Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File:                     iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier:          gzI8SQB5r/Cx4Xe0u0kWFl2GKLNOqfRyqEiqKNQLeQk=
Subject key identifier:   91:F3:E9:DD:9B:61:02:D6:8C:47:89:5C:34:8A:D8:FD:EB:3F:F4:13
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer:       /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial:       0422
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number:          041D
Signing time:             Thu 03 Jul 2025 03:14:07 +0000
Manifest this update:     Thu 03 Jul 2025 03:14:06 +0000
Manifest next update:     Sat 05 Jul 2025 03:14:06 +0000
Files and hashes:         1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: M9ybt2PA4o5ZbhCAe53D7ramltdIHnowsjfyOAwwKXk=)
                          2: C4EF296EF5CC11EF948FCB78762E951A.roa (hash: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3E3DAF, serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
        Validity
            Not Before: Jul  3 03:14:06 2025 GMT
            Not After : Jul  5 03:14:06 2025 GMT
        Subject: CN=6865f57f-58e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:df:75:63:72:dd:57:7a:4e:9f:e8:98:38:
                    b5:be:26:04:4f:25:f1:39:9b:ef:a1:b2:7f:62:e7:
                    14:26:b2:ba:32:ef:4c:47:01:65:a0:33:71:a3:43:
                    3b:6d:5c:a6:59:56:6d:0c:52:e9:49:24:65:2f:25:
                    34:0c:ec:a0:19:ca:6c:05:7f:01:53:66:05:8f:09:
                    04:a8:4e:25:04:15:27:66:d6:e5:3c:86:21:68:26:
                    e2:d6:1c:fb:a1:e3:e0:58:eb:21:36:fe:61:08:bb:
                    38:6c:ec:08:7f:8a:ce:4a:66:13:5b:d9:6e:8c:81:
                    c0:53:91:b2:8f:7b:f4:a4:ef:c3:12:85:2c:38:94:
                    04:65:3d:41:00:5a:2c:28:23:65:01:c7:a6:82:f4:
                    ca:8b:79:d1:77:94:42:85:75:cc:5a:da:bd:29:ef:
                    34:74:42:c2:08:c6:e4:93:ca:e6:61:79:14:51:6d:
                    81:f6:14:0c:b7:f1:0f:0c:35:34:d3:34:a0:d1:68:
                    97:d6:39:f4:5e:93:a8:79:e4:2c:d6:a5:7c:d5:66:
                    48:1b:1f:0a:4e:9d:b5:7c:c7:73:ae:d7:b0:8c:43:
                    0c:0b:e2:16:66:75:d4:d3:b6:09:37:f0:81:23:be:
                    94:e2:55:60:20:81:20:0a:17:60:ab:41:39:1a:38:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F3:E9:DD:9B:61:02:D6:8C:47:89:5C:34:8A:D8:FD:EB:3F:F4:13
            X509v3 Authority Key Identifier:
                keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:b9:11:34:28:e0:97:03:7f:c3:c1:fd:9f:6d:34:05:f4:
         c4:d3:98:56:69:4a:7b:b2:bb:0b:57:01:98:dc:57:51:f0:cd:
         aa:a0:c4:6e:df:40:2d:2e:33:9e:db:77:b3:36:80:57:6e:a0:
         50:5f:37:c6:c7:5b:a4:a7:20:67:29:c9:a5:b4:c4:55:ed:3b:
         be:43:56:2d:ac:4a:ce:d7:e5:4a:94:a4:e2:83:cc:03:09:e5:
         39:ea:69:e9:e9:e7:8d:72:29:4f:10:26:c8:09:83:62:e1:36:
         e6:3b:c3:aa:eb:5a:7c:37:c2:3d:d9:18:06:66:5a:04:ff:d2:
         21:05:95:b6:9e:21:42:cd:73:d2:a0:6e:bb:16:69:b4:2e:d1:
         5a:44:c2:58:d0:2c:29:21:de:4c:11:6d:53:a9:97:5b:a8:78:
         c6:87:f1:b6:d7:2b:42:38:28:d9:fd:37:af:83:61:d7:e5:6d:
         97:e8:10:a1:38:1d:31:23:2b:02:91:2e:81:80:46:a0:1e:b9:
         d5:84:34:44:ef:21:42:7f:84:3d:3c:86:bb:a9:53:d6:2c:8a:
         6f:f4:2d:12:d1:09:1e:42:da:69:1d:98:c1:e4:39:88:28:6b:
         91:8c:80:69:26:b0:07:56:8f:80:95:91:ec:08:4b:20:af:4c:
         aa:31:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:07:10 2025 by rpki-client