Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
File:                     4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft (raw, json)
Hash identifier:          nmjWRaV3llgWfjfGAtE91RyFvryomNU9uelAy8dVJlo=
Subject key identifier:   54:5E:A2:53:7B:F2:4C:B2:21:80:92:B4:96:44:A5:8D:E1:BD:9D:E2
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Certificate issuer:       /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial:       0288
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
Manifest number:          027C
Signing time:             Sat 23 Aug 2025 04:13:11 +0000
Manifest this update:     Sat 23 Aug 2025 04:13:10 +0000
Manifest next update:     Mon 25 Aug 2025 04:13:10 +0000
Files and hashes:         1: 4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl (hash: QnV5ohmictMKVyESDAfWT+IeBA6PDuUfOz1y6YMC6JA=)
                          2: 593B925C596E11EFAD90467E762E951A.roa (hash: Z5CYZ2IOfV8aBkJsq9QO/61cXj1PNQGbmsacp+Lx38Y=)
                          3: 90A7FF96596E11EFB7B89980762E951A.roa (hash: Jct/DE7jbdzag1sJ78KOFrSil6rAnNvZrf+Ryhzlfqk=)
                          4: C60C59567D8711EF97D7ACB4762E951A.roa (hash: qjux6GhSq9uX5DCNJbFQuyrkaPLVantCfSfpdQCqZvM=)
                          5: 24A9CB30596E11EFA89A0E7E762E951A.roa (hash: eSokWiFbXZKHYJAeMCSCb+kdTU9P/gdQpCGsPx3aeF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 04:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3A58AF, serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
        Validity
            Not Before: Aug 23 04:13:10 2025 GMT
            Not After : Aug 25 04:13:10 2025 GMT
        Subject: CN=68a93fd7-b344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:cb:6b:f2:1d:22:73:4a:65:d7:73:c8:9b:1c:
                    cc:4e:d0:55:ae:29:24:12:b4:f3:cc:55:3a:70:a8:
                    21:10:b2:e4:04:42:2a:88:3d:b7:ce:06:1f:3a:fe:
                    b5:1a:fc:b7:2a:89:27:26:3d:0a:a4:5a:8b:6f:46:
                    3f:bf:33:09:be:24:3d:30:66:2c:93:cc:c6:1d:fd:
                    f3:0d:cd:77:d2:7c:5e:aa:19:9d:15:16:aa:4a:bd:
                    e7:59:0a:64:65:13:e7:c9:43:80:be:d7:aa:e3:53:
                    12:e8:a9:7e:24:21:c7:ea:57:63:de:0c:8d:d9:b0:
                    b5:e6:46:d3:b2:39:66:55:44:fd:17:b3:11:2d:a6:
                    cc:56:b7:11:e5:7a:fb:26:cc:76:aa:d3:ac:d5:17:
                    56:e5:e7:a8:d4:9e:82:e8:23:4e:40:f2:ad:a9:e4:
                    24:f9:cf:19:0c:42:bd:db:0d:86:77:08:7f:a1:a1:
                    23:28:37:d2:9a:35:e5:ff:6a:cb:30:66:85:e4:a9:
                    0b:73:7e:36:5e:6f:91:3e:3d:f8:74:cb:a5:f3:83:
                    06:e4:18:03:2a:a5:6d:80:f9:2d:30:d3:50:44:d2:
                    4c:a3:5b:e4:ed:d6:e4:e4:7c:f1:c7:9e:98:22:02:
