Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
File:                     v2DdGbZCZae1tFPwFbi4pgtCmM8.mft (raw, json)
Hash identifier:          JzEv8qqe5cRM4QwpYDkLSGl23x8WjJIAVUT3+UtCetw=
Subject key identifier:   06:60:9D:BD:C2:A1:59:FF:BA:47:61:C7:9E:03:BB:76:2D:D8:4E:78
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Certificate issuer:       /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
Manifest number:          01F4
Signing time:             Sat 23 Aug 2025 04:29:54 +0000
Manifest this update:     Sat 23 Aug 2025 04:29:53 +0000
Manifest next update:     Mon 25 Aug 2025 04:29:53 +0000
Files and hashes:         1: v2DdGbZCZae1tFPwFbi4pgtCmM8.crl (hash: anBpyipYGrO7Se8KSkoFg1sGaXiAIdiq88Iv2+VOo08=)
                          2: 641ADEEC093411EFBC62A76A017001B1.roa (hash: 7RofrytqiAZkC8olZeL24JXarKRiHHpszoxgshTtLtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B86D4AF, serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
        Validity
            Not Before: Aug 23 04:29:53 2025 GMT
            Not After : Aug 25 04:29:53 2025 GMT
        Subject: CN=68a943c1-7462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:65:3e:70:f0:35:23:da:b3:b0:9c:66:7c:
                    52:c7:57:3d:4c:f5:d5:0a:4c:10:09:23:e5:29:bf:
                    e8:13:2d:bd:27:a7:62:89:ba:9f:ce:d0:b4:b0:5e:
                    2e:51:f0:29:8f:c5:dd:7d:44:66:ee:2c:ea:de:74:
                    34:76:92:c5:cd:e9:7f:94:a1:12:eb:e1:b5:23:90:
                    14:da:18:4a:8c:cc:d2:4c:c0:c6:cf:21:7a:96:59:
                    7f:70:11:4e:97:1b:16:79:09:51:36:88:75:91:e8:
                    26:3b:6a:64:6a:bd:0e:b5:66:f5:00:cd:c2:2f:77:
                    4d:6b:c8:fc:58:26:10:72:ab:e2:69:3b:1c:a3:a3:
                    4f:d2:e8:be:26:ba:67:d4:9e:7f:29:e9:69:71:0c:
                    cf:76:0c:4c:fe:2b:27:ea:11:4f:3f:65:b1:b6:59:
                    b4:7b:c5:42:76:5d:06:2b:c0:12:fd:0f:52:8c:ff:
                    f4:2a:6b:ee:12:e3:c1:91:1a:74:69:8d:e6:2e:8c:
                    99:6d:97:b3:12:2d:78:a6:dc:6a:89:a4:41:14:3c:
                    91:ac:02:00:66:bf:8c:19:d6:2b:94:a3:72:8f:15:
                    47:8a:1c:15:92:f4:e0:c9:26:82:34:0c:8f:2c:54:
                    64:3a:ae:ff:36:6c:6c:a6:13:e7:71:b6:0b:fe:46:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:60:9D:BD:C2:A1:59:FF:BA:47:61:C7:9E:03:BB:76:2D:D8:4E:78
            X509v3 Authority Key Identifier:
                keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:f2:9d:f7:1b:e3:c3:c0:de:20:a6:31:5b:64:91:9b:59:
