Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
File:                     yDmJhjJn0TZLxz9143zW0rf-yYc.mft (raw, json)
Hash identifier:          9JDU02j6vwccovddFlbMWZJVFEpkZ5piFH05QEbdIvE=
Subject key identifier:   42:29:57:63:36:F3:FD:75:5D:82:2F:8C:C3:D3:E1:08:90:EC:9C:C8
Authority key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
Certificate issuer:       /CN=F361F0D8AF/serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
Manifest number:          14
Signing time:             Thu 23 Oct 2025 05:17:45 +0000
Manifest this update:     Thu 23 Oct 2025 05:17:44 +0000
Manifest next update:     Sat 25 Oct 2025 05:17:44 +0000
Files and hashes:         1: yDmJhjJn0TZLxz9143zW0rf-yYc.crl (hash: FXJ822MpZZ+quf1LfOjBhJOcaQ04kJHdqtI+FwIuZJg=)
                          2: 8FDC3D26A3BD11F0B640C8E9DAE4EC9C.roa (hash: z+EMCGVRvbS1M60Ygkphk04UU0Xnx+NfxQ7EP0ilmi0=)
                          3: 5598B34AA8D311F09951D4DFDAE4EC9C.roa (hash: ekkmLGUII3HkbjQJ5DqbrnE5zNaEvepsyMeJezGqRJY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Oct 2025 00:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
        Validity
            Not Before: Oct 23 05:17:44 2025 GMT
            Not After : Oct 25 05:17:44 2025 GMT
        Subject: CN=68f9ba79-2d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:0e:ac:c7:74:46:ea:76:ec:1c:1f:51:5a:
                    c8:a7:9d:6f:16:3e:7a:29:cc:fa:69:51:5f:e3:0a:
                    5f:8e:0e:24:a2:90:34:6b:5f:32:46:00:1a:62:56:
                    43:ba:26:f5:3d:bb:82:14:ca:95:f9:cb:5b:3a:34:
                    d4:a4:f7:39:a3:00:78:ec:70:09:66:ce:e7:e7:4c:
                    7d:5d:09:67:73:ad:56:3d:af:3c:2a:0e:40:49:8e:
                    03:aa:e5:07:4d:4d:a6:42:4e:3d:0f:dd:44:ae:dc:
                    6a:92:28:5f:10:4e:1e:0c:40:4a:93:cb:3e:45:40:
                    42:84:7f:54:bc:51:dc:0e:2a:46:75:63:a4:1b:d1:
                    81:9b:8f:30:97:a6:2d:95:7f:94:15:22:5d:8a:b4:
                    29:36:29:10:66:cb:26:58:40:86:fc:f8:6d:70:0a:
                    6b:d0:1a:b4:40:14:6c:c1:d4:06:0d:ae:b7:e2:3a:
                    3c:87:5a:4a:13:63:fc:b4:f4:08:45:93:20:73:f6:
                    db:29:ef:9f:f6:2e:d8:33:b0:f2:d9:66:b0:e7:5f:
                    7f:84:d7:79:39:55:c6:13:99:98:a7:bd:68:e7:d8:
                    63:59:95:80:a5:a4:d0:61:91:88:13:90:ad:ba:7a:
                    4e:bc:08:82:a1:1b:76:ec:ee:ab:58:4f:6f:b9:e8:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:29:57:63:36:F3:FD:75:5D:82:2F:8C:C3:D3:E1:08:90:EC:9C:C8
            X509v3 Authority Key Identifier:
                keyid:C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:98:89:5e:6e:5d:6a:0c:e1:98:9d:58:c2:d2:b5:c2:d8:fe:
         94:ed:af:72:4e:d7:99:b8:29:88:19:e8:0f:c3:16:f2:ea:a5:
         cf:46:ac:f0:64:dc:88:e8:79:f6:d1:d2:cf:cd:01:49:9a:a9:
         f2:14:9c:42:69:a7:97:0b:08:52:d3:4b:21:d2:54:f3:e8:75:
         c6:16:f5:92:0e:10:28:68:b1:62:46:f1:46:72:c0:ec:ae:1e:
         41:a0:01:e5:33:50:5f:9d:6a:23:a9:42:e9:a3:05:42:cc:09:
         70:78:34:f8:a9:c4:16:59:d8:53:62:d6:b7:0c:7d:74:27:f1:
         04:50:5f:89:99:6d:ae:0b:a0:70:ef:6f:e1:a6:cc:41:09:d9:
         cf:1d:cc:d8:a3:47:ff:9f:0c:47:85:bb:8f:18:78:25:8c:22:
         57:21:70:03:61:e0:6e:b0:c8:15:97:94:1f:e4:d0:0c:a8:09:
         74:46:e4:23:5e:70:f3:7e:86:8c:d0:f8:06:f0:d6:e9:78:3d:
         cc:9e:6a:6c:58:53:23:c3:53:2f:5d:29:a3:5e:ff:db:b0:18:
         13:af:1f:b8:7a:6c:a3:fc:fe:1b:4e:19:3e:3e:7c:90:a3:93:
         be:95:82:b0:96:b7:36:3e:4f:76:dd:d7:2a:11:7b:8f:ec:7e:
         31:d5:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:41:35 2025 by rpki-client