Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File:                     1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier:          WmL5EELCMHUFU2YzPGV85VPlur0GpRjUU58H7zw/7jA=
Subject key identifier:   8D:BD:FC:D7:F0:59:3F:04:27:77:D0:AD:6C:65:DA:02:26:63:24:BE
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer:       /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial:       03BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number:          03B9
Signing time:             Sat 23 Aug 2025 03:29:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:29:21 +0000
Manifest next update:     Mon 25 Aug 2025 03:29:21 +0000
Files and hashes:         1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: Bh0fRupiFzMOnmWwLUoJmgL2ISsvCFHB2LWkqEVr4hc=)
                          2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
        Validity
            Not Before: Aug 23 03:29:21 2025 GMT
            Not After : Aug 25 03:29:21 2025 GMT
        Subject: CN=68a93592-9193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:80:ff:21:f1:30:18:e9:cb:46:b1:4b:e2:
                    31:9e:ff:98:b6:a2:4a:64:6d:40:6f:b9:e4:0e:43:
                    15:63:d0:31:a3:e4:6f:2d:05:18:00:b7:d1:8e:3f:
                    2b:1d:30:6b:5f:47:7e:25:ae:35:a4:cb:e0:49:b5:
                    c7:cd:10:bc:f4:20:b9:8b:6a:4e:39:8f:34:8b:5b:
                    40:24:9b:6b:24:14:47:d9:3a:49:fc:8e:a3:6a:ae:
                    93:3b:b4:b3:9a:a5:71:a5:1b:75:0e:5b:42:75:28:
                    ca:f4:ee:fa:4d:e7:09:ea:63:70:65:b0:ff:9c:da:
                    91:1f:02:cf:38:cf:8b:19:01:c9:49:2b:11:25:ba:
                    d4:85:60:35:5e:40:a0:0a:88:99:6d:b3:08:fd:b0:
                    bd:25:69:ca:ac:be:df:e0:77:3e:3b:45:79:fd:21:
                    de:ad:89:e5:62:ad:2c:c3:0d:08:75:f8:5a:c5:d1:
                    dd:fc:7b:97:0f:e8:3b:0e:16:59:b4:89:4b:66:fa:
                    96:ee:46:80:d3:cc:b1:e3:0e:2b:e8:eb:40:30:59:
                    e5:6f:d9:ff:c8:f0:24:82:85:81:d3:b3:a1:04:b8:
                    50:55:3b:ee:d3:bb:c0:5f:bf:ac:fc:41:13:15:e8:
                    af:ce:41:a6:7e:8b:ad:c6:ff:4d:c9:b3:da:96:e0:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BD:FC:D7:F0:59:3F:04:27:77:D0:AD:6C:65:DA:02:26:63:24:BE
            X509v3 Authority Key Identifier:
                keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:54:a9:99:0a:11:ed:ac:d7:15:6f:82:97:5c:d8:96:95:21:
         ff:fe:9b:cf:19:83:3e:32:b7:db:e7:e8:cb:0c:43:78:49:ca:
         7f:93:7c:28:1f:50:10:8f:a0:48:94:66:ff:d0:b3:33:f1:1f:
         86:7e:f8:9f:09:73:3b:e9:20:7b:03:06:17:a8:9b:01:07:db:
         9b:9e:65:e2:f1:0a:01:84:cc:57:a7:18:6a:de:ae:93:a5:1d:
         71:53:fa:3a:8e:33:98:2b:e2:2e:4c:22:67:b0:87:f7:48:15:
         ee:53:bb:99:83:21:78:67:52:88:df:fa:78:00:af:b2:9a:7a:
         b5:59:71:a5:cd:04:df:1f:e1:ac:9d:84:5e:e7:40:45:05:92:
         85:77:64:e9:bc:d3:b3:88:9a:2a:79:fa:b3:c9:e7:96:ba:64:
         1a:63:08:22:46:54:0c:70:50:f4:ab:d2:9b:25:dd:5d:a5:ca:
         b1:df:bb:9c:a5:12:9c:24:33:b2:a7:88:ae:e5:d1:c3:0b:99:
         0a:bd:fe:40:e9:6c:bc:d0:4c:fc:4c:8d:4d:54:da:6b:b2:19:
         f8:72:38:70:2c:c3:c9:01:e3:27:e9:a7:e6:f0:3f:e0:33:8e:
         99:94:6d:05:51:25:94:7b:26:e1:09:66:5d:dc:1b:ae:5c:85:
         0a:c1:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:45 2025 by rpki-client