Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File:                     IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier:          fS+EiMeX8lz0x0PHKGUT9THe4t4QNg0tq21e0Wzdvbc=
Subject key identifier:   4C:82:7E:2A:DD:B5:79:FA:77:08:62:57:E9:DF:94:0F:62:19:4D:A1
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer:       /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial:       037B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number:          0379
Signing time:             Wed 13 Aug 2025 03:40:02 +0000
Manifest this update:     Wed 13 Aug 2025 03:40:02 +0000
Manifest next update:     Fri 15 Aug 2025 03:40:02 +0000
Files and hashes:         1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: YPiHq9N6PwDbTwkCRNowC9/THrDiNAzXPLXm8jMyzCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
        Validity
            Not Before: Aug 13 03:40:02 2025 GMT
            Not After : Aug 15 03:40:02 2025 GMT
        Subject: CN=689c0912-a5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:b9:9f:ab:a5:2e:16:68:7d:d6:35:15:28:
                    42:e2:dd:c6:f8:ce:2a:f7:a1:50:24:8e:bb:e0:82:
                    4d:1e:66:d3:9e:92:ac:dd:1a:64:58:de:d7:41:60:
                    9c:c3:6b:53:89:89:45:a4:7a:89:f2:bf:1a:e4:f0:
                    88:0b:45:0d:fd:7d:bd:a5:f2:b3:39:5c:f0:5b:f5:
                    44:36:5a:52:c1:33:8c:34:d0:38:be:06:67:84:05:
                    6a:37:67:f5:99:a8:ff:26:ab:09:77:13:62:3c:c8:
                    5b:8b:55:84:7b:ce:b3:a8:c8:a2:5f:85:ef:03:13:
                    17:94:4f:a3:79:fb:77:ac:f0:67:6b:f3:32:54:16:
                    96:05:6d:1c:79:2d:b6:54:1e:bc:b5:30:e5:ed:75:
                    15:28:98:fa:e9:f0:42:56:1d:39:a5:3b:19:bd:ae:
                    91:46:60:3e:e3:71:1f:8c:ac:42:c5:39:29:df:09:
                    74:0a:48:f7:a9:99:93:55:05:27:23:75:03:53:58:
                    24:e9:23:74:f9:5a:5c:43:e3:ef:d3:f6:77:b5:3e:
                    6c:6d:f1:c6:16:1a:68:f8:f3:c0:c6:d7:53:2b:7f:
                    1b:ef:47:78:3d:25:ab:95:cc:bb:18:53:bd:c4:70:
                    29:8a:3d:f6:74:01:cd:33:29:be:31:f5:e2:63:54:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:82:7E:2A:DD:B5:79:FA:77:08:62:57:E9:DF:94:0F:62:19:4D:A1
            X509v3 Authority Key Identifier:
                keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:cf:8d:1e:fc:0c:e0:86:04:34:22:ac:b4:59:c2:bb:86:07:
         26:4d:20:ac:8e:75:0b:2d:49:62:e9:72:98:76:9f:d3:43:1b:
         f5:51:04:16:7d:97:fe:62:43:dd:68:86:a4:fb:99:5e:7b:4c:
         be:e6:62:8a:84:a0:fa:b7:df:13:dc:91:16:39:48:71:d1:bf:
         d4:86:55:e7:c8:85:c1:6f:1d:e4:0d:57:19:7f:9e:ac:dd:7e:
         c6:cc:69:dc:d0:50:30:2e:86:72:f2:a4:7d:e9:ab:8e:4d:5c:
         b0:5f:31:54:db:29:d0:67:a2:c3:c5:69:ca:1f:04:38:cd:9d:
         67:db:4a:9b:1b:45:59:05:2d:b5:e1:b1:2c:d8:52:eb:7e:71:
         85:dd:a3:38:b5:63:96:4a:18:7b:12:56:67:27:7d:00:aa:f0:
         e9:d0:a5:b6:0f:ed:03:1c:a6:a4:ae:47:1b:01:e9:f8:f8:d5:
         7b:27:1b:1d:54:e5:33:5f:d8:8c:38:2c:53:78:86:01:80:de:
         e4:f5:c9:99:a9:c9:f1:f2:ee:b1:30:10:8e:12:23:81:b9:92:
         6a:89:cd:c6:64:1e:8e:67:23:fc:80:35:f6:12:c7:a8:ef:69:
         60:09:c1:ba:89:3c:47:15:64:8a:c3:5d:9b:77:9f:29:85:07:
         31:8f:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:03 2025 by rpki-client