Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
File:                     5IF89uPaBQJQGf_Vqru3g4R18ps.mft (raw, json)
Hash identifier:          f3IEHg26Tgm39OrWUM/lryNjdL9xu0huTq21je/amqM=
Subject key identifier:   54:A3:6E:F9:E7:F4:25:64:B0:6C:95:2D:FB:EB:CF:71:65:42:37:F2
Authority key identifier: E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B
Certificate issuer:       /CN=F3695C0AAF/serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
Certificate serial:       0378
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
Manifest number:          0377
Signing time:             Wed 18 Jun 2025 10:32:00 +0000
Manifest this update:     Wed 18 Jun 2025 10:31:59 +0000
Manifest next update:     Fri 20 Jun 2025 10:31:59 +0000
Files and hashes:         1: 5IF89uPaBQJQGf_Vqru3g4R18ps.crl (hash: mf++pnV1pOAGKnSkBZ2mKvs3YxddoswWpXC246b3XVA=)
                          2: CBC1D6C0BD9211EDB6D226DDF1222468.roa (hash: qTwXULSySx53cW1Nc4h52dh7OSZyRV1CiS+RYF1a1tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 10:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695C0AAF, serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
        Validity
            Not Before: Jun 18 10:31:59 2025 GMT
            Not After : Jun 20 10:31:59 2025 GMT
        Subject: CN=6852959f-f30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:d9:5f:75:6a:09:a5:c5:65:01:7d:3e:97:
                    c4:1b:00:11:97:41:aa:11:eb:b2:06:49:d4:a1:90:
                    e6:69:99:9f:ad:72:ab:3f:44:ca:58:c8:d7:28:08:
                    29:92:af:2a:28:4c:4c:63:32:0b:3a:37:72:ae:02:
                    4f:d6:aa:93:d8:7a:2d:24:40:0d:af:e1:ec:93:c2:
                    d0:6c:20:75:70:c9:04:57:55:5e:94:11:61:25:39:
                    9c:44:c8:ef:15:2a:7f:8d:6a:1c:02:8c:ef:4b:17:
                    8d:79:bc:8b:89:5c:b8:56:e0:41:ae:81:ea:ec:ce:
                    14:d9:23:cb:e1:09:68:aa:60:0c:64:6c:99:92:c4:
                    d9:e6:61:c9:7e:65:65:61:aa:38:33:d3:ee:93:92:
                    b7:a5:c7:0a:e1:b3:91:8f:25:ff:17:08:91:3e:cf:
                    43:bc:bf:34:c1:ca:48:9d:26:92:dc:5f:e2:33:6f:
                    ba:e2:ca:f5:32:9b:00:ab:91:ff:a5:59:17:56:ba:
                    8e:e6:44:c8:04:81:74:11:ba:1b:79:98:f4:f7:54:
                    22:cf:2d:a7:b3:7c:c7:0b:82:40:36:48:c7:07:a4:
                    12:75:1c:31:e8:79:53:e5:fe:c9:aa:f8:eb:46:eb:
                    af:e9:05:c4:12:e4:1c:35:c3:bb:95:63:37:4b:9c:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A3:6E:F9:E7:F4:25:64:B0:6C:95:2D:FB:EB:CF:71:65:42:37:F2
