:88:e2:82:ea:52:c4:13:76:23:df:d3:c3:f1:66:
         4a:fa:25:14:50:7a:8c:1f:e1:3b:7a:8c:17:6d:9c:15:a3:ae:
         0b:5c:fb:ec:9e:02:46:b0:26:d9:6e:f2:cb:40:7b:e9:3d:1c:
         71:c8:ab:90:1a:5b:04:f1:33:c4:93:ed:d8:4f:7a:03:4e:85:
         b1:7d:07:43:b6:0d:94:d4:9a:a3:1e:5e:88:62:0f:78:ba:33:
         a0:20:8c:af:13:92:55:0e:19:e6:5a:c7:0b:b1:90:ce:ec:80:
         a6:09:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:35 2025 by rpki-client