Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          PgiYB/fvC7QcoqT4k25+LyW3waPyw4yk4+1EkgLSxso=
Subject key identifier:   50:53:EF:31:C1:7C:0E:00:D3:52:26:AE:16:C7:2E:A3:50:3D:EB:63
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          08
Signing time:             Wed 06 Aug 2025 05:31:53 +0000
Manifest this update:     Wed 06 Aug 2025 05:31:52 +0000
Manifest next update:     Fri 08 Aug 2025 05:31:52 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: UnfYta0TEiTyiykkqnbNy8YEseRSaHVcYLDp5n4O9SU=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 05:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: Aug  6 05:31:52 2025 GMT
            Not After : Aug  8 05:31:52 2025 GMT
        Subject: CN=6892e8c9-e52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:7c:bc:c8:03:86:ce:e2:54:df:b3:5e:ed:
                    f7:33:3c:cb:3f:96:37:9b:70:34:e4:f3:f0:33:14:
                    ab:f6:01:01:a4:6f:a4:ff:62:14:4b:bb:ce:f5:d4:
                    6b:35:ec:03:93:5e:15:5a:db:df:41:80:89:dd:03:
                    f6:1c:7a:19:6a:30:d8:30:4f:79:e1:67:89:13:9b:
                    d9:4e:89:54:a0:dd:a2:75:63:25:07:f9:4f:4e:fd:
                    6a:0d:8f:d7:65:e8:24:c3:7f:e9:68:fd:4e:c7:54:
                    33:03:a3:1a:7d:9f:56:14:59:37:b8:b7:60:32:8b:
                    51:7b:07:92:d3:71:ed:d9:67:d2:d7:f0:f8:6c:07:
                    1e:ee:40:b4:1c:11:c9:73:97:8f:11:0d:e4:1b:3b:
                    af:83:d7:27:bc:ec:3e:e1:32:17:fd:4a:fd:e5:39:
                    80:b3:28:e9:df:11:3b:f9:4c:bb:67:1f:7e:18:77:
                    c8:a8:fc:fa:08:fb:fb:77:74:7e:5c:08:6b:90:71:
                    30:90:f9:20:ad:44:d6:05:3c:df:83:f9:b2:22:ba:
                    31:ef:58:c1:ce:3f:a7:03:e5:27:88:02:da:70:11:
                    4c:99:be:e8:e8:72:f2:91:ec:3a:11:82:61:01:5d:
                    61:01:2e:6b:aa:f2:d6:9a:6c:d0:3f:f3:d1:4b:e5:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:53:EF:31:C1:7C:0E:00:D3:52:26:AE:16:C7:2E:A3:50:3D:EB:63
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:75:dd:28:09:5d:71:9e:5f:4c:e5:b1:e6:0d:7c:9f:77:4f:
         8c:d3:66:0b:52:6d:fe:87:8c:79:73:f5:1a:dc:02:20:96:db:
         01:24:a5:5d:65:8b:5e:c3:ab:20:c2:e3:5e:15:23:41:7b:96:
         13:5c:c0:3b:33:e6:5d:ef:17:dd:0e:80:1f:d2:fe:63:0b:64:
         8e:d7:1d:43:f0:13:df:0d:ec:22:15:79:ac:8f:3c:39:51:c9:
         cf:45:b0:1e:f3:8d:52:c7:0f:a6:7d:9b:38:fc:51:9e:0d:18:
         eb:a9:fb:eb:7b:af:f4:5d:ee:77:41:8a:d8:a1:29:30:4c:3d:
         dc:e1:7a:bc:bf:ca:6b:a7:1a:79:8c:21:1b:fa:43:7d:8f:66:
         c0:d6:31:2b:6d:a3:cb:18:df:be:cc:47:63:2d:48:f4:6c:b7:
         70:c9:c7:3a:df:5d:24:f9:3f:c5:e2:90:c2:f4:bf:58:91:6b:
         af:5f:c8:d3:a9:bb:b6:56:c2:d4:45:1b:62:96:ba:e4:e8:89:
         50:63:09:ec:70:46:33:2b:fb:8e:f4:3c:a4:a2:70:41:e4:7a:
         5d:f1:8a:f5:0a:75:2e:aa:3f:ad:2a:17:c9:7a:50:6c:40:17:
         10:cb:69:eb:93:8c:c8:44:2f:d1:fb:72:10:02:01:cd:5d:60:
         e4:7b:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:25:53 2025 by rpki-client