            X509v3 Authority Key Identifier:
                keyid:E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:51:8e:5e:3b:42:a7:3c:4d:90:81:1f:7b:4a:cc:2a:a0:0e:
         55:49:d1:6a:7b:d4:ef:16:66:0e:73:46:db:29:0f:d3:4e:4c:
         02:1c:60:5b:20:26:30:ba:9b:3d:7a:1c:15:d8:41:d5:83:d1:
         0c:4a:b0:ce:d7:c0:0c:72:da:23:c9:0a:1c:3e:66:d5:9c:8e:
         52:d8:a6:8c:46:02:51:be:29:59:5d:1b:3d:c4:f0:db:95:c8:
         03:6a:6a:8a:4b:83:f1:0e:46:9a:2e:72:5e:40:04:18:3e:9d:
         f6:c7:88:c9:80:fd:01:74:68:d5:8a:d8:0f:20:1a:ba:e6:a6:
         ce:d6:fc:ba:2c:10:45:72:61:0f:9c:38:57:02:7a:c2:27:02:
         52:6f:f8:c3:08:8a:21:96:28:a3:5a:5c:05:e0:a5:7a:2b:b4:
         70:aa:c9:df:61:ea:ba:71:79:e4:45:20:4a:4f:8e:c3:9d:82:
         d3:9a:98:aa:6a:cf:7c:03:c7:7d:70:4c:98:e5:bc:92:d9:d7:
         e2:cb:7c:64:8a:be:c6:37:b7:ca:6d:be:8f:6d:43:33:2a:6f:
         1e:55:3a:98:a0:25:07:44:df:0d:4d:0d:fe:dd:75:6b:fb:13:
         a8:e4:4e:75:af:79:ae:65:5d:7d:d9:89:3e:bc:e0:96:66:c9:
         ad:e7:8a:a9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVDMEFBRjExMC8GA1UEBRMoRTQ4MTdDRjZFM0RBMDUwMjUwMTlGRkQ1QUFCQkI3
ODM4NDc1RjI5QjAeFw0yNTA2MTgxMDMxNTlaFw0yNTA2MjAxMDMxNTlaMBgxFjAU
BgNVBAMTDTY4NTI5NTlmLWYzMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjrtlfdWoJpcVlAX0+l8QbABGXQaoR67IGSdShkOZpmZ+tcqs/RMpYyNco
CCmSryooTExjMgs6N3KuAk/WqpPYei0kQA2v4eyTwtBsIHVwyQRXVV6UEWElOZxE
yO8VKn+NahwCjO9LF415vIuJXLhW4EGugerszhTZI8vhCWiqYAxkbJmSxNnmYcl+
ZWVhqjgz0+6Tkrelxwrhs5GPJf8XCJE+z0O8vzTBykidJpLcX+Izb7riyvUymwCr
kf+lWRdWuo7mRMgEgXQRuht5mPT3VCLPLaezfMcLgkA2SMcHpBJ1HDHoeVPl/smq
+OtG66/pBcQS5Bw1w7uVYzdLnKZNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVKNu
+ef0JWSwbJUt++vPcWVCN/IwHwYDVR0jBBgwFoAU5IF89uPaBQJQGf/Vqru3g4R1
8pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1QzBBLzRGNTU2RkVBQUI3NTExRUQ5M0U2NTZBRkYxMjIyNDY4LzVJRjg5
dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVJRjg5dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTVDMEEvNEY1NTZGRUFBQjc1MTFFRDkzRTY1NkFGRjEy
MjI0NjgvNUlGODl1UGFCUUpRR2ZfVnFydTNnNFIxOHBzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABUY5eO0KnPE2QgR97SswqoA5VSdFq
e9TvFmYOc0bbKQ/TTkwCHGBbICYwups9ehwV2EHVg9EMSrDO18AMctojyQocPmbV
nI5S2KaMRgJRvilZXRs9xPDblcgDamqKS4PxDkaaLnJeQAQYPp32x4jJgP0BdGjV
itgPIBq65qbO1vy6LBBFcmEPnDhXAnrCJwJSb/jDCIohliijWlwF4KV6K7Rwqsnf
Yeq6cXnkRSBKT47DnYLTmpiqas98A8d9cEyY5byS2dfiy3xkir7GN7fKbb6PbUMz
Km8eVTqYoCUHRN8NTQ3+3XVr+xOo5E51r3muZV192Yk+vOCWZsmt54qp
-----END CERTIFICATE-----
Generated at Wed Jun 18 21:30:26 2025 by rpki-client