Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
File:                     XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft (raw, json)
Hash identifier:          ZNaSMjIUdL3jgJeFZ2gaZmqWVWiq8g8dTFp43HVtEAo=
Subject key identifier:   D3:B6:12:36:6B:C3:0B:CA:4B:60:3C:DD:1B:C9:18:89:B3:8B:1E:23
Authority key identifier: 5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
Certificate issuer:       /CN=F36539AEAF/serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Certificate serial:       011F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
Manifest number:          011E
Signing time:             Thu 19 Jun 2025 05:00:25 +0000
Manifest this update:     Thu 19 Jun 2025 05:00:24 +0000
Manifest next update:     Sat 21 Jun 2025 05:00:24 +0000
Files and hashes:         1: XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl (hash: No3UH2nl246UD6DaSq89QtYiubWzCzbAZUA+cuXNook=)
                          2: 653C9AA074DB11EFBADDB69E762E951A.roa (hash: 29Tl1qn/Uain4MhwRocZy2PFbVTKXBbVbDJYu8ZXsyM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Jun 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36539AEAF, serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
        Validity
            Not Before: Jun 19 05:00:24 2025 GMT
            Not After : Jun 21 05:00:24 2025 GMT
        Subject: CN=68539969-70c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:90:ac:a9:97:6e:e6:19:1d:53:93:04:2b:
                    37:40:fc:9a:fb:eb:88:74:57:54:d3:30:4d:6c:7d:
                    f1:b5:d1:2b:2f:60:dc:57:2d:1e:c7:fb:5b:92:cb:
                    fb:81:71:79:88:1c:aa:50:25:89:ab:f3:43:88:98:
                    fd:d2:89:c5:f4:a0:d6:48:06:b1:fc:05:ae:0a:3e:
                    fd:52:41:0e:dd:53:14:0d:8b:6d:9c:0a:9c:ab:a1:
                    c0:e6:74:31:c6:7d:c9:11:8b:51:01:8c:8b:3f:34:
                    79:e9:77:67:45:3b:f5:cb:ba:fa:fc:02:25:05:75:
                    1d:6c:f2:87:b1:21:a3:dd:78:e7:17:2b:4b:a5:dc:
                    6a:41:8b:d2:4f:2b:65:cf:91:4f:67:cd:4f:a2:47:
                    3a:d6:72:4b:23:49:f7:27:9a:11:6b:ca:f9:e4:39:
                    b3:c2:4e:ec:96:ba:a2:aa:47:6b:8a:28:ad:98:13:
                    08:5f:6b:a7:52:3d:79:7a:f2:11:9e:a9:35:7f:27:
                    23:f3:aa:9f:2b:42:7e:25:de:ad:31:fd:ec:53:b3:
                    13:03:04:9a:47:24:f3:f1:ba:0c:62:9b:38:e9:b3:
                    bf:c7:2a:b2:4c:73:90:9f:a4:50:c2:da:c4:36:bb:
                    4b:40:56:8d:55:01:de:8b:69:77:e2:d9:d1:ae:61:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B6:12:36:6B:C3:0B:CA:4B:60:3C:DD:1B:C9:18:89:B3:8B:1E:23
            X509v3 Authority Key Identifier:
                keyid:5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:4f:5a:a4:d4:8b:8a:47:12:42:4c:9b:f1:fd:f4:c3:9f:
         00:a1:9c:45:08:83:a7:71:7e:15:71:19:72:5e:44:93:7a:62:
         52:42:1d:39:9e:2a:90:0c:d0:b4:5f:1f:e8:0d:fd:28:a2:73:
         1b:45:59:79:b1:d4:83:99:52:54:e9:db:c3:75:67:b3:0f:4c:
         81:72:55:a0:66:36:b5:94:fd:34:56:f4:72:6d:69:4e:fb:78:
         1e:d4:15:a8:84:0d:a2:ec:de:47:c0:a7:3e:52:f9:f7:13:d2:
         15:e9:15:85:29:e2:c1:8c:ac:27:d3:f9:16:cf:fa:24:71:72:
         f5:48:2b:31:87:04:ef:d1:17:20:60:81:c9:1b:b9:2f:92:0d:
         3b:7a:df:69:54:7d:2d:a2:ba:60:55:bc:36:11:c3:68:e2:04:
         1a:97:f4:c3:24:eb:1d:4a:b7:c1:32:b2:6e:8a:b3:62:35:65:
         76:9e:89:92:58:70:d3:c4:46:76:76:38:78:83:3d:3c:e0:5f:
         ef:d2:58:10:e5:fe:79:f1:1c:0b:a8:38:b7:7f:71:a9:4e:7c:
         e5:ac:4a:a1:20:d9:29:4c:5d:77:d8:c1:01:72:7e:fb:1b:c3:
         9e:94:b9:1e:6b:91:44:83:57:05:73:a1:76:89:67:26:48:3b:
         7a:d2:a0:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTM5QUVBRjExMC8GA1UEBRMoNUUyMjY3NTM4NDBENjRCQUVCMDIzQjU5NDE2Qzk5
MUYzOTc3MUVGQzAeFw0yNTA2MTkwNTAwMjRaFw0yNTA2MjEwNTAwMjRaMBgxFjAU
BgNVBAMTDTY4NTM5OTY5LTcwYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZCZCsqZdu5hkdU5MEKzdA/Jr764h0V1TTME1sffG10SsvYNxXLR7H+1uS
y/uBcXmIHKpQJYmr80OImP3SicX0oNZIBrH8Ba4KPv1SQQ7dUxQNi22cCpyrocDm
dDHGfckRi1EBjIs/NHnpd2dFO/XLuvr8AiUFdR1s8oexIaPdeOcXK0ul3GpBi9JP
K2XPkU9nzU+iRzrWcksjSfcnmhFryvnkObPCTuyWuqKqR2uKKK2YEwhfa6dSPXl6
8hGeqTV/JyPzqp8rQn4l3q0x/exTsxMDBJpHJPPxugximzjps7/HKrJMc5CfpFDC
2sQ2u0tAVo1VAd6LaXfi2dGuYUZLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU07YS
NmvDC8pLYDzdG8kYibOLHiMwHwYDVR0jBBgwFoAUXiJnU4QNZLrrAjtZQWyZHzl3
HvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUzOUFFL0M0MDQ0RThBNzREQTExRUZCQ0ZBN0Y5QTc2MkU5NTFBL1hpSm5V
NFFOWkxyckFqdFpRV3laSHpsM0h2dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hpSm5VNFFOWkxyckFqdFpRV3laSHpsM0h2dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTM5QUUvQzQwNDRFOEE3NERBMTFFRkJDRkE3RjlBNzYy
RTk1MUEvWGlKblU0UU5aTHJyQWp0WlFXeVpIemwzSHZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBt109apNSLikcSQkyb8f30w58AoZxF
CIOncX4VcRlyXkSTemJSQh05niqQDNC0Xx/oDf0oonMbRVl5sdSDmVJU6dvDdWez
D0yBclWgZja1lP00VvRybWlO+3ge1BWohA2i7N5HwKc+Uvn3E9IV6RWFKeLBjKwn
0/kWz/okcXL1SCsxhwTv0RcgYIHJG7kvkg07et9pVH0torpgVbw2EcNo4gQal/TD
JOsdSrfBMrJuirNiNWV2nomSWHDTxEZ2djh4gz084F/v0lgQ5f558RwLqDi3f3Gp
TnzlrEqhINkpTF132MEBcn77G8OelLkea5FEg1cFc6F2iWcmSDt60qAe
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:06:04 2025 by rpki-client