Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
File:                     TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft (raw, json)
Hash identifier:          T7kBtTnHL7N651dJ5aZ8vnlYrB53v3F8SLR6fZdVIYY=
Subject key identifier:   4F:BC:76:85:69:81:CE:7C:64:F1:B5:21:10:F4:05:16:AF:A5:08:FC
Authority key identifier: 4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
Certificate issuer:       /CN=F3611B04AF/serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Certificate serial:       46
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
Manifest number:          45
Signing time:             Mon 04 Aug 2025 05:23:30 +0000
Manifest this update:     Mon 04 Aug 2025 05:23:29 +0000
Manifest next update:     Wed 06 Aug 2025 05:23:29 +0000
Files and hashes:         1: TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl (hash: 9X1VfXRzLuDafe2D4YEJlvRH7uSM6pXcfZCdfofCXr0=)
                          2: D4D84B9E3D5211F08FF5E995DAE4EC9C.roa (hash: /d1iMp/ZT/BMLsfn6Ybe9u0ARPnAxFGfjCR2WymN//o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611B04AF, serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
        Validity
            Not Before: Aug  4 05:23:29 2025 GMT
            Not After : Aug  6 05:23:29 2025 GMT
        Subject: CN=689043d2-9a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:16:2e:ca:77:e6:bf:c8:ca:cb:29:58:07:
                    ae:aa:16:dc:e7:e9:f6:1f:ed:f9:cd:f2:a6:56:7e:
                    c5:9b:30:6e:1d:ce:2f:c6:75:ae:d0:2f:c3:04:09:
                    35:41:d2:1f:b6:6a:1e:b0:39:98:a7:28:0e:53:e0:
                    ac:4f:92:a6:8d:46:20:eb:b6:80:7f:c6:14:3c:46:
                    b6:ba:1d:70:85:52:91:34:aa:b4:e6:60:a4:84:2a:
                    5e:89:01:01:48:db:01:c0:72:e4:13:62:2f:7b:1f:
                    97:39:e0:c7:88:e6:5d:85:ec:4f:f1:38:ea:cc:43:
                    cd:f5:b3:cd:79:28:29:19:4f:e0:03:48:0b:f7:ec:
                    73:6e:c9:00:4a:c6:d9:ce:c6:ac:ce:95:7e:38:5b:
                    3e:00:0f:2d:0c:81:f9:d1:3d:81:b2:ef:59:b5:72:
                    4b:22:11:14:6b:c3:6d:77:c1:39:f8:b2:3c:94:3a:
                    c3:7b:99:d8:4a:12:3c:30:eb:6e:60:07:d7:bf:e9:
                    09:5f:61:76:f8:b1:5c:c6:4d:ac:db:ca:42:35:f0:
                    84:78:e4:f4:e8:c3:f8:bf:e7:35:66:bb:3c:98:9c:
                    ae:09:75:b7:57:b7:4d:5d:ad:dc:29:23:08:71:d7:
                    25:12:88:e6:3d:0a:40:f1:2d:62:6b:89:2a:71:dd:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BC:76:85:69:81:CE:7C:64:F1:B5:21:10:F4:05:16:AF:A5:08:FC
            X509v3 Authority Key Identifier:
