Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          pe7cBalJv5ojECB8M9UbK+LTU0eHmgr7NJ7b3s++/1c=
Subject key identifier:   CA:A0:E4:8E:97:E2:68:4C:C0:74:41:3A:4F:35:39:8F:F9:34:EC:2D
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       023C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          023A
Signing time:             Mon 11 Aug 2025 04:28:19 +0000
Manifest this update:     Mon 11 Aug 2025 04:28:19 +0000
Manifest next update:     Wed 13 Aug 2025 04:28:19 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: hI7x26/AsXqO6LuMQFm3y5pPWN7ivS+FoMD26vp/7eA=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
                          3: A98258D0404C11EFA55BD559762E951A.roa (hash: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Aug 11 04:28:19 2025 GMT
            Not After : Aug 13 04:28:19 2025 GMT
        Subject: CN=68997163-18da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:31:81:be:2f:fa:e1:58:c5:66:92:e9:d6:d7:
                    9a:32:73:45:af:50:7d:75:58:58:f7:f6:4d:af:cd:
                    b1:eb:b3:98:0c:f1:e9:4a:d9:6c:4a:e8:e5:66:53:
                    a8:7d:8f:30:8d:0a:fc:45:2d:3e:84:6f:90:08:b2:
                    18:92:4b:e3:44:cb:49:93:a6:cb:ae:ff:21:50:41:
                    c8:75:48:f2:46:f0:97:a3:67:a7:92:2d:bb:df:cd:
                    3f:ec:46:83:ec:16:fa:2e:36:75:4a:9a:3c:11:b3:
                    c2:f6:8c:09:30:02:8d:0f:c3:0e:0c:79:d2:bb:65:
                    65:23:14:00:af:ff:69:a3:02:68:b9:50:fd:a5:9e:
                    f0:8a:42:9a:28:de:c2:9e:63:c0:c0:df:ce:f9:de:
                    c3:df:c9:5c:f5:6d:ed:29:b2:b5:54:2b:c1:3e:e7:
                    c3:5c:66:e6:ba:dd:25:6e:52:fd:04:6f:f3:76:fc:
                    0d:c5:5e:36:63:23:64:1d:0f:7b:f7:09:2c:a6:f3:
                    8b:59:9b:ed:1c:44:96:cf:ea:4b:1f:c7:f4:7a:f8:
                    61:49:20:8a:17:05:2a:d0:32:74:3b:c5:ef:f2:d9:
                    2c:51:2b:50:61:04:d0:58:61:da:08:5e:96:b9:80:
                    9b:10:db:ef:c9:92:25:08:1c:7c:e8:58:5a:64:a9:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A0:E4:8E:97:E2:68:4C:C0:74:41:3A:4F:35:39:8F:F9:34:EC:2D
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:6c:a6:fd:36:69:64:1b:09:75:10:ec:72:71:be:5b:4c:
         81:3d:15:04:c2:a0:43:d3:f4:9a:06:b0:db:ab:bc:c3:d2:56:
         50:80:5a:9b:0f:9f:0b:14:2b:8d:44:73:9e:72:b8:7d:26:f5:
         6f:cd:4c:c1:d0:a9:7d:76:8f:f9:83:ba:3c:d0:0c:d1:25:c7:
         eb:3c:6b:15:06:ae:11:9b:be:ee:58:7b:2f:2f:73:54:20:28:
         3e:00:9f:27:0d:9a:a5:df:57:c8:7c:ec:67:92:80:12:b4:98:
         7c:54:dd:19:05:ce:14:82:39:8d:4e:a6:da:a2:d7:68:7b:53:
         05:fc:65:f9:6d:47:72:a2:7a:2b:4c:70:48:3c:68:c0:0f:58:
         99:a5:cb:4a:41:4a:02:c4:8b:16:c3:3b:45:33:9c:f9:ac:d4:
         03:d8:02:dc:e9:c2:08:fe:3e:e6:64:89:c8:02:69:3a:81:d0:
         e5:90:7c:33:36:fd:d1:ec:1d:b2:7e:eb:bb:ce:e1:2b:fd:5c:
         40:f0:a1:59:4e:a9:a7:1d:21:88:c7:97:08:0b:33:0e:77:4b:
         b1:f0:91:af:14:87:51:bf:9d:76:a5:d2:ad:70:33:84:d3:9d:
         ad:20:e1:a3:e0:df:01:9d:cf:48:b8:8b:e7:06:41:e9:00:e3:
         89:86:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:44 2025 by rpki-client