Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
File:                     -ardXUWuw8xVsfhJ4vzOB289bjQ.mft (raw, json)
Hash identifier:          jwvISiB+SDIFdXesEo/jdxBdfD93rcRDFsF9nmSCu3U=
Subject key identifier:   F8:15:01:12:04:16:52:20:ED:8D:34:B1:38:A3:41:D5:78:15:B2:98
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Certificate issuer:       /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial:       0F1F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
Manifest number:          0F06
Signing time:             Mon 11 Aug 2025 00:51:18 +0000
Manifest this update:     Mon 11 Aug 2025 00:51:18 +0000
Manifest next update:     Wed 13 Aug 2025 00:51:18 +0000
Files and hashes:         1: -ardXUWuw8xVsfhJ4vzOB289bjQ.crl (hash: RGuEWUXs4fcJSqF4DiW17ufXS9oVkfEidN1K7IouRNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3871 (0xf1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AF9EEAF, serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
        Validity
            Not Before: Aug 11 00:51:18 2025 GMT
            Not After : Aug 13 00:51:18 2025 GMT
        Subject: CN=68993e86-96ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:b6:6b:ea:ed:24:8a:5e:54:ae:bf:d7:b1:
                    1c:04:c2:17:5d:44:c1:c9:f6:65:c5:f8:fd:17:be:
                    0d:31:a2:46:b9:3a:e4:27:6c:26:49:91:b4:75:3b:
                    3e:74:42:5e:cd:29:1f:ed:51:47:71:2b:8b:1d:d7:
                    e2:43:7f:63:f9:64:62:6a:b6:16:1f:5d:d5:2a:97:
                    88:83:f0:14:60:d4:0a:f0:6d:8e:8e:da:20:29:59:
                    00:ae:8d:58:7a:f3:fc:25:a0:81:11:3b:a6:72:59:
                    e2:c3:7b:6b:f1:ac:ea:11:b1:a7:ea:07:3a:64:32:
                    cb:d7:30:cb:fb:d2:8f:45:3f:1d:66:a1:a0:e1:c8:
                    6d:f1:0a:13:9e:97:06:81:4c:45:b2:0b:c7:0c:db:
                    35:14:d5:cc:b3:ea:b5:69:a5:16:0a:b0:f9:c8:df:
                    c9:af:8c:d0:cc:ff:51:6c:7e:a0:5d:f4:ce:7e:46:
                    2e:8e:41:ad:78:2c:a8:cd:8b:b4:fc:fe:3d:5d:03:
                    96:e2:1a:93:65:de:f3:b6:ff:f0:b6:e8:36:a3:fa:
                    5b:da:eb:5d:40:d5:71:c2:bb:af:85:d8:f0:e9:9f:
                    7b:fe:1f:84:43:6a:d3:16:36:ae:96:1e:3c:2b:24:
                    a3:e0:ad:a6:0c:da:79:66:58:e1:a8:9d:95:c5:82:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:01:12:04:16:52:20:ED:8D:34:B1:38:A3:41:D5:78:15:B2:98
            X509v3 Authority Key Identifier:
                keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:17:9b:98:37:7a:34:1a:d9:37:73:95:53:ca:8d:f8:74:
         d9:4d:20:1c:30:b8:7c:a2:4f:51:03:80:7a:31:9f:5e:b2:ee:
         fe:e2:77:c9:d1:cc:46:68:ce:25:ea:08:2b:d4:22:58:76:04:
         9c:c9:75:99:ad:7e:81:6e:70:86:4f:b6:9b:e0:c8:1a:fe:6a:
         45:5e:53:65:ba:a3:5c:fd:20:86:59:ef:27:db:2f:b4:19:a3:
         c8:de:77:9b:a2:6a:c6:9c:81:86:c6:ad:2b:ef:52:13:aa:29:
         4a:0a:82:df:e2:53:16:5d:57:34:c6:bf:1a:0d:4e:1c:08:4d:
         75:71:82:41:7c:2f:fe:73:f9:53:df:4e:1c:05:d0:c8:f9:40:
         ab:3d:e6:49:6e:ec:26:38:3a:04:be:e8:4f:39:91:f3:12:b5:
         59:ef:93:34:6b:66:9d:71:b5:99:7c:86:29:de:b5:d4:46:87:
         a0:fd:81:b5:5e:a3:a9:f4:71:68:65:f3:75:a3:89:aa:71:26:
         46:32:fc:cd:69:83:90:df:33:07:79:2d:6b:02:dc:7d:db:c8:
         5a:84:95:ab:48:f9:93:04:69:34:c6:68:f7:46:6b:79:d2:e4:
         c1:80:35:11:bd:2b:43:e7:49:98:dc:2a:b3:fb:eb:4f:91:29:
         91:7b:b5:d7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDx8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUY5RUVBRjExMC8GA1UEBRMoRjlBQURENUQ0NUFFQzNDQzU1QjFGODQ5RTJGQ0NF
MDc2RjNENkUzNDAeFw0yNTA4MTEwMDUxMThaFw0yNTA4MTMwMDUxMThaMBgxFjAU
BgNVBAMTDTY4OTkzZTg2LTk2ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkILZr6u0kil5Urr/XsRwEwhddRMHJ9mXF+P0Xvg0xoka5OuQnbCZJkbR1
Oz50Ql7NKR/tUUdxK4sd1+JDf2P5ZGJqthYfXdUql4iD8BRg1ArwbY6O2iApWQCu
jVh68/wloIERO6ZyWeLDe2vxrOoRsafqBzpkMsvXMMv70o9FPx1moaDhyG3xChOe
lwaBTEWyC8cM2zUU1cyz6rVppRYKsPnI38mvjNDM/1FsfqBd9M5+Ri6OQa14LKjN
i7T8/j1dA5biGpNl3vO2//C26Daj+lva611A1XHCu6+F2PDpn3v+H4RDatMWNq6W
HjwrJKPgraYM2nlmWOGonZXFgtpbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+BUB
EgQWUiDtjTSxOKNB1XgVspgwHwYDVR0jBBgwFoAU+ardXUWuw8xVsfhJ4vzOB289
bjQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFGOUVFLzkwREVEMENDMERDQzExRTU5QzI1QjcyNEY4QUVBMjI4Ly1hcmRY
VVd1dzh4VnNmaEo0dnpPQjI4OWJqUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1hcmRYVVd1dzh4VnNmaEo0dnpPQjI4OWJqUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUY5RUUvOTBERUQwQ0MwRENDMTFFNTlDMjVCNzI0RjhB
RUEyMjgvLWFyZFhVV3V3OHhWc2ZoSjR2ek9CMjg5YmpRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIPhebmDd6NBrZN3OVU8qN+HTZTSAc
MLh8ok9RA4B6MZ9esu7+4nfJ0cxGaM4l6ggr1CJYdgScyXWZrX6BbnCGT7ab4Mga
/mpFXlNluqNc/SCGWe8n2y+0GaPI3nebomrGnIGGxq0r71ITqilKCoLf4lMWXVc0
xr8aDU4cCE11cYJBfC/+c/lT304cBdDI+UCrPeZJbuwmODoEvuhPOZHzErVZ75M0
a2adcbWZfIYp3rXURoeg/YG1XqOp9HFoZfN1o4mqcSZGMvzNaYOQ3zMHeS1rAtx9
28hahJWrSPmTBGk0xmj3Rmt50uTBgDURvStD50mY3Cqz++tPkSmRe7XX
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:14 2025 by rpki-client