                keyid:4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:74:e6:8e:60:d6:38:bf:bc:6f:b2:b2:93:b0:e4:ab:83:5e:
         c6:9f:05:35:01:6d:07:bb:30:b0:49:41:22:b1:5e:8a:34:cc:
         c2:05:9c:dd:8f:9c:b3:b6:65:87:11:3e:f4:ae:be:4e:9d:87:
         d3:8d:60:b0:7a:99:65:cc:b1:1a:1b:84:2d:af:d0:8c:28:88:
         51:60:f2:54:e0:9b:82:93:c7:bd:d4:78:28:39:fb:6b:0c:bb:
         7c:a8:c2:29:33:66:0f:67:4e:ba:24:3c:77:73:cf:a8:f0:49:
         5b:ee:33:e2:85:4d:9b:08:97:d5:44:f8:2e:5a:98:b8:40:5b:
         a9:17:47:0d:6a:ef:39:98:30:a2:de:75:5f:42:4b:2c:cd:19:
         b8:0e:e4:3e:64:f1:df:fa:e6:7f:8a:78:40:e6:7e:7c:cb:2f:
         03:36:fc:89:0d:98:7e:a2:34:e2:6b:96:7f:02:de:d4:87:46:
         51:4c:cd:ff:78:81:51:73:19:2e:ab:4f:d4:86:77:3f:27:67:
         0b:cf:4e:3e:58:c4:22:88:a9:c5:c1:97:7a:69:ba:66:c5:68:
         75:13:fe:c9:e6:96:88:0b:83:77:16:d4:24:65:6f:a5:6e:cc:
         92:23:10:c3:b3:9a:7d:32:a8:9e:cc:da:e8:d6:80:f4:f4:a0:
         48:20:5e:78
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBRjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MUIwNEFGMTEwLwYDVQQFEyg0RTIzQUE3QTBEQTgzNDBFMkVEREZEMjE1RUI2QzQ1
MzM3NDJGQ0YwMB4XDTI1MDgwNDA1MjMyOVoXDTI1MDgwNjA1MjMyOVowGDEWMBQG
A1UEAxMNNjg5MDQzZDItOWE0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANxJFi7Kd+a/yMrLKVgHrqoW3Ofp9h/t+c3yplZ+xZswbh3OL8Z1rtAvwwQJ
NUHSH7ZqHrA5mKcoDlPgrE+Spo1GIOu2gH/GFDxGtrodcIVSkTSqtOZgpIQqXokB
AUjbAcBy5BNiL3sflzngx4jmXYXsT/E46sxDzfWzzXkoKRlP4ANIC/fsc27JAErG
2c7GrM6VfjhbPgAPLQyB+dE9gbLvWbVySyIRFGvDbXfBOfiyPJQ6w3uZ2EoSPDDr
bmAH17/pCV9hdvixXMZNrNvKQjXwhHjk9OjD+L/nNWa7PJicrgl1t1e3TV2t3Ckj
CHHXJRKI5j0KQPEtYmuJKnHd4PsCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRPvHaF
aYHOfGTxtSEQ9AUWr6UI/DAfBgNVHSMEGDAWgBROI6p6Dag0Di7d/SFetsRTN0L8
8DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTFCMDQvNzhGOTVBMTgzRDUwMTFGMDgwREJEQTg2REFFNEVDOUMvVGlPcWVn
Mm9OQTR1M2YwaFhyYkVVemRDX1BBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVGlPcWVnMm9OQTR1M2YwaFhyYkVVemRDX1BBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxMUIwNC83OEY5NUExODNENTAxMUYwODBEQkRBODZEQUU0
RUM5Qy9UaU9xZWcyb05BNHUzZjBoWHJiRVV6ZENfUEEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABZ05o5g1ji/vG+yspOw5KuDXsafBTUB
bQe7MLBJQSKxXoo0zMIFnN2PnLO2ZYcRPvSuvk6dh9ONYLB6mWXMsRobhC2v0Iwo
iFFg8lTgm4KTx73UeCg5+2sMu3yowikzZg9nTrokPHdzz6jwSVvuM+KFTZsIl9VE
+C5amLhAW6kXRw1q7zmYMKLedV9CSyzNGbgO5D5k8d/65n+KeEDmfnzLLwM2/IkN
mH6iNOJrln8C3tSHRlFMzf94gVFzGS6rT9SGdz8nZwvPTj5YxCKIqcXBl3ppumbF
aHUT/snmlogLg3cW1CRlb6VuzJIjEMOzmn0yqJ7M2ujWgPT0oEggXng=
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:37 2025 by rpki-client