Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
File:                     YmHXJNC9IPWdDi44xn6JVKbUy98.mft (raw, json)
Hash identifier:          AeSmCX8Jme25bbJA8JZ9Lxt1065hlMBLCD73IE8XM7s=
Subject key identifier:   22:B8:07:B4:5A:5C:8E:9E:21:61:8F:52:8C:3D:C4:14:90:A0:37:6E
Authority key identifier: 62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
Certificate issuer:       /CN=F3610DE1AF/serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
Certificate serial:       057B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
Manifest number:          0578
Signing time:             Wed 17 Sep 2025 02:35:18 +0000
Manifest this update:     Wed 17 Sep 2025 02:35:18 +0000
Manifest next update:     Fri 19 Sep 2025 02:35:18 +0000
Files and hashes:         1: YmHXJNC9IPWdDi44xn6JVKbUy98.crl (hash: GTp0ERS89NYqt4y0I95BTSVci+0VJH9WO7au5Tb6040=)
                          2: EC347D644F7011F0B0E5A285DAE4EC9C.roa (hash: 7VqGdhK0QKVxfwrcQu0g+uIjAEEmddmp5+L+0+/1OA0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403 (0x57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610DE1AF, serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
        Validity
            Not Before: Sep 17 02:35:18 2025 GMT
            Not After : Sep 19 02:35:18 2025 GMT
        Subject: CN=68ca1e66-dabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:33:c5:29:52:1a:fd:37:5d:2b:86:2f:25:
                    24:c0:18:f5:d8:42:00:63:04:78:04:ad:d1:8c:7b:
                    4b:1b:d4:63:2a:6d:a8:1f:9c:f2:53:2b:8f:d1:f3:
                    93:2c:9e:b0:b5:f1:ca:8d:f4:0a:90:1e:0c:94:30:
                    f5:27:7b:11:01:9e:de:15:4a:71:4d:dc:dd:9d:d3:
                    43:b3:1e:37:14:37:d8:0e:85:97:76:4d:df:9d:71:
                    66:0b:6d:1e:3b:72:c6:04:28:ed:7f:c3:49:47:8d:
                    38:97:63:b4:0a:89:0e:e3:b0:00:f8:a8:ff:a8:79:
                    f1:2c:29:b8:6a:76:e0:bc:56:26:ff:52:c6:aa:db:
                    3c:2f:0d:39:6a:5d:57:c4:16:e5:e4:ae:12:8d:cd:
                    f5:91:ba:60:a0:5d:94:80:fb:f2:f8:17:d9:af:d9:
                    5c:d5:07:19:d2:90:61:f5:e0:7c:fb:c5:8c:be:79:
                    9b:38:f5:95:20:1c:3b:74:97:5d:95:8a:d3:47:54:
                    61:85:d9:82:83:f9:55:77:6f:64:fb:8c:36:d9:e5:
                    61:7b:6b:5c:94:53:37:e5:3d:10:39:36:f5:91:a2:
                    e4:90:c6:ab:82:f6:99:2e:54:56:99:d5:a5:0f:f8:
                    3d:67:27:dc:b3:0c:f1:bb:bd:70:7e:58:8a:f6:bb:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B8:07:B4:5A:5C:8E:9E:21:61:8F:52:8C:3D:C4:14:90:A0:37:6E
            X509v3 Authority Key Identifier:
                keyid:62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:17:d3:55:f0:cf:fd:4a:4d:07:d1:ce:ad:ef:65:8c:b0:
         91:7f:d8:a8:db:6a:1b:64:5e:40:00:07:b3:d4:7e:85:0b:e3:
         ba:ed:89:c9:b3:56:fd:63:6e:08:56:63:f0:ad:97:4f:10:35:
         c4:43:53:27:a3:a7:b7:c5:c8:6b:38:ad:f1:ae:d5:ec:68:03:
         d4:10:0d:f3:6c:67:ce:d4:16:75:5d:54:64:39:28:59:82:75:
         1d:67:f3:be:f4:94:11:31:9f:05:40:a8:67:d0:c7:66:b3:b3:
         a0:a4:46:2c:69:03:67:5c:95:78:73:b4:6b:60:c7:06:da:ec:
         34:5c:a7:33:6d:29:11:30:6d:14:6b:c8:21:c6:be:a3:22:e0:
         7b:45:ec:17:2b:63:14:6f:2a:15:b1:e3:f3:df:49:b6:04:e6:
         d4:b9:89:f6:08:53:8b:f7:e4:40:eb:eb:be:0e:04:ce:9f:be:
         28:21:90:4e:2b:92:9e:5c:fb:4d:34:e2:b0:31:f2:81:af:2c:
         b3:6f:93:92:53:fc:c5:b5:23:7f:65:ba:e5:cc:3b:3f:b5:a0:
         b7:04:a3:74:8a:cd:3b:02:45:84:cd:de:bf:82:88:f2:a0:2c:
         ec:68:f1:d5:d3:75:84:9a:b4:38:2b:d7:77:fe:dc:3a:c6:a2:
         2b:33:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:39:10 2025 by rpki-client