Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          TyerR+ZNLgUsQ6ockomp3swWujopeZNLXiECO2qsQJg=
Subject key identifier:   65:54:2F:A6:AD:9B:10:A1:32:0A:A1:A3:50:94:D0:17:21:C2:08:FC
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       0170
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          016F
Signing time:             Thu 07 Aug 2025 04:49:11 +0000
Manifest this update:     Thu 07 Aug 2025 04:49:10 +0000
Manifest next update:     Sat 09 Aug 2025 04:49:10 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: g5HRpqYANdZfyJbqix/2J0ymYWapJUUhGWMVNSavfrE=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Aug  7 04:49:10 2025 GMT
            Not After : Aug  9 04:49:10 2025 GMT
        Subject: CN=68943047-bfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:7e:22:7f:d7:18:8e:da:a4:04:4a:70:23:
                    e8:5e:23:57:35:8e:8a:21:33:91:04:0b:fc:cc:46:
                    33:97:96:ad:b5:4a:52:65:52:bb:24:8c:5a:81:40:
                    0e:5d:73:4f:67:46:a8:1e:34:a9:bc:74:b9:22:6d:
                    44:4d:21:89:25:2b:3e:96:d3:66:de:39:d0:eb:60:
                    6e:2c:0b:a9:94:3d:18:4b:a2:93:42:f8:1b:81:83:
                    8c:37:05:b2:a7:7a:40:e5:c7:e0:e2:78:fa:b6:f9:
                    87:46:d2:c4:19:f4:05:95:e0:03:29:16:e9:cc:c1:
                    8d:ca:19:b2:63:dc:96:90:1a:c2:40:00:65:50:02:
                    3d:50:fd:97:9d:71:e5:0c:48:c5:85:f4:c4:9c:86:
                    db:9d:8e:47:1c:4d:06:4e:3d:5d:8c:9f:f8:d0:67:
                    3e:f2:8a:7d:80:ff:61:28:4a:48:02:40:f0:c8:b4:
                    1f:eb:f8:46:4f:a2:95:b7:92:2e:3b:10:78:81:6a:
                    ae:2e:f2:77:56:58:f0:4e:7b:ed:26:3c:b5:05:a4:
                    90:54:e8:27:e0:a7:16:15:c8:7d:16:ae:80:08:b2:
                    80:af:06:01:c1:b7:8b:a7:ee:96:d5:80:c1:70:a7:
                    c2:42:55:50:5f:19:15:5a:77:d7:ff:d0:98:a2:27:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:2F:A6:AD:9B:10:A1:32:0A:A1:A3:50:94:D0:17:21:C2:08:FC
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:3f:d8:0c:45:96:d7:81:09:53:cb:50:f9:9c:a5:c1:2c:
         e5:2d:40:bd:b1:d2:0a:6c:62:3d:92:51:ed:fc:3e:3b:60:ca:
         b2:2a:3f:a3:77:2d:2c:29:38:6a:6e:89:0e:7c:e6:84:34:fa:
         94:b1:2a:f9:3d:07:95:29:2e:d2:a5:5f:fc:c5:d2:fc:38:94:
         41:8e:37:0d:c6:c4:39:fe:7e:0e:6e:c1:6e:63:c4:46:ca:db:
         12:43:62:fb:5f:c5:9e:b6:73:df:a7:28:9c:a2:60:59:3f:17:
         24:35:03:29:d4:84:c0:d9:3b:93:9f:ec:a6:db:f5:0c:52:aa:
         62:23:f0:3b:e4:27:cb:4e:4b:4a:80:40:d6:e2:5c:18:ee:fd:
         f8:b8:69:f6:23:a5:38:e7:d5:5e:f6:3f:ce:8b:49:92:60:0c:
         c2:8c:13:88:f4:7b:4a:e6:ab:2e:02:3b:3f:88:1f:59:e2:86:
         0d:ce:ca:8e:14:99:4d:b5:a5:f2:92:17:da:78:91:be:4c:ef:
         b3:75:fd:4b:90:1c:c2:17:72:f2:e2:a7:dd:18:c1:2a:6e:bd:
         61:b0:54:fe:24:fd:f4:09:c7:fa:aa:53:59:dc:66:a0:07:07:
         61:9b:3c:d6:60:d7:f9:68:fa:1b:04:61:74:f0:61:06:5a:da:
         ce:5e:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:19 2025 by rpki-client