Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
File:                     m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft (raw, json)
Hash identifier:          C1DkArem0dE1sVLrbf+Mg/nj/0/kcLK1LA8ZXmbilVw=
Subject key identifier:   96:B3:F9:0C:D1:A6:6D:7A:2E:45:0D:6D:98:5E:89:8F:A4:1C:6E:DE
Authority key identifier: 9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76
Certificate issuer:       /CN=F3674116AF/serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
Certificate serial:       0573
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
Manifest number:          0571
Signing time:             Sun 10 Aug 2025 02:45:59 +0000
Manifest this update:     Sun 10 Aug 2025 02:45:59 +0000
Manifest next update:     Tue 12 Aug 2025 02:45:59 +0000
Files and hashes:         1: m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl (hash: Vhdk/U3R8QsSoNe+5oWu6oDRJD9NV0MCco6Sp5wecTc=)
                          2: 51CD22A06E3F11EC8BCA63C15A40D577.roa (hash: E5rUiTU+lgeiOsadbVjO4CnL7A4nHG6PajRp8I6dh5k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 02:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674116AF, serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
        Validity
            Not Before: Aug 10 02:45:59 2025 GMT
            Not After : Aug 12 02:45:59 2025 GMT
        Subject: CN=689807e7-7b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:5c:28:c0:0b:87:60:07:61:25:b8:da:10:
                    80:59:c9:89:b4:31:ba:a1:a3:17:6d:f0:51:7c:aa:
                    49:47:bd:e1:ea:cd:76:10:57:2c:0e:20:9d:a8:9b:
                    b5:15:6f:f7:9c:94:28:30:05:6d:01:56:ea:1c:08:
                    7d:10:5a:e4:16:54:a4:ee:ca:1b:a3:3e:6e:8d:f9:
                    d8:f2:c9:57:98:36:d5:12:8e:5f:82:30:23:15:ff:
                    43:60:1b:22:46:cc:7b:59:a2:19:a9:b3:0f:85:eb:
                    8f:81:82:f2:62:56:08:ec:49:f4:47:6a:67:29:e8:
                    46:93:b0:35:fc:4f:4e:02:27:b0:07:85:d2:76:cb:
                    d6:c0:34:bf:e4:ff:f2:1d:6e:e6:b9:a5:c8:e5:67:
                    23:f2:fc:74:c1:7c:92:65:66:ab:29:04:49:9a:e3:
                    e6:1b:20:5a:f9:9b:04:51:4d:94:da:35:a1:93:d2:
                    c1:43:79:3c:bb:1d:e8:ab:27:d1:b2:c3:bf:38:fc:
                    48:0b:1b:1e:f4:8b:64:9e:22:ae:52:e3:4a:fe:a9:
                    74:44:c9:cb:3b:8d:da:ca:02:23:e8:88:da:66:7c:
                    d5:1f:51:74:be:26:db:ff:22:72:56:d5:b2:02:d7:
                    0f:06:59:cf:5d:2f:3a:9b:69:26:00:1b:90:6e:a7:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B3:F9:0C:D1:A6:6D:7A:2E:45:0D:6D:98:5E:89:8F:A4:1C:6E:DE
            X509v3 Authority Key Identifier:
                keyid:9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:7e:1f:cc:3e:9c:f8:a8:4f:c4:25:67:82:b8:80:68:6f:
         0d:0e:41:65:89:34:35:c6:15:71:01:63:b5:56:90:2c:31:58:
         73:ad:66:5f:7e:2a:5c:80:84:de:72:bc:06:e6:56:c5:a6:b6:
         74:94:97:3c:5c:46:be:dc:4b:2d:4d:ef:8f:73:6e:c5:7c:37:
         a1:1b:48:eb:99:f5:99:77:a3:2a:57:56:e8:da:0d:c6:e6:24:
         2b:0a:30:5f:65:23:0a:fb:5f:59:5c:f5:15:e0:ff:e2:86:2e:
         cf:1f:a6:64:56:ed:06:7c:29:bf:e0:7a:54:77:f2:e3:36:c8:
         be:23:ba:f1:37:dd:d3:0f:24:97:1c:fa:32:e7:78:22:00:1c:
         3b:2b:33:21:66:be:63:e2:0d:47:3b:bc:6a:b3:57:b6:5e:d7:
         56:ac:5a:0a:4b:95:63:cb:ef:de:af:d0:23:8c:ec:ad:94:a3:
         81:81:3d:fa:15:e2:c7:bd:5f:a3:bc:02:e4:97:f3:66:e9:e1:
         3b:d9:25:d7:04:a3:b7:64:94:03:d1:9e:1b:79:7b:fc:f6:df:
         13:97:bb:04:ab:23:43:86:63:f9:6e:ce:11:e0:cc:20:d6:2e:
         13:a6:c0:42:2d:f4:db:64:db:8f:fe:33:a7:4c:7b:29:45:39:
         f8:e9:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:10 2025 by rpki-client