Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
File:                     HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft (raw, json)
Hash identifier:          3VtiBkrsd4YWfaZ7z5AKW7MDDQeCx0dkNIBtFbQsrjc=
Subject key identifier:   A3:D2:11:21:C0:DF:50:1B:71:5D:FF:0B:E2:5F:89:3A:EA:D6:CE:19
Authority key identifier: 1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3
Certificate issuer:       /CN=F366BE85AR/serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
Certificate serial:       D7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
Manifest number:          D6
Signing time:             Mon 11 Aug 2025 05:18:59 +0000
Manifest this update:     Mon 11 Aug 2025 05:18:58 +0000
Manifest next update:     Wed 13 Aug 2025 05:18:58 +0000
Files and hashes:         1: HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl (hash: 30LReF73hmqkae16F9iWUGlNhopkqycH2MEKurtNlVA=)
                          2: 7C21AA3ED29211EF86EA9485762E951A.roa (hash: 4sdnJ8RVycpCPlFVArT/uPl+lKxeM/KiQs7ThnHwqEM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                          rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AR, serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
        Validity
            Not Before: Aug 11 05:18:58 2025 GMT
            Not After : Aug 13 05:18:58 2025 GMT
        Subject: CN=68997d43-fe80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:d3:6c:ae:93:40:75:54:a5:a8:dc:5a:60:
                    b4:8d:2b:30:cd:93:40:ad:c1:3f:53:1d:14:54:12:
                    4c:c6:c4:62:f8:68:88:bb:c8:a5:5e:90:e4:39:b5:
                    35:5b:fb:06:59:c5:78:5e:2f:80:32:c7:e8:ab:13:
                    58:75:26:f6:75:a0:b5:5a:e2:ba:a2:99:c6:91:4e:
                    47:24:7f:6c:35:78:ee:a8:f4:79:7b:04:fb:8c:3f:
                    39:f6:0a:14:0f:a9:4b:f3:e3:5e:75:02:73:d5:4b:
                    c7:2a:6b:fe:ff:8a:62:e5:0d:a7:63:b0:e7:45:f5:
                    1e:5b:d8:ac:79:4b:a2:fd:e2:ad:54:0b:9c:44:47:
                    3a:05:0d:7c:aa:09:9f:5d:02:55:5c:d4:6b:6f:6e:
                    00:fd:b9:40:11:d2:6b:d6:88:33:1b:65:df:47:d6:
                    cf:af:a1:f8:56:d9:31:9a:ef:24:86:c3:91:5d:13:
                    a8:3c:14:04:fb:5d:84:bd:f7:46:98:c5:8d:e8:ec:
                    75:7b:3a:50:7f:3e:6b:bd:0d:08:d7:67:42:f0:a1:
                    d3:cc:3f:c5:a3:a0:fb:ae:70:b6:89:2e:13:d3:ad:
                    07:75:17:f1:5a:93:77:a5:f7:90:70:a4:70:5b:de:
                    63:4a:1a:9a:bc:f4:f6:ad:84:24:bf:dc:eb:f7:87:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D2:11:21:C0:DF:50:1B:71:5D:FF:0B:E2:5F:89:3A:EA:D6:CE:19
            X509v3 Authority Key Identifier:
                keyid:1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:65:3c:41:7d:e9:67:18:81:1a:98:4a:01:2d:30:6e:e2:8b:
         03:68:97:3b:77:9b:86:ea:9b:65:ce:0e:1c:f6:c7:c7:70:c0:
         48:9e:3d:63:84:c6:21:95:05:c4:70:aa:e5:0c:71:04:41:93:
         d9:0c:5b:6a:a6:d8:f7:e5:af:f0:4d:70:2f:a5:4b:83:6e:b8:
         43:79:5b:01:90:90:20:6f:9a:7b:19:f8:1d:5b:6f:20:90:df:
         5e:1e:d4:0d:72:14:ed:7d:87:4d:30:25:28:84:b1:c5:f8:d6:
         81:cc:88:31:bc:38:6a:5e:5c:43:c4:45:24:2c:71:1d:10:c1:
         02:b8:11:43:ac:af:71:93:a2:28:3b:79:45:2d:b4:75:53:21:
         a4:ab:0b:d8:00:f3:47:57:e5:20:ef:52:ac:3b:2f:a7:c5:c6:
         12:d3:0c:a5:3f:08:d6:0c:5f:0c:c6:d6:31:7d:17:0e:a5:70:
         b9:fd:b9:28:c9:b1:90:3b:55:9f:f3:63:b6:34:2a:67:4a:9b:
         5e:31:3c:a2:9f:92:41:cd:0f:bc:f7:32:74:f4:46:64:f7:27:
         c4:8f:18:c3:6c:0d:f1:42:bb:c0:c1:be:55:84:c3:91:02:28:
         47:4e:59:a5:d3:ae:eb:b2:09:a5:2a:a7:6e:e2:fb:b8:7a:2c:
         80:e4:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:48 2025 by rpki-client