Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          Nj6VRmjwsq/8Rzup3ZGY0xD2N4s66+T95eZe0Ixod+A=
Subject key identifier:   68:A7:A9:34:EA:E4:1B:14:F7:D5:FC:9E:D6:F4:D7:4D:B1:C1:3A:A4
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       045F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          045D
Signing time:             Sat 23 Aug 2025 03:08:40 +0000
Manifest this update:     Sat 23 Aug 2025 03:08:39 +0000
Manifest next update:     Mon 25 Aug 2025 03:08:39 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: q/cfuoVKAf9UIF9/rO1MU7NzUGsB+q18TbmpWsgo7uw=)
                          2: 55A54EE42E9611EDA379C780F1222468.roa (hash: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=)
                          3: 189309602E9611ED8FED3480F1222468.roa (hash: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Aug 23 03:08:39 2025 GMT
            Not After : Aug 25 03:08:39 2025 GMT
        Subject: CN=68a930b8-92a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:b2:4e:43:8b:5a:7b:cc:b5:f8:d5:1a:ee:
                    b5:28:21:44:43:93:06:64:19:71:06:a1:18:2b:33:
                    10:42:d3:30:f1:0a:51:1d:b7:e0:b7:e3:c4:a0:41:
                    e8:b9:a3:f6:a5:13:a3:46:2d:3e:92:67:55:e8:7a:
                    53:b2:9a:61:7f:5d:21:c5:aa:7b:e7:6f:d0:d7:7e:
                    96:26:b1:c4:f0:83:2c:32:29:1d:c5:0a:12:29:3a:
                    54:b3:11:48:08:de:8e:33:5e:e6:25:aa:84:16:a8:
                    9a:4b:a4:cb:d0:8b:2d:f9:62:7a:e1:b6:e4:d1:9e:
                    bb:20:1c:ed:86:13:8c:32:2b:c5:f0:ee:6f:ac:9f:
                    99:46:47:c2:c5:23:6a:fb:ba:7a:8a:94:69:e2:99:
                    cd:c5:92:ae:e9:65:cc:48:02:ff:f6:9e:da:8f:d7:
                    94:25:1b:0f:67:a0:92:b2:a4:dd:75:43:e6:cd:91:
                    01:95:34:02:ff:3c:de:73:9d:28:08:56:ec:d9:fc:
                    fc:0a:5b:54:0e:64:91:23:0e:f8:bf:54:b8:10:54:
                    cd:54:c8:ec:b5:0f:db:2c:b5:b5:73:a5:e2:ef:e3:
                    bf:12:65:3f:de:dd:bb:1d:a0:4b:96:99:99:7c:cc:
                    3d:63:5d:04:8c:58:91:d2:e1:69:f8:cc:df:a2:3a:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:A9:34:EA:E4:1B:14:F7:D5:FC:9E:D6:F4:D7:4D:B1:C1:3A:A4
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:81:ae:31:a0:70:bb:1c:28:cb:53:0c:db:89:2e:55:27:e5:
         5a:0a:a2:03:c0:e7:fe:b0:11:4b:5c:53:df:40:98:a9:3f:44:
         44:cc:7b:af:7e:fb:c2:b0:76:51:58:f2:b8:f1:00:56:91:c4:
         e1:98:7c:ba:c7:8b:ec:b6:41:36:bf:44:03:a5:49:34:1a:d1:
         85:4d:fb:4d:f6:6f:4a:07:5f:59:33:3c:96:d2:bb:fe:56:e5:
         be:ea:20:a9:e2:13:3b:f2:c9:cb:01:bf:06:0d:07:20:43:76:
         eb:85:9b:32:11:22:a9:0c:7b:2b:33:ee:14:cb:35:24:6d:c0:
         e5:94:5f:c3:e5:7c:8a:7b:f8:cc:fd:cd:3f:43:28:86:1f:ac:
         bb:6e:a4:c8:02:8d:ce:ec:c6:e9:dd:59:65:55:d2:84:04:be:
         39:98:c8:94:13:c0:7a:08:9f:da:ae:12:23:f3:81:74:87:c8:
         e8:68:3d:48:4a:44:a3:a5:ca:eb:fd:f5:50:20:2a:8c:f6:2c:
         23:a1:86:72:88:0d:f4:a5:f0:97:1e:e4:f1:4a:0f:70:25:ec:
         99:86:6f:09:e7:29:b9:5c:cd:c5:c8:70:41:8d:ed:bf:1d:40:
         19:27:7b:c3:1c:ab:90:bd:20:9e:f5:0b:b9:21:ed:76:44:20:
         5e:83:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:50 2025 by rpki-client