                    5c:ad:0a:3c:25:da:1f:46:be:66:72:3a:c8:fb:b1:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5E:A2:53:7B:F2:4C:B2:21:80:92:B4:96:44:A5:8D:E1:BD:9D:E2
            X509v3 Authority Key Identifier:
                keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:06:78:ff:8a:36:f6:4d:a2:63:51:1b:d5:f1:57:8e:54:
         fe:07:0e:1a:65:26:23:09:c4:7c:28:83:7c:31:9d:92:b7:0e:
         18:72:18:81:2f:81:26:94:92:b7:95:39:b3:1e:11:af:89:8d:
         20:9c:57:76:b3:97:d8:1e:e1:e3:64:36:e8:c1:9b:0b:18:c6:
         88:c7:03:d0:2a:aa:e1:e8:90:14:0c:0a:f8:53:95:19:3e:d3:
         6e:4a:e2:4d:63:44:2f:09:96:0a:fc:a5:86:a5:e1:c2:3c:0f:
         df:7a:05:71:45:d6:1c:90:a5:63:ac:8b:72:41:e4:cd:2d:09:
         70:06:4e:e0:10:b4:51:ab:eb:e2:72:3b:c9:e6:64:17:ff:88:
         54:f8:bf:32:fb:c3:d2:70:31:14:df:f3:fc:af:f7:9e:73:6c:
         2d:92:c5:77:96:54:8d:1c:1b:48:42:00:62:45:57:a7:c3:a8:
         0d:4d:45:a2:63:98:31:ca:11:d1:74:03:ff:c3:c8:32:ed:34:
         e9:07:da:1a:a7:7b:5c:fe:0b:1a:e8:a6:6b:da:c4:ac:ca:4d:
         bd:6c:52:3c:a3:dc:38:c5:53:c3:9f:ee:a8:b5:44:ab:e5:77:
         fc:a2:94:52:a3:9d:74:77:fc:fb:43:8e:3f:d7:84:3c:da:3b:
         5e:0b:40:4c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAogwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzNBNThBRjExMC8GA1UEBRMoRTE1RjUwREREMjhFMDJGRDZFNjk2NkQ1OTE4RDFC
MEJCRjQ2ODRFODAeFw0yNTA4MjMwNDEzMTBaFw0yNTA4MjUwNDEzMTBaMBgxFjAU
BgNVBAMTDTY4YTkzZmQ3LWIzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD7y2vyHSJzSmXXc8ibHMxO0FWuKSQStPPMVTpwqCEQsuQEQiqIPbfOBh86
/rUa/LcqiScmPQqkWotvRj+/Mwm+JD0wZiyTzMYd/fMNzXfSfF6qGZ0VFqpKvedZ
CmRlE+fJQ4C+16rjUxLoqX4kIcfqV2PeDI3ZsLXmRtOyOWZVRP0XsxEtpsxWtxHl
evsmzHaq06zVF1bl56jUnoLoI05A8q2p5CT5zxkMQr3bDYZ3CH+hoSMoN9KaNeX/
asswZoXkqQtzfjZeb5E+Pfh0y6XzgwbkGAMqpW2A+S0w01BE0kyjW+Tt1uTkfPHH
npgiAlytCjwl2h9GvmZyOsj7sYR9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVF6i
U3vyTLIhgJK0lkSljeG9neIwHwYDVR0jBBgwFoAU4V9Q3dKOAv1uaWbVkY0bC79G
hOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMzQTU4LzFCNzhDNjBDQThCRjExRUVCQjNDQTg1NTc3NTQxMkU2LzRWOVEz
ZEtPQXYxdWFXYlZrWTBiQzc5R2hPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRWOVEzZEtPQXYxdWFXYlZrWTBiQzc5R2hPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzNBNTgvMUI3OEM2MENBOEJGMTFFRUJCM0NBODU1Nzc1
NDEyRTYvNFY5UTNkS09BdjF1YVdiVmtZMGJDNzlHaE9nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvhgZ4/4o29k2iY1Eb1fFXjlT+Bw4a
ZSYjCcR8KIN8MZ2Stw4YchiBL4EmlJK3lTmzHhGviY0gnFd2s5fYHuHjZDbowZsL
GMaIxwPQKqrh6JAUDAr4U5UZPtNuSuJNY0QvCZYK/KWGpeHCPA/fegVxRdYckKVj
rItyQeTNLQlwBk7gELRRq+vicjvJ5mQX/4hU+L8y+8PScDEU3/P8r/eec2wtksV3
llSNHBtIQgBiRVenw6gNTUWiY5gxyhHRdAP/w8gy7TTpB9oap3tc/gsa6KZr2sSs
yk29bFI8o9w4xVPDn+6otUSr5Xf8opRSo510d/z7Q44/14Q82jteC0BM
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:33:07 2025 by rpki-client