         d4:0e:13:38:90:dc:b0:d1:06:da:e5:aa:8f:b0:42:af:4d:ad:
         be:68:5f:88:12:ed:82:9f:77:66:4c:bb:7e:4d:3c:b5:8a:fe:
         d4:b0:c2:fa:af:ac:06:9b:cf:c9:65:42:b3:54:57:a8:07:d8:
         41:12:f3:04:ed:ba:79:44:11:b7:b5:ae:48:fc:40:48:5d:d7:
         24:81:38:30:e9:ab:56:6d:43:4a:09:8a:e4:e7:30:d4:03:cc:
         9c:50:a0:da:c4:44:44:1e:ad:a2:5b:4f:be:98:d8:d8:82:4d:
         53:1b:5c:5b:db:1b:3c:bc:59:ed:d1:5d:37:b3:5c:fb:05:1a:
         29:a5:cd:dd:24:78:e2:07:ff:c5:3e:cf:7b:f4:5f:48:7a:bc:
         e5:20:51:5a:72:67:d4:53:45:0e:e9:06:61:90:1c:f5:d3:c0:
         a5:a5:ab:b1:54:8b:af:87:1b:da:17:78:db:7b:ea:6f:ce:8c:
         b0:5e:75:55:2a:00:16:be:25:15:7c:e3:3c:fb:36:28:69:43:
         95:93:73:8d:50:9e:48:21:d5:ad:c0:f0:95:7f:02:97:c9:56:
         cd:90:54:3d:4a:e4:d5:14:33:f0:20:94:5e:cb:db:c3:ee:81:
         65:d1:80:40
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Qjg2RDRBRjExMC8GA1UEBRMoQkY2MEREMTlCNjQyNjVBN0I1QjQ1M0YwMTVCOEI4
QTYwQjQyOThDRjAeFw0yNTA4MjMwNDI5NTNaFw0yNTA4MjUwNDI5NTNaMBgxFjAU
BgNVBAMTDTY4YTk0M2MxLTc0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+v2U+cPA1I9qzsJxmfFLHVz1M9dUKTBAJI+Upv+gTLb0np2KJup/O0LSw
Xi5R8CmPxd19RGbuLOredDR2ksXN6X+UoRLr4bUjkBTaGEqMzNJMwMbPIXqWWX9w
EU6XGxZ5CVE2iHWR6CY7amRqvQ61ZvUAzcIvd01ryPxYJhByq+JpOxyjo0/S6L4m
umfUnn8p6WlxDM92DEz+KyfqEU8/ZbG2WbR7xUJ2XQYrwBL9D1KM//Qqa+4S48GR
GnRpjeYujJltl7MSLXim3GqJpEEUPJGsAgBmv4wZ1iuUo3KPFUeKHBWS9ODJJoI0
DI8sVGQ6rv82bGymE+dxtgv+Rt8lAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBmCd
vcKhWf+6R2HHngO7di3YTngwHwYDVR0jBBgwFoAUv2DdGbZCZae1tFPwFbi4pgtC
mM8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI4NkQ0L0ExNzZFQUQ4MDkyNTExRUY4NkNDRURGNTAwNzAwMUIxL3YyRGRH
YlpDWmFlMXRGUHdGYmk0cGd0Q21NOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3YyRGRHYlpDWmFlMXRGUHdGYmk0cGd0Q21NOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Qjg2RDQvQTE3NkVBRDgwOTI1MTFFRjg2Q0NFREY1MDA3
MDAxQjEvdjJEZEdiWkNaYWUxdEZQd0ZiaTRwZ3RDbU04Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ5fKd9xvjw8DeIKYxW2SRm1nUDhM4
kNyw0Qba5aqPsEKvTa2+aF+IEu2Cn3dmTLt+TTy1iv7UsML6r6wGm8/JZUKzVFeo
B9hBEvME7bp5RBG3ta5I/EBIXdckgTgw6atWbUNKCYrk5zDUA8ycUKDaxEREHq2i
W0++mNjYgk1TG1xb2xs8vFnt0V03s1z7BRoppc3dJHjiB//FPs979F9IerzlIFFa
cmfUU0UO6QZhkBz108ClpauxVIuvhxvaF3jbe+pvzoywXnVVKgAWviUVfOM8+zYo
aUOVk3ONUJ5IIdWtwPCVfwKXyVbNkFQ9SuTVFDPwIJRey9vD7oFl0YBA
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:05 2025 by rpki-client