Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
File:                     5U9enM9-t26XkK6VM_5KhMiy_Lw.mft (raw, json)
Hash identifier:          DqP3HXezR6L5m0EEUNw8/wDhmYMJqts/aQYRg6Mjqsw=
Subject key identifier:   21:FC:7A:FB:D8:C4:14:5D:17:B3:41:19:CF:67:91:F7:3E:FE:6C:C5
Authority key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
Certificate issuer:       /CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
Certificate serial:       016C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
Manifest number:          016B
Signing time:             Sat 23 Aug 2025 04:48:40 +0000
Manifest this update:     Sat 23 Aug 2025 04:48:39 +0000
Manifest next update:     Mon 25 Aug 2025 04:48:39 +0000
Files and hashes:         1: 5U9enM9-t26XkK6VM_5KhMiy_Lw.crl (hash: Dmkf2+4n7Y4Y4+rasd9IRFPxFAAjbN1uSEqOrrv5+rk=)
                          2: 690AD7B26C3111EF81B16842762E951A.roa (hash: rHzjxo/eO2fqIELNKfmN3/VjzzeCb8hHN9sTo2VjXI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CACCCAF, serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
        Validity
            Not Before: Aug 23 04:48:39 2025 GMT
            Not After : Aug 25 04:48:39 2025 GMT
        Subject: CN=68a94828-7f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:5e:ff:dd:0e:2a:c2:98:d2:66:08:5c:d2:
                    28:e6:5f:cf:71:f7:1e:de:3d:0f:32:11:a2:72:0e:
                    1a:e6:6a:18:03:71:b1:17:af:64:de:02:81:23:89:
                    b3:d4:08:5a:a3:b3:b7:01:8d:62:13:66:f3:b5:84:
                    f8:d9:e9:ef:0a:80:09:f3:f1:62:77:36:d6:30:89:
                    9f:84:a2:08:2b:0e:3d:36:f4:65:20:59:cb:33:ca:
                    b6:e9:25:86:33:82:85:c4:32:14:91:ae:9f:5b:bc:
                    19:89:4c:e2:f8:e5:cb:89:09:72:33:e0:84:00:16:
                    09:11:bd:92:6d:dc:6b:a5:95:4a:25:08:24:d0:eb:
                    c3:d2:e7:94:eb:d0:9b:29:d6:3c:6d:94:5d:cd:a1:
                    ab:8c:3a:19:ca:b7:46:fb:fc:eb:4e:a2:13:cd:28:
                    48:87:22:78:29:aa:8c:66:89:50:fa:ac:35:49:dd:
                    b6:65:95:d9:ba:5a:92:b3:fd:2e:05:ec:1b:d5:19:
                    ea:fa:0f:1a:61:84:3e:96:a8:c3:12:60:70:76:9f:
                    79:53:d2:ff:ab:e7:b8:83:51:a9:d9:44:87:3e:dd:
                    9f:9f:9c:17:e0:a3:73:66:c7:c9:15:a0:36:3a:33:
                    f7:ed:cc:f6:b1:7f:a9:fe:01:92:f0:00:db:5b:a3:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:7A:FB:D8:C4:14:5D:17:B3:41:19:CF:67:91:F7:3E:FE:6C:C5
            X509v3 Authority Key Identifier:
