Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          ST9/wdj0rCxD0gJj3G0ohiKt+D2i4mj84CsGwcyC+hI=
Subject key identifier:   DC:E5:81:57:7E:E3:43:22:94:05:33:A7:DC:39:A1:79:E9:86:8A:3A
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       0167
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          0166
Signing time:             Sun 19 Oct 2025 04:43:10 +0000
Manifest this update:     Sun 19 Oct 2025 04:43:10 +0000
Manifest next update:     Tue 21 Oct 2025 04:43:10 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: iEDz6KxAK4qsQtA9XQXHFimRWG+LZk9lJgavGkZtfrw=)
                          2: 06EE82A89B9E11EFA256DA5A762E951A.roa (hash: 2jh2P8eMrHu4GkQNFQFJgeOA87Bp3duiKWGcRIfCjWE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Oct 19 04:43:10 2025 GMT
            Not After : Oct 21 04:43:10 2025 GMT
        Subject: CN=68f46c5e-f4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:80:bd:e0:8c:24:b7:60:9d:80:34:dc:6a:
                    60:4c:a0:d8:07:21:a9:18:8b:ac:45:0f:95:59:77:
                    47:17:0c:de:bf:50:c2:81:54:d5:e0:6d:c0:8b:42:
                    4b:2c:e6:18:9b:92:80:55:af:72:ce:b2:67:45:4d:
                    0f:af:43:02:bf:fd:ae:6f:bc:a5:3d:bd:43:e1:b5:
                    0b:dd:11:57:96:87:c9:df:91:59:dd:2e:38:e5:28:
                    4f:c2:da:13:74:2b:be:ad:11:58:11:f8:e4:38:95:
                    5d:82:d5:28:f3:52:4e:0b:7f:cb:f0:0a:b6:da:fc:
                    b9:e3:e0:30:0f:4c:6a:d0:0e:e3:6d:a0:db:a0:9d:
                    ae:b4:b1:b9:df:c3:8b:90:22:fe:f1:a8:f7:0f:33:
                    59:77:c9:fd:f2:9f:83:f6:d7:c7:eb:c8:a1:06:aa:
                    6d:65:f3:c3:0e:e0:31:56:5d:d4:08:1e:ce:83:07:
                    6f:9d:53:59:52:f1:07:21:ee:5d:f1:ae:58:60:3e:
                    6d:ac:ee:26:0e:cb:70:00:b9:e2:60:f0:c4:9a:6c:
                    82:59:06:35:8e:d8:94:da:0a:26:8f:70:3d:1d:20:
                    62:db:80:b5:88:56:d6:0e:67:60:d4:16:29:8d:60:
                    6c:af:ed:60:87:f0:b0:52:06:27:5b:35:bc:2b:cc:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:81:57:7E:E3:43:22:94:05:33:A7:DC:39:A1:79:E9:86:8A:3A
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:86:bb:7b:6a:4a:cc:85:c1:12:e9:6b:fd:3e:49:38:bc:6a:
         04:27:db:d8:aa:14:75:0b:05:c0:ea:be:2e:1b:0c:3a:4b:d8:
         5b:f6:81:09:16:ed:df:98:09:59:ae:a5:33:b6:11:a6:44:e0:
         9f:03:79:38:ba:2c:dd:39:e3:f6:ff:ce:d7:b8:6c:d7:31:c7:
         7d:37:8f:c4:d1:80:96:17:6a:e7:90:54:d8:fc:82:32:d2:5e:
         23:15:88:8a:19:61:db:f3:74:99:c5:5a:b1:3a:4b:57:a4:95:
         fc:9e:8e:a5:b3:b1:94:4b:78:db:6b:a3:d8:b7:79:1b:1b:a6:
         17:0d:93:6f:22:32:ef:a6:15:92:70:b2:0d:e7:6f:41:57:b4:
         70:1b:b5:8f:01:7c:14:05:9c:95:9f:28:b2:24:93:64:e4:c0:
         84:07:aa:f1:24:ae:cd:d9:42:7d:5c:2c:00:7a:cc:b5:28:5b:
         10:f1:cb:1b:d4:50:c0:4d:31:f4:5b:d1:be:1d:ac:f3:93:e2:
         96:2a:50:35:1d:83:26:37:89:a4:40:c9:75:92:33:e4:db:d1:
         6d:d7:d4:e0:ab:f8:65:e5:32:26:54:c3:26:ea:3a:3c:ae:c9:
         49:65:ca:c7:4c:6e:97:7b:f6:13:44:59:1f:a4:22:ec:92:8b:
         f5:81:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:14 2025 by rpki-client