Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File:                     aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier:          vMHfPy3v7dV2NT097d/nyzRhSWmFHl1a05vak593dss=
Subject key identifier:   94:69:D6:61:08:41:1E:3A:C7:2B:0F:ED:ED:45:2D:D6:6A:7B:5C:1B
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer:       /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial:       32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number:          31
Signing time:             Sun 15 Jun 2025 05:18:49 +0000
Manifest this update:     Sun 15 Jun 2025 05:18:49 +0000
Manifest next update:     Tue 17 Jun 2025 05:18:49 +0000
Files and hashes:         1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: TH9z4L3xthe7a0M1ZWBDGnI2Vh43LBzhv4yI9PvUK4s=)
                          2: ED854A8624C811F0B4D15694DAE4EC9C.roa (hash: KyIxaodmc2Nf2dSIBbZZRE5rqK1fV8FCMAMx88jtkk4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
        Validity
            Not Before: Jun 15 05:18:49 2025 GMT
            Not After : Jun 17 05:18:49 2025 GMT
        Subject: CN=684e57b9-f869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:76:d7:32:f6:58:8c:d1:b6:95:5f:e6:7f:f7:
                    2e:92:65:4f:fb:a2:3b:74:8a:83:d9:d5:e5:58:fc:
                    4a:ba:9b:5f:2c:a3:40:8b:73:cd:16:26:9c:7d:44:
                    ab:4c:54:c8:c3:1e:52:9a:b4:f5:72:55:c7:4c:dd:
                    9c:b4:b8:22:4b:5b:32:77:7a:12:3d:88:47:56:d0:
                    b1:81:99:e7:2a:cd:d1:b3:3c:bd:64:1f:a4:c9:c5:
                    56:73:05:70:8d:31:3b:4f:28:f6:4b:2f:f9:ef:63:
                    e0:65:7e:7c:6d:a2:73:21:11:a6:c1:c2:aa:f2:7e:
                    58:f0:fa:e7:a4:a6:1a:2d:32:3c:d0:d0:0c:3a:05:
                    95:ba:a1:90:e6:9c:d1:5d:35:3d:ab:3b:46:3c:40:
                    10:55:ff:c2:13:00:4f:4e:39:7a:96:6e:7c:8d:05:
                    fe:bb:20:de:f1:33:25:16:ed:ce:54:de:33:69:bd:
                    9e:12:91:98:1a:9e:c8:9a:5b:f6:d9:ae:31:8f:8f:
                    5f:24:18:5f:4e:bf:79:04:d1:68:b8:22:32:f8:82:
                    76:a8:89:54:c1:00:4c:f6:39:be:73:71:d8:c5:28:
                    5e:8c:e9:74:42:b3:a9:1a:6f:eb:55:e0:b9:b2:d0:
                    61:be:33:ac:c2:1e:00:14:d1:ae:37:94:e3:3c:e0:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:D6:61:08:41:1E:3A:C7:2B:0F:ED:ED:45:2D:D6:6A:7B:5C:1B
            X509v3 Authority Key Identifier:
                keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:25:8e:68:b7:58:ce:f7:e9:f4:55:dd:a2:d7:af:02:ec:d8:
         d7:92:01:31:58:79:d0:3e:ad:c6:0e:b5:e2:a6:a1:05:45:c3:
         94:b9:d7:8a:37:2b:e4:c0:e7:bf:af:52:b5:0f:45:1b:aa:b7:
         4b:a8:4c:ef:e6:af:25:62:ac:8e:9b:80:b5:65:0f:95:2b:4e:
         e8:b7:53:c2:4c:57:0c:6f:22:d6:90:37:46:66:c7:fb:29:a7:
         07:d4:43:76:98:86:cc:ec:c2:3d:a5:f6:47:2f:e5:72:36:27:
         32:af:73:0a:78:03:9e:ca:76:e1:20:51:10:24:29:96:d2:20:
         84:22:7f:f1:d5:33:ba:83:ab:a3:e8:ed:4a:a8:57:f3:9c:84:
         bc:3a:9e:33:ac:25:63:85:19:c1:8a:58:af:0d:38:58:fc:27:
         f1:10:99:0e:2c:dd:17:29:75:05:b6:3b:8a:bf:95:c8:55:f1:
         43:cc:7c:08:3e:b0:91:87:35:6b:3c:89:e4:ad:9f:a4:0c:f8:
         c3:63:9c:df:20:04:db:c8:43:2c:e6:d4:96:39:8e:58:f4:41:
         0e:52:7c:ea:40:ac:07:43:8d:14:d2:0c:33:bd:37:1a:d3:e5:
         0d:78:ad:37:93:23:ab:df:c6:59:4f:78:71:c3:12:98:9d:fd:
         ab:8e:90:61
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBMjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QjgzNUFGMTEwLwYDVQQFEyg2ODhDOTBGNTIzRDdFQ0Y5MEVCN0RDOTgxQjcwNzFF
MzgzNDkzMTUyMB4XDTI1MDYxNTA1MTg0OVoXDTI1MDYxNzA1MTg0OVowGDEWMBQG
A1UEAxMNNjg0ZTU3YjktZjg2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMx21zL2WIzRtpVf5n/3LpJlT/uiO3SKg9nV5Vj8SrqbXyyjQItzzRYmnH1E
q0xUyMMeUpq09XJVx0zdnLS4IktbMnd6Ej2IR1bQsYGZ5yrN0bM8vWQfpMnFVnMF
cI0xO08o9ksv+e9j4GV+fG2icyERpsHCqvJ+WPD656SmGi0yPNDQDDoFlbqhkOac
0V01Pas7RjxAEFX/whMAT045epZufI0F/rsg3vEzJRbtzlTeM2m9nhKRmBqeyJpb
9tmuMY+PXyQYX06/eQTRaLgiMviCdqiJVMEATPY5vnNx2MUoXozpdEKzqRpv61Xg
ubLQYb4zrMIeABTRrjeU4zzg2HsCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSUadZh
CEEeOscrD+3tRS3WantcGzAfBgNVHSMEGDAWgBRojJD1I9fs+Q633JgbcHHjg0kx
UjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUI4MzUvOUY4NEQ0QUMyNEM2MTFGMDk5QTA2NTg2REFFNEVDOUMvYUl5UTlT
UFg3UGtPdDl5WUczQng0NE5KTVZJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYUl5UTlTUFg3UGtPdDl5WUczQng0NE5KTVZJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxQjgzNS85Rjg0RDRBQzI0QzYxMUYwOTlBMDY1ODZEQUU0
RUM5Qy9hSXlROVNQWDdQa090OXlZRzNCeDQ0TkpNVkkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGEljmi3WM736fRV3aLXrwLs2NeSATFY
edA+rcYOteKmoQVFw5S514o3K+TA57+vUrUPRRuqt0uoTO/mryVirI6bgLVlD5Ur
Tui3U8JMVwxvItaQN0Zmx/sppwfUQ3aYhszswj2l9kcv5XI2JzKvcwp4A57KduEg
URAkKZbSIIQif/HVM7qDq6Po7UqoV/OchLw6njOsJWOFGcGKWK8NOFj8J/EQmQ4s
3RcpdQW2O4q/lchV8UPMfAg+sJGHNWs8ieStn6QM+MNjnN8gBNvIQyzm1JY5jlj0
QQ5SfOpArAdDjRTSDDO9NxrT5Q14rTeTI6vfxllPeHHDEpid/auOkGE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:10:43 2025 by rpki-client