Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
File:                     2cDlwkl6yIv_-87Z9V1goiiYkn8.mft (raw, json)
Hash identifier:          fhZySQarppqnNtQ8b9h+ZZDOWpaWqjvVAPhiTxtVMWI=
Subject key identifier:   CA:9C:5D:82:98:25:0C:47:0A:66:78:9C:30:90:18:93:6C:4D:BF:FC
Authority key identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
Certificate issuer:       /CN=F3644EA8AF/serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
Certificate serial:       76
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
Manifest number:          75
Signing time:             Tue 04 Nov 2025 06:37:13 +0000
Manifest this update:     Tue 04 Nov 2025 06:37:13 +0000
Manifest next update:     Thu 06 Nov 2025 06:37:13 +0000
Files and hashes:         1: 2cDlwkl6yIv_-87Z9V1goiiYkn8.crl (hash: GBUOg6xFD/NX1Ev4YGUE2+Man+wo85Z3/8cfy9SZtk4=)
                          2: 696CD0C060B411F0907E96B2DAE4EC9C.roa (hash: 5bAy/PZpHx90ghvP8O3g7YznUOeX+iyLW+PI1ddCQfo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
        Validity
            Not Before: Nov  4 06:37:13 2025 GMT
            Not After : Nov  6 06:37:13 2025 GMT
        Subject: CN=69099f19-3e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:30:08:49:74:08:bb:fe:7f:dd:3f:bc:60:
                    f8:ef:76:f4:0c:64:6d:ea:89:78:ce:11:44:78:83:
                    ad:17:97:43:0a:53:b8:51:b7:70:d8:36:6f:f3:71:
                    7d:11:83:b6:f5:60:b7:1d:fa:54:d2:ba:80:40:dd:
                    4e:a6:a1:a7:0c:ac:dc:40:d8:0e:a4:c4:43:85:ef:
                    9b:5b:cf:cc:fd:aa:fd:0e:28:63:aa:e7:0c:e6:fc:
                    04:d4:a9:a5:34:c9:59:46:a8:cd:5d:c9:dc:24:fc:
                    ba:5c:73:97:94:89:99:58:99:e2:44:54:ca:65:65:
                    44:af:dd:5b:e8:c0:e6:11:60:7a:89:09:f3:55:ef:
                    1a:d0:f7:6d:e3:d8:d0:03:ac:44:e0:c1:69:8b:72:
                    b0:4c:23:fb:95:8e:89:a6:af:a2:22:1c:9e:b4:05:
                    e4:7e:7a:a2:d3:3d:82:91:1e:e6:c6:c9:03:87:4f:
                    0c:ee:ad:6b:d9:28:f4:f8:dc:43:e7:33:06:e3:91:
                    a0:af:57:36:79:78:a2:61:e8:f4:83:54:a0:fc:16:
                    84:0e:f5:c4:d4:d1:93:30:5c:60:e3:02:85:45:2a:
                    78:a1:a2:7d:f0:f8:2a:62:89:dc:8e:c6:be:3e:f7:
                    1d:5c:26:3a:bd:cf:9c:be:27:72:8b:18:45:9b:92:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9C:5D:82:98:25:0C:47:0A:66:78:9C:30:90:18:93:6C:4D:BF:FC
            X509v3 Authority Key Identifier:
                keyid:D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fb:29:63:dd:57:59:e8:79:1c:6e:66:e7:f8:14:77:56:3e:
         3b:10:9e:3f:fc:84:1e:ef:0d:66:69:41:19:77:67:e8:ab:94:
         03:3f:92:75:17:4a:14:03:d8:e9:29:10:ca:bb:9d:26:6f:e2:
         26:f3:99:bc:a1:ca:84:67:49:3e:fc:01:6c:41:5b:7f:63:2a:
         d3:62:9a:9f:db:ef:c9:30:67:b3:3e:10:2e:d3:a4:db:0d:f0:
         6f:55:28:af:7e:b1:5b:8b:d2:7d:47:c2:42:34:c6:28:46:08:
         86:b4:33:00:2f:5b:c2:80:fa:0d:fd:0f:86:8c:a4:80:d4:8f:
         fd:8c:54:43:17:a4:aa:d5:4e:db:2b:b8:f1:3e:8c:32:ed:cf:
         54:a8:24:b2:10:f9:5a:8c:61:fc:a6:93:70:85:a2:9f:f8:a9:
         49:1e:ee:7e:50:d6:59:6c:d7:6b:43:3b:f7:89:e3:2f:13:de:
         f7:01:b0:db:6a:ca:a4:36:4a:4a:77:e4:79:c4:d1:85:ab:b9:
         97:b8:b2:a0:58:b8:bb:b1:e5:c6:21:0b:95:86:d2:19:b7:9f:
         21:1e:58:b0:2e:bc:4f:59:a4:e3:61:80:df:43:c2:e1:3b:da:
         22:64:3b:a5:71:5e:46:aa:46:78:21:46:04:c7:f7:a2:c3:e2:
         58:b5:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:50:37 2025 by rpki-client