Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
File:                     i-QDW-vJyDQotaJ76Fuslm125cs.mft (raw, json)
Hash identifier:          ZRyA+u1nj/hLcNSDxzCZKhqL0G3wS8rOGiMA+vsktkw=
Subject key identifier:   72:65:91:28:94:1F:2E:56:16:31:6F:CC:A7:D6:65:06:42:1E:AA:99
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Certificate issuer:       /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial:       0381
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
Manifest number:          037B
Signing time:             Mon 30 Jun 2025 03:33:29 +0000
Manifest this update:     Mon 30 Jun 2025 03:33:28 +0000
Manifest next update:     Wed 02 Jul 2025 03:33:28 +0000
Files and hashes:         1: i-QDW-vJyDQotaJ76Fuslm125cs.crl (hash: QYRGcsYo3al/TAJ/dLJOsyIzf5+v/+VkU0Wf4zxYzMU=)
                          2: 557725A0B21511EF88D2448C762E951A.roa (hash: opZztqXESofrVmYo2p5Jk1wm+34HapZU5YnopzpKiHA=)
                          3: 9394FD62B21511EFBC825D8E762E951A.roa (hash: lu1oced98iyT24G4vw7hwl0wpa8JR56UCd+rbr6ylXY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 03:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A854FAF, serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
        Validity
            Not Before: Jun 30 03:33:28 2025 GMT
            Not After : Jul  2 03:33:28 2025 GMT
        Subject: CN=68620589-556f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:f7:62:1b:8c:38:5c:f8:73:e1:8e:fa:5b:
                    93:f2:c9:48:fd:9f:84:26:62:66:57:fd:c9:9e:8e:
                    32:2d:c7:d1:8b:0e:99:64:81:6b:44:e9:d0:96:7c:
                    36:67:3e:cd:f4:12:22:9f:2f:0f:95:70:0b:9f:c7:
                    cc:80:2d:13:84:96:45:15:08:dc:58:d5:28:25:ee:
                    b4:6b:71:8f:38:8b:97:ea:af:83:c7:ff:bb:19:9d:
                    5c:68:9f:d6:4d:f3:5b:38:ad:54:51:48:29:1e:93:
                    1b:8d:7f:16:f7:2f:ed:e7:20:fc:14:47:8c:cd:22:
                    70:13:46:67:d5:a1:15:d0:78:da:ea:98:f5:76:2a:
                    07:3b:8c:e7:fa:3c:cb:b3:db:80:b3:59:c5:12:ce:
                    fc:4c:13:0d:4f:6c:e6:dd:88:55:c8:1d:20:c1:d4:
                    74:d7:3b:0b:67:31:55:cc:9e:a6:b8:cb:26:03:a0:
                    af:db:b8:ee:06:69:de:d4:68:46:08:62:d7:c1:ca:
                    57:96:a6:fb:7b:0e:00:d7:ad:cf:a0:f4:a3:7d:8b:
                    8f:7d:6d:77:9c:64:43:bd:6c:e4:f9:07:bf:2a:1c:
                    3b:58:99:cd:13:84:b8:69:c2:af:61:42:31:6a:7b:
                    02:ca:f5:2c:38:d8:6f:ff:58:04:22:1f:f3:68:26:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:91:28:94:1F:2E:56:16:31:6F:CC:A7:D6:65:06:42:1E:AA:99
            X509v3 Authority Key Identifier:
                keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1d:aa:ad:8f:5f:44:89:a6:b5:a2:16:80:23:b0:09:0c:47:
         b8:00:f7:77:04:15:c3:9a:fe:31:8d:9a:5d:30:54:9b:e5:5a:
         2a:75:97:1d:1e:0f:a8:df:42:eb:40:2f:18:bb:b8:7e:8a:b3:
         15:b7:05:f3:cc:b7:4c:56:9b:0b:a0:60:19:e3:1f:b3:da:cb:
         8e:53:56:f1:28:b6:ed:05:6f:9d:d6:80:4e:dc:d4:00:3f:ff:
         7d:ae:7e:d5:c7:2e:c1:0d:7f:18:e7:63:01:47:36:bd:da:36:
         61:9b:04:39:08:3f:9d:fa:36:36:2f:ca:98:2f:a1:88:54:cc:
         10:2a:6f:fe:e3:cc:88:ad:fa:df:8a:b0:79:df:eb:c0:5d:21:
         9f:bb:af:2c:3a:0a:99:e8:e0:85:6b:b2:b1:f5:18:b9:35:5f:
         57:5c:62:53:6f:de:f3:48:aa:d3:72:4f:b3:cc:f4:d6:ba:3c:
         d1:f0:c4:43:00:84:51:97:a2:84:c4:5a:0d:6e:7f:bb:86:fb:
         4c:30:b5:aa:3a:c0:4d:76:5f:0f:1c:e9:d2:3e:67:45:14:4e:
         a0:bc:55:c3:d0:73:51:79:3b:1e:ac:bc:8b:f2:74:26:8e:c6:
         9e:38:9d:00:c2:22:be:bf:4b:bb:77:83:ea:ca:11:db:ac:3b:
         01:93:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:45:52 2025 by rpki-client