Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
File:                     8Jwseir2ATpbv__sYQQrO7S1gSs.mft (raw, json)
Hash identifier:          vQjz4RDbR+vNwHTzgGbg1QXWsxWKRicNWPPiw9/VbIo=
Subject key identifier:   33:05:16:58:96:B5:F3:19:28:29:77:37:5C:D8:3C:C7:4A:70:73:87
Authority key identifier: F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
Certificate issuer:       /CN=F3656CC2AF/serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Certificate serial:       068C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
Manifest number:          0688
Signing time:             Wed 05 Nov 2025 02:17:02 +0000
Manifest this update:     Wed 05 Nov 2025 02:17:01 +0000
Manifest next update:     Fri 07 Nov 2025 02:17:01 +0000
Files and hashes:         1: 8Jwseir2ATpbv__sYQQrO7S1gSs.crl (hash: whoDWw0SAqUwR1D52Rr2oOeJtMUUFhu71q1+XEvnr5s=)
                          2: 286E6658BE3611EB873C0563F8AEA228.roa (hash: eW7RtuAUiI7++s1JsF7wsc4w1OlNAg4jOMdDwCtMIQE=)
                          3: DB265A18BE3511EBBD3DAD62F8AEA228.roa (hash: KV3B8GBlLxHEsuyTqvu+Xd++amZ7JIl/4XF6Gr4Tw1w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 02:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656CC2AF, serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
        Validity
            Not Before: Nov  5 02:17:01 2025 GMT
            Not After : Nov  7 02:17:01 2025 GMT
        Subject: CN=690ab39d-bf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:05:12:b6:87:cc:27:f8:18:09:72:24:73:
                    08:e7:d1:d6:b8:7b:ac:44:fd:b0:42:db:a4:e0:c9:
                    bb:af:f6:03:52:e9:86:e2:43:f6:29:c8:87:45:01:
                    c5:1b:35:53:96:2c:c5:dc:77:41:b7:dc:71:ca:4a:
                    4b:df:77:b0:43:8d:76:f1:d0:df:72:4b:dd:5a:85:
                    73:21:21:e2:18:f2:e6:3d:9d:25:56:7f:2a:50:b2:
                    44:a4:28:cc:35:89:d8:c0:d2:62:30:92:8b:66:83:
                    0e:c8:cb:7b:03:52:a1:a6:7d:ae:70:ad:3f:52:53:
                    3f:14:79:ef:03:8f:5e:b5:57:5c:d2:b1:b5:20:48:
                    2a:ab:30:12:81:10:c2:8f:77:35:40:c9:50:73:68:
                    75:2e:84:95:f6:ca:ce:b9:2c:d5:ac:8b:d4:36:72:
                    f6:e4:e8:ac:a3:41:0e:8c:91:85:7a:80:a9:b5:60:
                    89:15:67:52:ff:a0:9b:59:37:27:c9:ab:70:3f:e4:
                    3e:4a:16:c1:ef:50:2a:f2:50:11:20:e8:37:cf:b6:
                    f3:87:35:dd:87:9e:0d:ec:0c:dd:01:de:66:3a:34:
                    39:11:1a:6b:15:ec:f8:27:6f:2d:7a:83:6c:bf:ba:
                    b0:2f:75:31:44:6b:01:39:0b:cc:89:61:d6:73:20:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:05:16:58:96:B5:F3:19:28:29:77:37:5C:D8:3C:C7:4A:70:73:87
            X509v3 Authority Key Identifier:
                keyid:F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:69:f8:d2:6f:96:12:85:68:74:7f:20:6d:04:28:d6:2d:07:
         86:5b:ac:3e:3f:b1:ba:d1:7c:42:48:4d:80:e8:b0:41:39:1a:
         5f:24:2f:d0:6b:b0:a3:95:6b:36:ba:f1:d3:d8:c7:a3:4b:d1:
         1b:a9:5a:af:3f:ee:ed:ab:5e:34:70:11:c8:26:3a:c3:74:6c:
         0d:18:82:68:53:da:98:b5:9e:c5:78:64:2a:5e:26:b0:47:3b:
         7e:57:35:b0:1a:2c:20:f6:52:55:24:9a:e2:ee:84:c6:bc:39:
         dd:2e:4c:b2:5b:59:c5:de:3a:2d:d9:d4:40:3c:f6:12:47:88:
         f4:89:49:83:d1:98:fa:69:35:71:8a:cd:af:6e:3c:1d:e7:64:
         fd:d8:65:b9:30:e6:a0:d0:f5:3d:39:18:d3:a8:3e:e7:aa:6b:
         d4:f5:ab:31:10:aa:80:b2:39:88:0a:83:5b:3a:1d:e4:db:12:
         83:69:80:97:1c:3c:3d:15:7a:ee:d3:42:a8:b1:09:ab:e5:72:
         60:8b:17:89:bf:1f:33:08:3c:7a:eb:da:8d:6e:64:ff:6c:af:
         9b:20:8f:8d:fc:79:37:60:72:bd:26:3f:36:4b:10:7f:e3:4a:
         cf:31:6d:a8:61:5f:fa:b5:6d:09:bf:fa:16:7c:d3:95:a9:d8:
         0d:fe:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:37:53 2025 by rpki-client