Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
File:                     U_eNgMrA6y6s13sBdd8xno91J5Y.mft (raw, json)
Hash identifier:          CoPuriw93T+XLBpiFsLcPox0RdMcaUQPnCDV7UksVEU=
Subject key identifier:   A0:08:A4:E2:BA:2E:33:E0:79:A2:56:0F:55:92:F0:43:7F:84:C6:5F
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Certificate issuer:       /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial:       02A8
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
Manifest number:          029A
Signing time:             Sun 27 Apr 2025 03:58:07 +0000
Manifest this update:     Sun 27 Apr 2025 03:58:06 +0000
Manifest next update:     Tue 29 Apr 2025 03:58:06 +0000
Files and hashes:         1: U_eNgMrA6y6s13sBdd8xno91J5Y.crl (hash: ycrRTtN9eLKmW6uFXQxeB2Ge09eyUuTqZf2dhkpyARU=)
                          2: A5829FB8FAFD11EEB4C6D20D017001B1.roa (hash: 1gu4Qu8rsgArGS1Y9Jq2u1pp9GqrVEYfqnEUTV3m1CI=)
                          3: 4281149CF7DF11EE80FF1021017001B1.roa (hash: cUFtSMR0TSwZ2UTIiyI0fv21ujQldFBY5Sypbj+4CnU=)
                          4: 60E7510AFAFD11EEB483D20C017001B1.roa (hash: M+guvwSynGfTHvTOyvTfqunoeJ7intrM84s+ebCzAj4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                          rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAP, serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
        Validity
            Not Before: Apr 27 03:58:06 2025 GMT
            Not After : Apr 29 03:58:06 2025 GMT
        Subject: CN=680dab4f-f32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:6e:b4:4e:6e:20:87:5a:f0:71:63:2a:c2:
                    5c:f7:67:25:63:7b:a1:a2:c5:f6:aa:7a:16:0c:23:
                    e0:17:06:5e:2e:b0:db:5b:19:05:ae:2b:3e:e7:89:
                    06:ec:58:d1:8f:d9:5f:d2:b7:25:6a:db:66:f1:c0:
                    34:51:20:a8:4c:c6:0b:84:9b:0d:a0:84:8e:e8:48:
                    43:d4:95:28:10:96:ec:c2:7a:d2:9f:ac:5b:fe:1c:
                    15:73:46:54:2e:32:6b:0c:e2:82:03:28:f2:99:97:
                    cd:a7:fa:80:60:d1:a9:0f:da:9b:87:5b:b6:03:74:
                    cd:cc:41:39:1f:7c:b3:09:51:b8:bc:3f:78:45:d0:
                    a1:f9:c7:15:53:51:51:f0:2b:0f:aa:75:45:62:bc:
                    b2:45:24:ac:1c:0b:66:e0:d6:3b:96:60:08:cb:4e:
                    59:94:7f:95:6a:c4:1a:73:d6:e0:aa:01:27:41:e7:
                    96:4f:fd:02:29:c9:4e:c0:86:d1:50:76:d7:23:cb:
                    c6:18:98:4e:85:da:5b:28:61:fa:c6:94:71:b9:52:
                    69:8d:a6:0d:aa:37:55:e6:b7:74:a7:b4:31:19:2c:
                    41:d7:24:40:45:60:48:a3:2c:69:e8:20:53:7b:a0:
                    0c:7f:61:82:9d:ba:e3:74:a8:77:1f:2a:26:1a:86:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:08:A4:E2:BA:2E:33:E0:79:A2:56:0F:55:92:F0:43:7F:84:C6:5F
            X509v3 Authority Key Identifier:
                keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:55:66:93:9b:19:67:b4:eb:f9:e5:f1:ca:0f:92:f8:03:
         be:97:0c:e6:fc:9b:47:0b:3b:63:21:1d:ff:fd:4f:8c:3f:1d:
         2c:8c:95:ea:9c:d5:40:59:c1:64:a4:9b:28:4b:86:b4:0e:0d:
         18:57:b2:36:b5:ca:23:b5:ca:33:a4:23:05:5a:da:5d:63:1e:
         93:6c:3c:89:e3:bc:35:a0:81:d0:9f:e0:36:0b:fd:2e:f5:c9:
         8c:69:1f:29:7f:ae:da:25:21:6f:49:e0:32:25:b7:65:0b:60:
         69:64:e9:cd:5a:81:73:b4:e3:8c:36:2a:11:01:f0:2f:88:63:
         7c:d9:1f:c1:a0:54:ac:78:cc:dd:24:1e:92:74:0f:44:07:b7:
         87:60:96:ea:bb:4b:9c:09:95:ba:66:af:07:06:74:f8:34:b6:
         d2:df:8a:5b:a0:0a:3f:d8:47:19:df:d1:f4:9a:e9:7c:98:3c:
         ae:c4:ad:57:61:8c:70:2f:e2:e3:25:56:65:ac:a9:22:38:95:
         0d:7d:fd:09:fe:35:95:42:12:26:bc:e2:9e:d6:8c:a6:26:fe:
         42:b7:cd:91:a4:e0:32:ca:fb:98:9f:a8:d5:5b:5e:4e:3b:65:
         48:91:e4:55:ed:44:7f:ed:ef:7d:ac:d6:40:2b:8d:53:ef:d5:
         ad:12:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:39 2025 by rpki-client on console.sobornost.net