                keyid:E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:66:55:20:e2:86:a5:f0:b1:0b:6a:75:55:72:8b:38:a5:
         37:aa:1a:3f:f9:2a:22:77:69:33:b1:07:9d:8a:3f:f4:13:4a:
         6f:77:bc:7c:d5:2c:49:28:84:94:5d:e4:6e:fe:8a:0b:a0:1f:
         ce:eb:a8:c1:9a:70:ce:fc:4d:38:ca:2b:8a:cd:31:46:23:1d:
         78:5f:0c:c7:9f:2f:df:5a:81:e3:c2:23:19:9a:91:a1:f1:3d:
         a5:f0:4b:b7:dd:02:8c:39:b7:17:53:7f:d5:3b:a8:e0:2c:13:
         0a:53:47:5e:fe:65:e6:4e:7c:88:b4:fd:58:5b:27:0d:a4:f3:
         1b:06:cd:e1:95:38:f5:2c:b3:64:c0:3c:45:41:36:e6:2d:fd:
         ba:bf:8a:b5:fe:92:f8:02:87:88:ba:84:b1:2e:81:bf:3c:12:
         8e:4f:0e:c1:d6:cb:13:b0:a1:d9:34:fe:ff:ab:e9:5d:a6:15:
         d1:0b:2d:32:84:9b:e1:01:bb:cb:9c:7e:db:c0:c8:95:9c:2f:
         2f:3e:96:9d:ef:63:97:6b:5a:a8:6d:ef:d9:26:b7:78:44:6c:
         d6:b5:b6:92:65:f6:bd:d0:65:96:9e:ee:c8:55:4f:75:12:a9:
         a6:a9:a6:c4:cf:a8:9a:11:bb:b4:8c:d8:b2:df:64:30:1d:97:
         f8:be:43:4c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FDQ0NBRjExMC8GA1UEBRMoRTU0RjVFOUNDRjdFQjc2RTk3OTBBRTk1MzNGRTRB
ODRDOEIyRkNCQzAeFw0yNTA4MjMwNDQ4MzlaFw0yNTA4MjUwNDQ4MzlaMBgxFjAU
BgNVBAMTDTY4YTk0ODI4LTdmNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+A17/3Q4qwpjSZghc0ijmX89x9x7ePQ8yEaJyDhrmahgDcbEXr2TeAoEj
ibPUCFqjs7cBjWITZvO1hPjZ6e8KgAnz8WJ3NtYwiZ+EoggrDj029GUgWcszyrbp
JYYzgoXEMhSRrp9bvBmJTOL45cuJCXIz4IQAFgkRvZJt3GullUolCCTQ68PS55Tr
0Jsp1jxtlF3NoauMOhnKt0b7/OtOohPNKEiHIngpqoxmiVD6rDVJ3bZlldm6WpKz
/S4F7BvVGer6DxphhD6WqMMSYHB2n3lT0v+r57iDUanZRIc+3Z+fnBfgo3Nmx8kV
oDY6M/ftzPaxf6n+AZLwANtboww9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIfx6
+9jEFF0Xs0EZz2eR9z7+bMUwHwYDVR0jBBgwFoAU5U9enM9+t26XkK6VM/5KhMiy
/LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBQ0NDL0RDNjQ3QjQyNkMzMDExRUY5MURCOEJCRTc2MkU5NTFBLzVVOWVu
TTktdDI2WGtLNlZNXzVLaE1peV9Mdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVVOWVuTTktdDI2WGtLNlZNXzVLaE1peV9Mdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FDQ0MvREM2NDdCNDI2QzMwMTFFRjkxREI4QkJFNzYy
RTk1MUEvNVU5ZW5NOS10MjZYa0s2Vk1fNUtoTWl5X0x3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/1WZVIOKGpfCxC2p1VXKLOKU3qho/
+Soid2kzsQedij/0E0pvd7x81SxJKISUXeRu/ooLoB/O66jBmnDO/E04yiuKzTFG
Ix14XwzHny/fWoHjwiMZmpGh8T2l8Eu33QKMObcXU3/VO6jgLBMKU0de/mXmTnyI
tP1YWycNpPMbBs3hlTj1LLNkwDxFQTbmLf26v4q1/pL4AoeIuoSxLoG/PBKOTw7B
1ssTsKHZNP7/q+ldphXRCy0yhJvhAbvLnH7bwMiVnC8vPpad72OXa1qobe/ZJrd4
RGzWtbaSZfa90GWWnu7IVU91EqmmqabEz6iaEbu0jNiy32QwHZf4vkNM
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:42 2025 by rpki-client