Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File:                     iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier:          XwdbgFNJn4v/yVD5e06akatuQCpS8PhRMT2lhK4kpWU=
Subject key identifier:   21:9F:4E:07:46:56:32:F4:F8:A4:5C:59:B2:BB:B7:16:20:EB:85:5D
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       0EB5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number:          0EA9
Signing time:             Wed 17 Sep 2025 00:57:24 +0000
Manifest this update:     Wed 17 Sep 2025 00:57:24 +0000
Manifest next update:     Fri 19 Sep 2025 00:57:24 +0000
Files and hashes:         1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: yezEZIsQJ0HIDvk7jI0WujRfTF6Zdo0tPl6wuGiPMtU=)
                          2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
                          3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
                          4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
                          5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
                          6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
                          7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 00:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3765 (0xeb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: Sep 17 00:57:24 2025 GMT
            Not After : Sep 19 00:57:24 2025 GMT
        Subject: CN=68ca0774-56a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:0f:66:26:0e:64:72:d5:bb:8c:52:2f:67:
                    01:32:02:33:57:8a:af:55:33:d7:6c:ca:5d:8c:b6:
                    6e:75:c6:d2:bb:ed:91:b9:62:4b:8a:d7:2c:2a:23:
                    ec:17:2f:7b:99:82:ef:f6:b7:ab:82:42:eb:ee:f4:
                    79:4a:a3:6d:f5:54:5a:78:4c:70:63:7f:65:39:29:
                    f9:e7:fd:85:3a:0d:16:81:18:7b:8d:4f:c7:f9:c4:
                    c9:de:f4:b2:65:ca:25:ca:28:9d:98:02:f3:52:39:
                    1b:6b:05:88:1a:2b:3b:ff:39:ad:bf:35:27:3f:8f:
                    bc:10:15:f5:0c:7a:e3:6f:f6:69:7c:9b:4e:5c:7a:
                    b5:6c:57:5a:1e:b4:af:7b:13:94:eb:0b:15:25:16:
                    28:f7:90:92:a6:de:7b:4d:6b:24:3e:c0:ce:77:84:
                    aa:18:bc:ed:e1:20:0e:b1:41:53:5c:f1:2f:53:5f:
                    e2:9e:8e:94:7d:c6:a0:52:4f:c8:59:cf:48:c2:5f:
                    06:a0:da:7b:20:3a:44:9d:b5:80:16:3a:c0:35:68:
                    71:1a:07:65:1b:a8:bd:34:95:9f:0e:a2:47:7c:82:
                    28:0d:15:36:ae:72:5b:ca:f1:b5:43:8a:8c:ed:be:
                    7f:24:c3:6c:e8:5f:61:b9:3b:56:d5:bb:bc:e1:a1:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9F:4E:07:46:56:32:F4:F8:A4:5C:59:B2:BB:B7:16:20:EB:85:5D
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:6c:de:2b:36:8c:d4:9c:09:9a:63:21:24:45:65:bc:af:
         10:ff:c0:04:2c:53:72:6c:7b:2e:e0:bb:24:ba:47:77:dc:07:
         11:d1:cf:e3:6c:7a:ed:57:3a:07:11:36:89:6a:57:f8:ef:b8:
         3c:bd:6d:f6:fc:72:92:69:26:be:1a:61:cd:94:d8:93:b9:87:
         8f:40:7b:b8:33:b7:1c:d3:10:ba:d2:17:c2:ee:a9:13:0b:24:
         43:4c:e4:00:f0:bf:b7:f7:94:f2:dd:6a:3b:cd:37:38:b4:06:
         d5:5a:8b:d6:c8:d6:cb:0a:a4:bc:00:00:9f:56:92:1b:a1:c8:
         fe:9d:17:eb:33:3c:3c:44:e0:ad:d3:65:17:71:b9:67:75:fd:
         9a:18:70:5c:c0:38:76:75:50:4e:26:87:b8:c9:78:14:54:8c:
         89:d8:8e:9d:48:8d:6e:dc:19:76:a3:c4:60:32:7e:40:22:91:
         33:77:2d:92:27:45:c0:47:82:c8:cc:1e:e6:50:3e:27:87:1a:
         82:e3:75:14:99:54:dc:e3:ef:51:6c:e5:30:c9:85:b4:f6:aa:
         3e:0e:54:bf:d3:49:98:02:12:41:22:97:f7:75:3e:4a:89:24:
         e8:f0:a0:f6:e1:16:62:02:d2:89:cd:36:77:46:7f:7b:15:7a:
         29:97:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:30:31 2025 by rpki-client