Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          Jg7m1EvNBgq1IRKwDq9XJ6RH3QzVlOPBvJgQpO0TceE=
Subject key identifier:   00:DE:A9:45:34:C8:D1:72:76:AF:7D:59:BB:EE:6A:0B:10:60:8D:92
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       057D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          057B
Signing time:             Fri 20 Jun 2025 02:36:17 +0000
Manifest this update:     Fri 20 Jun 2025 02:36:17 +0000
Manifest next update:     Sun 22 Jun 2025 02:36:17 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: Y8Y9kDYf68Ylr+pJy7LmC7JOQ4JvCGFJnpcRrA5/WLg=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Jun 2025 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: Jun 20 02:36:17 2025 GMT
            Not After : Jun 22 02:36:17 2025 GMT
        Subject: CN=6854c921-740e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a5:12:9d:67:49:89:1d:4f:56:93:f3:53:ed:
                    a5:0a:68:f2:20:41:d2:67:0a:f3:49:e2:85:78:fa:
                    4d:bf:85:7f:d2:d2:bf:b9:82:38:e9:a8:2d:3b:a2:
                    4f:e6:a6:5b:cd:c6:65:18:cb:68:fd:bd:e3:d7:1a:
                    91:a8:a7:93:fa:94:a9:16:c1:93:b9:99:9f:be:ba:
                    0f:e3:c5:ab:30:9e:f1:db:f8:70:ca:1f:a1:c9:e8:
                    73:a1:c2:96:2b:64:ad:2d:fa:25:06:42:f6:88:8e:
                    e4:21:d9:fa:9b:ca:dd:33:3e:cd:d4:39:2a:3f:09:
                    83:60:ea:a9:47:e5:88:db:4e:bd:fc:73:ac:43:a7:
                    c9:39:9f:8e:a9:8f:0e:cd:71:aa:5c:fa:6c:ec:c0:
                    7e:23:a0:51:b9:de:58:98:b3:c8:ac:d1:c4:10:a8:
                    10:95:cc:a4:97:1c:49:35:25:0a:0f:11:3b:5d:48:
                    73:a9:89:a3:59:da:e4:41:57:2d:6b:8b:ad:70:ad:
                    7c:e0:c8:33:b1:8a:16:cd:e4:e6:99:a7:31:56:5d:
                    12:d6:d4:03:84:55:82:27:eb:b2:05:8c:79:d1:4d:
                    60:4d:f5:d0:18:69:b6:61:bf:e0:08:e2:b3:f4:e7:
                    83:ec:4d:ff:24:66:e6:ca:48:b4:a7:c5:52:a7:56:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:A9:45:34:C8:D1:72:76:AF:7D:59:BB:EE:6A:0B:10:60:8D:92
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:6a:a4:08:9e:fe:fd:66:2a:a7:57:95:35:fd:27:5c:b1:
         44:d1:4f:c0:4e:f2:38:21:07:28:0a:28:8f:32:0e:0d:2a:92:
         bf:7f:f2:8c:f5:25:33:31:24:01:7a:b7:b2:e5:d7:93:bb:2a:
         02:47:06:65:82:5c:71:00:ad:90:4a:1c:e3:77:16:d7:5f:26:
         34:52:d9:45:95:66:5d:b9:91:5d:43:45:97:82:f9:93:25:cb:
         0a:e3:72:82:e1:dc:a4:07:7e:ce:9a:e2:7a:f7:29:3e:a3:c2:
         d7:1f:4e:97:73:f8:c1:0f:4c:b0:0e:43:eb:06:25:9a:a0:76:
         b1:6d:3f:cd:b1:e3:84:94:3b:65:56:57:c7:e2:5b:e4:28:cd:
         37:6e:c7:6a:8c:40:e8:22:09:4c:ee:0a:a9:36:1c:14:e9:57:
         ea:1c:42:f3:dc:56:2b:f1:08:e3:36:49:5a:26:d3:ec:f9:a8:
         11:e6:f6:45:46:29:49:98:38:3e:13:2f:2a:fb:12:b9:76:3b:
         0b:04:a8:9d:0b:a8:da:21:4d:9c:32:57:bc:25:70:b1:a6:ea:
         ce:9b:55:25:11:ba:62:b6:86:8a:fa:67:46:cd:cc:4a:c3:0d:
         be:e6:1b:bd:de:47:72:be:70:0c:df:f3:9c:0b:c8:82:8e:d7:
         c5:99:4b:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODQwMjdBRjExMC8GA1UEBRMoQThGM0ZGQ0NGMkJENkYxNzNFNTc4RENFODYyNUUw
MUM1Mzk3RjczNTAeFw0yNTA2MjAwMjM2MTdaFw0yNTA2MjIwMjM2MTdaMBgxFjAU
BgNVBAMTDTY4NTRjOTIxLTc0MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnpRKdZ0mJHU9Wk/NT7aUKaPIgQdJnCvNJ4oV4+k2/hX/S0r+5gjjpqC07
ok/mplvNxmUYy2j9vePXGpGop5P6lKkWwZO5mZ++ug/jxaswnvHb+HDKH6HJ6HOh
wpYrZK0t+iUGQvaIjuQh2fqbyt0zPs3UOSo/CYNg6qlH5YjbTr38c6xDp8k5n46p
jw7Ncapc+mzswH4joFG53liYs8is0cQQqBCVzKSXHEk1JQoPETtdSHOpiaNZ2uRB
Vy1ri61wrXzgyDOxihbN5OaZpzFWXRLW1AOEVYIn67IFjHnRTWBN9dAYabZhv+AI
4rP054PsTf8kZubKSLSnxVKnVrnVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAN6p
RTTI0XJ2r31Zu+5qCxBgjZIwHwYDVR0jBBgwFoAUqPP/zPK9bxc+V43OhiXgHFOX
9zUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg0MDI3LzQzREMwRkRDMjA3NzExRUNCMjNGRTIyNkQ4QTAxNENFL3FQUF96
UEs5YnhjLVY0M09oaVhnSEZPWDl6VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FQUF96UEs5YnhjLVY0M09oaVhnSEZPWDl6VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODQwMjcvNDNEQzBGREMyMDc3MTFFQ0IyM0ZFMjI2RDhB
MDE0Q0UvcVBQX3pQSzlieGMtVjQzT2hpWGdIRk9YOXpVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNumqkCJ7+/WYqp1eVNf0nXLFE0U/A
TvI4IQcoCiiPMg4NKpK/f/KM9SUzMSQBerey5deTuyoCRwZlglxxAK2QShzjdxbX
XyY0UtlFlWZduZFdQ0WXgvmTJcsK43KC4dykB37OmuJ69yk+o8LXH06Xc/jBD0yw
DkPrBiWaoHaxbT/NseOElDtlVlfH4lvkKM03bsdqjEDoIglM7gqpNhwU6VfqHELz
3FYr8QjjNklaJtPs+agR5vZFRilJmDg+Ey8q+xK5djsLBKidC6jaIU2cMle8JXCx
purOm1UlEbpitoaK+mdGzcxKww2+5hu93kdyvnAM3/OcC8iCjtfFmUs4
-----END CERTIFICATE-----
Generated at Fri Jun 20 10:35:30 2025 by rpki-client