Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          hNvMFCKcKfmz71sq2CXH1OUOJ0YWh9hJN1EWyf/YwYQ=
Subject key identifier:   90:42:05:98:A2:E5:82:90:90:AE:A1:28:C5:86:20:70:74:E4:DD:62
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       0203
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          0201
Signing time:             Mon 16 Jun 2025 04:22:41 +0000
Manifest this update:     Mon 16 Jun 2025 04:22:40 +0000
Manifest next update:     Wed 18 Jun 2025 04:22:40 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: +LPywVEttpPxzdEUfYmqCC5M82WPWuO53hJkR8/fsOc=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
                          3: A98258D0404C11EFA55BD559762E951A.roa (hash: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Jun 16 04:22:40 2025 GMT
            Not After : Jun 18 04:22:40 2025 GMT
        Subject: CN=684f9c11-cb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:a1:3c:19:00:86:9f:1d:2f:17:01:c1:07:
                    ae:b9:28:67:96:ca:a6:48:4e:07:ac:79:c4:6b:01:
                    6f:75:53:21:44:c2:f8:9c:71:85:69:9f:9a:53:28:
                    77:82:d4:9b:cd:0c:b1:92:0e:cf:71:70:cf:80:9d:
                    82:14:e5:7e:c7:f6:2d:4e:a4:7f:c6:6c:8f:e5:a4:
                    a7:50:92:61:14:85:80:3a:c4:84:02:e7:c3:b3:40:
                    35:6a:a5:02:f9:f1:0d:7f:6d:10:1b:c6:c5:f0:a3:
                    76:ca:e0:3f:08:46:10:7d:b2:13:d3:c8:82:09:92:
                    b9:bf:61:16:6b:d8:62:ac:88:7e:b1:9b:3d:45:99:
                    8d:6a:37:8e:54:8f:59:a4:be:af:c4:4c:2d:26:c8:
                    93:7c:c2:d7:8d:5e:72:df:20:1e:bf:c3:34:4a:59:
                    58:f4:f0:74:c1:fc:ec:8a:8b:cc:b8:3a:49:ae:76:
                    38:9c:f6:ab:b9:b7:d3:ae:6e:99:40:2b:b3:04:85:
                    f7:e1:96:51:f3:23:ed:9c:72:42:65:0e:86:39:64:
                    2f:a0:5e:76:9f:84:10:22:48:2b:df:0f:6a:0b:55:
                    19:fa:17:a7:8e:d6:b5:98:38:49:60:fc:e4:28:3a:
                    1e:0f:1c:26:3c:2e:f2:29:d0:5e:d8:ce:fe:d8:1a:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:05:98:A2:E5:82:90:90:AE:A1:28:C5:86:20:70:74:E4:DD:62
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:f7:db:00:e4:c3:61:73:e6:11:72:ed:77:c6:7f:a0:a9:
         0f:26:00:70:4c:79:7b:08:11:14:60:cb:5e:a1:50:46:b6:3f:
         25:e5:b4:83:0d:6a:aa:72:6c:7d:a0:27:00:63:79:56:bd:86:
         e0:06:cc:90:11:51:3b:03:00:5c:51:a4:98:72:71:75:57:90:
         9a:c8:d2:98:4a:2e:e7:5f:bb:dc:e1:08:15:db:48:fb:a6:2a:
         44:a4:a4:ac:09:aa:3b:96:d8:35:b7:ec:35:d5:36:52:47:4c:
         22:0e:cd:76:a9:6b:51:5c:b5:73:68:67:9e:eb:80:db:fc:4f:
         a7:9c:cd:ba:59:9f:99:34:38:fb:24:c8:5c:13:db:49:b9:18:
         bb:4c:41:62:f1:5f:c2:2a:69:a9:00:8a:44:7a:9a:7b:c8:c1:
         49:1a:5c:0b:dd:5f:93:7a:a1:85:85:e5:67:9b:21:11:b7:fd:
         48:c1:8f:23:1f:08:e9:e1:c7:e8:46:da:98:41:c6:e6:97:93:
         90:4f:2f:e7:a3:84:57:31:44:d8:04:a1:be:81:98:ff:94:83:
         62:86:17:12:35:40:ee:eb:40:d6:33:79:09:16:0e:49:25:ee:
         1a:16:0b:f1:e7:02:cc:9b:1f:46:c2:cb:3b:bd:0f:f9:17:c6:
         1b:18:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:57:28 2025 by rpki-client