Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          WX3OH6zWdXAG9dcra8sfl9CEdQlYRfk9ZzvByQtDjgM=
Subject key identifier:   B9:DF:33:12:5F:69:3A:E6:5F:A0:17:A6:88:EC:E6:36:36:35:DE:43
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       043A
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          0437
Signing time:             Sun 27 Apr 2025 02:59:53 +0000
Manifest this update:     Sun 27 Apr 2025 02:59:52 +0000
Manifest next update:     Tue 29 Apr 2025 02:59:52 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: tkkKvDAF7tZwplk6oF6NvoN5vdkaEFSjTqmTnrbq/IA=)
                          2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=)
                          3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=)
                          4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Apr 27 02:59:52 2025 GMT
            Not After : Apr 29 02:59:52 2025 GMT
        Subject: CN=680d9da9-b2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:28:fe:d2:e4:e0:b9:45:09:8a:66:66:75:
                    fa:17:ae:18:be:af:36:34:ef:8d:8f:cd:15:82:b3:
                    ab:00:fe:d2:5f:4c:de:b7:fc:2b:e5:21:9a:67:65:
                    19:e3:e3:e3:07:2d:97:d5:95:ab:d4:86:e9:eb:a3:
                    8c:5d:41:c0:da:eb:78:e3:5a:6e:89:93:9c:79:98:
                    cf:20:4c:f3:78:98:71:be:a5:95:cc:f7:10:43:1f:
                    6d:78:0c:60:99:13:57:91:da:0f:37:58:12:b1:b6:
                    a1:67:01:55:ca:73:ec:2c:ef:51:61:4d:60:7f:04:
                    f2:27:44:60:ca:3d:03:4e:ef:59:25:3a:09:7d:cf:
                    7e:29:cb:24:e0:d1:88:47:b4:09:c3:af:05:c7:a0:
                    ff:1c:48:33:14:5f:7d:b0:33:70:0c:a7:ec:8b:6c:
                    0c:45:1c:16:90:c3:a2:ed:ed:ad:8f:4c:a1:1f:98:
                    7d:3c:33:2b:72:34:54:d4:4e:06:0d:e6:99:f4:a9:
                    73:68:80:b6:c7:cc:f6:3d:96:ae:c4:70:17:c0:49:
                    28:9d:78:6e:21:af:12:42:ad:89:70:21:ad:7a:67:
                    ff:71:c3:1b:15:70:d8:e6:32:e0:27:5d:a1:e5:34:
                    9c:1c:c4:3a:0e:fc:80:7f:7e:a7:3f:04:96:31:ab:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DF:33:12:5F:69:3A:E6:5F:A0:17:A6:88:EC:E6:36:36:35:DE:43
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9d:d1:be:f5:22:a2:9b:e3:33:2e:02:69:85:64:c3:a4:71:
         71:74:27:e8:90:ee:d7:b0:72:0c:f5:8f:6c:78:d4:d7:bb:e8:
         7b:a6:8b:61:ca:71:1e:a9:4c:72:af:f0:bd:6b:0d:2b:4d:bd:
         2e:57:31:f4:e9:92:3d:16:a2:a2:f5:e4:a8:ef:1f:39:e0:2a:
         af:cb:9a:2e:5f:4f:17:81:b5:7a:e8:27:56:ec:c9:ab:f2:6f:
         9c:ff:99:7b:cb:3b:dd:b1:25:d1:ec:31:22:62:80:c9:f0:5c:
         1f:24:47:a9:be:35:bf:82:5e:fd:38:bf:a9:75:13:fa:64:31:
         44:0e:33:56:0f:42:e2:99:77:b5:24:45:77:c6:3f:1b:8f:21:
         67:ff:60:dd:48:4d:8f:23:c9:d7:b3:8e:fa:1c:e2:b5:27:92:
         75:17:88:eb:73:53:dc:63:df:48:a2:dc:e6:a4:14:73:a5:7d:
         6c:c6:ad:94:21:cd:07:da:5b:18:16:7e:87:1c:73:02:04:6f:
         bf:cd:d7:64:7c:3a:09:0f:45:5b:64:13:03:57:77:49:1a:29:
         02:30:87:dd:76:c6:49:ff:15:a3:85:98:c0:22:61:31:32:fb:
         8a:5c:1f:67:54:13:f1:bc:ba:d9:75:3d:4e:fe:06:9f:e4:3a:
         c5:48:b6:8d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc1NjBBUDExMC8GA1UEBRMoNzJGMDg3NDE0Q0UyREY0NEJDNEY0REZGNUJFMTE0
N0E3QTcxQTlBRTAeFw0yNTA0MjcwMjU5NTJaFw0yNTA0MjkwMjU5NTJaMBgxFjAU
BgNVBAMTDTY4MGQ5ZGE5LWIyZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbTCj+0uTguUUJimZmdfoXrhi+rzY0742PzRWCs6sA/tJfTN63/CvlIZpn
ZRnj4+MHLZfVlavUhunro4xdQcDa63jjWm6Jk5x5mM8gTPN4mHG+pZXM9xBDH214
DGCZE1eR2g83WBKxtqFnAVXKc+ws71FhTWB/BPInRGDKPQNO71klOgl9z34pyyTg
0YhHtAnDrwXHoP8cSDMUX32wM3AMp+yLbAxFHBaQw6Lt7a2PTKEfmH08MytyNFTU
TgYN5pn0qXNogLbHzPY9lq7EcBfASSideG4hrxJCrYlwIa16Z/9xwxsVcNjmMuAn
XaHlNJwcxDoO/IB/fqc/BJYxq6QtAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUud8z
El9pOuZfoBemiOzmNjY13kMwHwYDVR0jBBgwFoAUcvCHQUzi30S8T03/W+EUenpx
qa4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIyNDY4L2N2Q0hR
VXppMzBTOFQwM19XLUVVZW5weHFhNC5jcmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5p
Yy9jdkNIUVV6aTMwUzhUMDNfVy1FVWVucHhxYTQuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHVBggrBgEFBQcBCwSByDCBxTCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIy
NDY4L2N2Q0hRVXppMzBTOFQwM19XLUVVZW5weHFhNC5tZnQwNQYIKwYBBQUHMA2G
KWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJ3RvvUiopvjMy4CaYVkw6RxcXQn6JDu
17ByDPWPbHjU17voe6aLYcpxHqlMcq/wvWsNK029Llcx9OmSPRaiovXkqO8fOeAq
r8uaLl9PF4G1eugnVuzJq/JvnP+Ze8s73bEl0ewxImKAyfBcHyRHqb41v4Je/Ti/
qXUT+mQxRA4zVg9C4pl3tSRFd8Y/G48hZ/9g3UhNjyPJ17OO+hzitSeSdReI63NT
3GPfSKLc5qQUc6V9bMatlCHNB9pbGBZ+hxxzAgRvv83XZHw6CQ9FW2QTA1d3SRop
AjCH3XbGSf8Vo4WYwCJhMTL7ilwfZ1QT8by62XU9Tv4Gn+Q6xUi2jQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:38 2025 by rpki-client on console.sobornost.net