Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
File:                     zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft (raw, json)
Hash identifier:          Q8UFpXEUxymIPR0sr7OWzRuRPLe2hVPCMOExahqd1Iw=
Subject key identifier:   05:F7:08:71:B1:5C:C0:A0:B7:85:F5:61:46:49:EC:E3:12:89:8D:77
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Certificate issuer:       /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial:       089D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
Manifest number:          089A
Signing time:             Wed 30 Apr 2025 01:33:35 +0000
Manifest this update:     Wed 30 Apr 2025 01:33:34 +0000
Manifest next update:     Fri 02 May 2025 01:33:34 +0000
Files and hashes:         1: zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl (hash: sfXkd8SWWljnxPdAIf/W6F/wPcWprkq1Ndg8F+PA/KU=)
                          2: 8D638E94EA6911EBA5AD1D78D8A014CE.roa (hash: TSjbcBjzqOEDoCJOFKA/gcs+86bsN6ECxtsUBjgtesg=)
                          3: 318EA42098F711E9A08C1176F8AEA228.roa (hash: w0LdOEkkXXKRsW1PLK4DZkJUwY2G0SIkANImRgbjTcI=)
                          4: 7F9AB1CC98F711E9BABB4B76F8AEA228.roa (hash: jzZ3XEm/0+bQmIh4jXGZex7PIgjtpornzaVmedGVKeA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                          rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205 (0x89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
        Validity
            Not Before: Apr 30 01:33:34 2025 GMT
            Not After : May  2 01:33:34 2025 GMT
        Subject: CN=68117def-b118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:ec:18:95:7d:b5:4e:79:f1:8b:25:af:e7:
                    11:9d:05:46:3f:00:ab:6e:fa:13:9a:2f:92:97:02:
                    3b:14:67:0a:8e:f3:be:21:b6:29:67:db:55:92:2d:
                    3c:1e:1c:a1:aa:84:ab:0b:80:b5:13:04:92:1e:29:
                    dc:2f:86:f1:59:e2:af:5d:a4:06:88:58:b0:9c:53:
                    ee:4c:0e:a0:9a:6b:65:b7:49:69:71:53:78:17:88:
                    91:24:95:8b:0f:97:95:85:bb:00:d7:21:bb:76:10:
                    2c:d8:08:a7:02:bd:d6:5a:10:c6:1f:09:37:ed:0b:
                    d2:c5:93:cd:60:e4:14:ee:2e:94:67:c6:fb:10:1e:
                    82:77:95:5c:24:f3:b2:fb:88:b6:72:1e:20:e4:cf:
                    84:97:89:00:90:1e:14:7a:eb:32:e7:09:52:a5:29:
                    53:86:02:86:f4:ca:c5:d9:3a:71:70:dd:92:cc:1b:
                    de:9f:ac:83:93:e8:49:1e:3d:2f:63:5a:89:eb:f6:
                    48:ab:8f:78:5a:9d:28:8e:4f:f3:73:34:3d:0f:03:
                    9b:fd:49:80:fb:0b:f8:d2:86:5c:97:43:d4:02:01:
                    2a:f6:d8:58:12:06:c7:ff:56:2e:31:5e:4c:35:c7:
