Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          c74YymUOn6hEe85nmdxo28U1AddmsTauHCfUqdMK7Uo=
Subject key identifier:   AC:92:AE:27:14:1A:3A:D3:18:A2:29:A8:20:DD:51:DF:D0:ED:6C:C5
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       0660
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          065F
Signing time:             Mon 04 Aug 2025 02:12:41 +0000
Manifest this update:     Mon 04 Aug 2025 02:12:40 +0000
Manifest next update:     Wed 06 Aug 2025 02:12:40 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: TPoVHxvhrfxQcP+wKUCQ1RzsYDQJ0ynSHC3eZYrLNkU=)
                          2: 69EE67B4920711EBA4D68A7DF8AEA228.roa (hash: PWOhXQJ0fibjAAccGAeAnloClqV+BwPlt2KmVpD849M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF, serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Aug  4 02:12:40 2025 GMT
            Not After : Aug  6 02:12:40 2025 GMT
        Subject: CN=68901719-79b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:7f:93:7c:25:e5:8d:23:9c:04:36:be:ba:
                    d1:ea:1d:33:aa:7c:8f:65:b0:4c:a0:0d:42:ab:ab:
                    b0:41:16:50:97:ca:80:bc:b9:72:15:c0:4c:20:cb:
                    ce:e1:5e:1d:44:16:b5:ee:f0:28:c9:97:53:b0:57:
                    b5:c1:58:4c:63:56:79:04:4c:c1:6d:a3:0e:d5:06:
                    90:27:7f:26:db:9f:98:05:60:70:0f:75:7e:d7:20:
                    af:78:89:55:7e:7e:70:b3:1d:66:cf:52:f7:1e:14:
                    3e:d6:55:a6:26:e9:3f:04:6d:f7:22:43:95:02:02:
                    db:a1:92:b8:e8:a1:43:85:0d:7a:f0:50:b8:2c:eb:
                    7e:34:19:4b:a5:0c:b8:9c:f1:67:99:bc:e4:ff:d0:
                    d5:e4:d7:33:23:48:61:51:50:4b:fd:bb:e5:ed:ca:
                    0b:b1:eb:05:48:a2:40:bc:eb:7d:35:6e:f3:2f:9e:
                    a9:65:b9:79:7f:27:be:04:73:61:1c:44:7d:55:76:
                    34:18:46:3f:3f:2b:f4:4a:4d:b4:98:5e:00:f3:80:
                    fc:5d:b7:c5:c7:20:57:52:68:25:9f:b6:36:fe:b9:
                    5a:3d:b0:78:f3:70:37:2d:da:87:49:dd:dc:82:f1:
                    c9:91:34:6e:d0:14:96:32:b2:dc:75:02:8c:25:00:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:92:AE:27:14:1A:3A:D3:18:A2:29:A8:20:DD:51:DF:D0:ED:6C:C5
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2a:54:73:c7:8e:9c:11:76:e7:7a:06:b9:fe:e7:ef:34:08:
         dd:6d:0a:06:68:1e:60:fe:5e:82:10:29:d4:46:3b:cf:36:d2:
         76:5a:32:a4:5e:5a:5d:f5:98:55:33:27:94:6e:c8:8f:fa:2a:
         8a:af:dc:3e:ce:7e:d4:46:09:c7:98:34:c6:a5:36:d1:20:8b:
         99:fa:bb:46:fb:2a:ea:42:cc:78:31:5f:25:dd:fc:74:62:37:
         f5:d2:d0:a0:ae:7a:b7:4b:83:34:bd:ca:3b:5f:a2:3b:b8:38:
         f9:19:a3:43:d9:ca:10:38:f6:c5:b3:69:d9:17:c0:a6:bc:b9:
         14:d3:5d:b9:ce:f9:27:d0:de:5d:bb:25:74:b0:6f:47:20:d3:
         0d:3b:a4:cf:86:a4:82:33:0c:b8:0c:e5:29:1f:9a:fb:97:2c:
         75:2d:cf:1a:e3:d5:23:b2:e6:4b:fb:07:ad:47:31:4a:46:22:
         5b:3e:1f:4a:74:f1:eb:9c:3f:95:89:63:4f:7f:68:38:78:85:
         04:04:f1:2a:b8:15:cf:66:f5:7c:5d:5e:09:d5:30:76:86:b3:
         31:ce:fe:9c:c7:82:0b:a2:87:3f:f3:e3:c0:46:e6:7c:8f:ba:
         5f:79:82:c5:24:30:a1:84:7b:d3:db:d5:66:9d:31:0d:df:62:
         ca:f2:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:45 2025 by rpki-client