Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File:                     Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier:          yGXEX27I9Ddwch2D2Tmr9QMF6+kxWkQDMbcIoedqt64=
Subject key identifier:   84:98:90:CE:58:F8:41:46:B1:97:19:A1:AC:07:35:92:47:D4:A9:F9
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer:       /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial:       0559
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number:          0553
Signing time:             Sun 19 Oct 2025 02:41:58 +0000
Manifest this update:     Sun 19 Oct 2025 02:41:57 +0000
Manifest next update:     Tue 21 Oct 2025 02:41:57 +0000
Files and hashes:         1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: oJznWjfwV+kjmyqxkpQ7e3VMTe3U5EiSB4anzVraVJw=)
                          2: B59F24BCF57211EC993D889DF1222468.roa (hash: maJQ7QpaTAEJtJEDY71F+/C/LFPT623BEcfsghzWeRo=)
                          3: 7FA7A028F57211ECB728E09CF1222468.roa (hash: SHmJD0o/WKe9DuMaCzkIRZ50PJsm8QXP+INyJbesPiI=)
                          4: 331F5746A0F411ECAE812B975A40D577.roa (hash: FvEjzuf2UFe1epBdLgowypdTxhYaL6zKJK6RJCwngCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
        Validity
            Not Before: Oct 19 02:41:57 2025 GMT
            Not After : Oct 21 02:41:57 2025 GMT
        Subject: CN=68f44ff6-f034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:e5:9b:61:93:d8:ad:73:c0:d4:57:51:bb:
                    58:53:18:1b:84:f3:20:7c:46:03:65:a5:21:32:1f:
                    50:6c:c9:39:d7:d2:8c:b1:2b:57:45:0b:25:38:e1:
                    0c:d1:14:20:ad:9e:1c:70:eb:cc:1c:e7:a0:a3:2a:
                    cc:e4:7d:21:9a:8c:29:f9:f4:44:fe:61:49:7e:c8:
                    0d:ac:5e:8a:34:96:08:28:4a:cd:ad:02:bc:d2:be:
                    59:a9:63:8b:d7:52:8c:8c:9c:07:60:0f:5b:b0:bd:
                    4d:4e:06:62:9b:f8:4c:04:46:ca:1c:ee:f2:36:96:
                    9f:11:d5:bd:12:1a:74:ef:eb:61:f9:78:e1:bf:eb:
                    a7:36:78:55:fc:2d:e5:1c:8a:30:22:a7:91:6d:aa:
                    9a:c2:46:f2:37:15:83:c0:1c:34:fa:0f:1c:13:b7:
                    4f:dc:65:ba:c5:4b:8a:c8:21:aa:c4:3f:9b:4b:0a:
                    ba:4d:46:50:57:3c:7c:c1:f6:72:8e:f3:58:55:30:
                    8a:6f:14:08:48:fe:df:26:85:0a:1d:0b:e5:6d:8a:
                    18:13:b1:cb:38:20:3e:5b:ee:5a:94:46:be:0c:71:
                    6a:a6:33:cd:98:27:ac:28:72:1a:58:14:43:d5:9e:
                    dc:87:d9:49:7c:3d:db:55:bd:22:74:19:2c:fd:fc:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:98:90:CE:58:F8:41:46:B1:97:19:A1:AC:07:35:92:47:D4:A9:F9
            X509v3 Authority Key Identifier:
                keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:dc:4c:54:22:16:fa:4e:d6:18:cd:8a:62:9e:35:52:2e:
         79:5d:fa:c5:d3:bf:86:42:6c:67:4a:b2:b5:92:1d:04:7b:1f:
         78:00:08:8f:8a:56:2a:76:3e:5d:55:99:a2:36:49:5f:d8:f1:
         b9:23:3c:2e:0e:40:f7:44:31:cc:03:94:1b:99:20:15:0b:39:
         ca:02:de:49:84:da:52:03:a9:02:96:3d:61:32:93:a7:1b:c9:
         2b:ef:f5:3a:e6:fd:79:d8:7f:53:cf:ee:ed:8b:c1:a6:50:64:
         ba:b7:aa:16:98:cb:8c:70:d0:3b:22:8b:05:05:50:aa:fc:81:
         dc:67:8d:31:bf:22:96:4b:6f:61:b1:8b:b3:9d:45:d1:3f:3e:
         28:95:77:bb:c8:8d:f2:d6:09:fe:f1:5e:df:20:3b:a1:b5:ea:
         ef:5e:d7:fa:ab:03:15:e8:dc:a0:2f:d3:14:9d:89:b7:61:ab:
         9a:a7:5d:97:14:dc:a9:0d:57:ca:29:13:f0:f7:9a:a8:c9:c1:
         ac:ae:f1:04:97:80:b2:e3:c1:36:24:59:cb:2f:af:e7:23:8b:
         9c:2e:df:e9:80:2b:89:e3:9b:1c:e9:64:18:ba:2e:ca:d9:39:
         50:76:35:4b:63:98:d6:40:e2:58:e9:17:6d:5f:45:23:62:52:
         b8:07:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:12 2025 by rpki-client