                    ea:3d:8b:a0:d4:3c:88:07:ed:e3:af:a9:6a:68:63:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F7:08:71:B1:5C:C0:A0:B7:85:F5:61:46:49:EC:E3:12:89:8D:77
            X509v3 Authority Key Identifier:
                keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:dd:8a:33:cc:8a:e3:57:15:57:ba:ce:f9:48:4e:5c:82:de:
         9d:5c:97:15:59:ec:c4:89:16:15:57:0a:35:6c:62:5d:55:df:
         8e:20:d3:44:2e:d1:e9:c5:5e:9e:08:8f:80:7a:32:2b:68:d2:
         fb:ef:19:e4:57:75:38:6c:0c:57:2f:eb:6a:ea:01:af:97:2f:
         e5:45:3c:4e:fa:03:a1:d7:eb:6b:70:3a:00:64:a6:72:16:b4:
         42:29:c5:7d:9c:92:71:3d:e1:32:28:03:a3:c4:a4:17:42:8d:
         d1:56:b9:bc:86:42:8b:3b:a9:ea:aa:6b:fb:ee:a8:0c:19:b4:
         35:bf:fc:05:e8:9a:fb:62:95:a3:e8:1e:6c:72:4a:74:c9:a7:
         0c:c2:3b:aa:06:be:59:bd:00:a9:8b:43:8a:6f:c4:12:a8:aa:
         07:4f:ff:b1:78:5a:dc:e4:ca:f1:ce:c2:42:01:a4:fd:ca:24:
         ce:5a:80:9d:73:1d:25:01:0d:b3:86:7b:81:67:bc:57:d9:d1:
         58:73:61:cf:67:d8:08:11:52:de:b0:47:00:a6:f1:71:4f:ac:
         7d:02:c2:62:41:a8:29:90:74:2d:b0:d8:8c:a9:08:af:e0:0f:
         1b:65:ff:71:1d:dd:f3:a0:31:ae:89:9c:20:c3:d8:26:0e:8c:
         53:c2:ed:3d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUJGMjdBUjExMC8GA1UEBRMoQ0QwN0Q3Qzg5RUNFNEMwRjlEMDRBMUIxNTNCQkM3
MTBERjAxNkIyRDAeFw0yNTA0MzAwMTMzMzRaFw0yNTA1MDIwMTMzMzRaMBgxFjAU
BgNVBAMTDTY4MTE3ZGVmLWIxMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX/ewYlX21TnnxiyWv5xGdBUY/AKtu+hOaL5KXAjsUZwqO874htiln21WS
LTweHKGqhKsLgLUTBJIeKdwvhvFZ4q9dpAaIWLCcU+5MDqCaa2W3SWlxU3gXiJEk
lYsPl5WFuwDXIbt2ECzYCKcCvdZaEMYfCTftC9LFk81g5BTuLpRnxvsQHoJ3lVwk
87L7iLZyHiDkz4SXiQCQHhR66zLnCVKlKVOGAob0ysXZOnFw3ZLMG96frIOT6Eke
PS9jWonr9kirj3hanSiOT/NzND0PA5v9SYD7C/jShlyXQ9QCASr22FgSBsf/Vi4x
Xkw1x+o9i6DUPIgH7eOvqWpoY6WFAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBfcI
cbFcwKC3hfVhRkns4xKJjXcwHwYDVR0jBBgwFoAUzQfXyJ7OTA+dBKGxU7vHEN8B
ay0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCRjI3LzU4MDBEQ0Y0OTFFQTExRTlCQTU2OTI3QUY4QUVBMjI4L3pRZlh5
SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3pRZlh5SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUJGMjcvNTgwMERDRjQ5MUVBMTFFOUJBNTY5MjdBRjhBRUEy
MjgvelFmWHlKN09UQS1kQktHeFU3dkhFTjhCYXkwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC3YozzIrjVxVXus75SE5cgt6dXJcVWezE
iRYVVwo1bGJdVd+OINNELtHpxV6eCI+AejIraNL77xnkV3U4bAxXL+tq6gGvly/l
RTxO+gOh1+trcDoAZKZyFrRCKcV9nJJxPeEyKAOjxKQXQo3RVrm8hkKLO6nqqmv7
7qgMGbQ1v/wF6Jr7YpWj6B5sckp0yacMwjuqBr5ZvQCpi0OKb8QSqKoHT/+xeFrc
5MrxzsJCAaT9yiTOWoCdcx0lAQ2zhnuBZ7xX2dFYc2HPZ9gIEVLesEcApvFxT6x9
AsJiQagpkHQtsNiMqQiv4A8bZf9xHd3zoDGuiZwgw9gmDoxTwu09
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:21:01 2025 by rpki-client