Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
File:                     Y-C7azQzzV1xpCsBab2wHiDkVX8.mft (raw, json)
Hash identifier:          jUo6NX6fRnDkWRMetIMpBoD+SR2POyRxz9HvHGs1ois=
Subject key identifier:   56:23:89:10:30:BC:41:0E:26:0C:C3:66:E6:10:9C:1E:16:D9:5F:2F
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       069E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
Manifest number:          0688
Signing time:             Wed 17 Sep 2025 02:07:27 +0000
Manifest this update:     Wed 17 Sep 2025 02:07:27 +0000
Manifest next update:     Fri 19 Sep 2025 02:07:26 +0000
Files and hashes:         1: Y-C7azQzzV1xpCsBab2wHiDkVX8.crl (hash: 0oCIwxv3oMXEwCBjYSOk/kGm5glCTOw9oCaIgJNkwNo=)
                          2: 022F32CA9CCB11EFAAC38E52762E951A.roa (hash: rD0syBKiL7c261Mu8WhV/kxThDTjGQI8fG8xABHRfiA=)
                          3: 1D6B7FA0CCFD11EFBF8BB796762E951A.roa (hash: d0Rz+8diHIGN4O10U8x5EdoQVb2OPGuluExTgAwtQuM=)
                          4: 82F1436CCCFA11EF98386986762E951A.roa (hash: WFETggbNMlIPJwzATTFNhe/4NNL01rzgeTk5fQnvT8o=)
                          5: 3E5CAEF89CCB11EF96936E54762E951A.roa (hash: NaL+5IqvHfzKEob4MeRapqEPczk8TUD17OZ5TfT8Nj0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Sep 17 02:07:27 2025 GMT
            Not After : Sep 19 02:07:26 2025 GMT
        Subject: CN=68ca17df-ec33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:9e:3b:4e:a1:db:fb:ae:c9:35:0f:3d:37:
                    57:46:79:88:cc:41:51:e5:4c:dc:74:79:f3:c3:71:
                    45:45:53:b8:e8:c3:d2:df:29:78:aa:8f:b8:72:fc:
                    6b:ee:89:13:a4:6f:b7:e8:e2:b1:01:42:df:e8:a6:
                    25:c9:eb:ff:a4:88:e5:43:51:6f:97:c6:00:81:6f:
                    d1:07:7c:eb:ca:c9:e9:a9:f1:ba:ff:86:13:cc:c7:
                    e4:ed:0e:3b:23:51:74:06:44:dc:11:ff:f8:5e:c9:
                    59:c7:6f:a1:c5:29:56:19:52:55:41:fd:15:30:22:
                    98:83:1d:34:ec:36:f5:91:53:32:25:af:4b:58:36:
                    be:9e:e5:38:b7:0a:bd:91:8e:3d:ee:a3:d8:f0:35:
                    89:1c:9e:8f:32:93:3c:f9:9e:22:27:2a:7e:a2:16:
                    d2:59:a9:bc:8d:54:66:eb:cf:d3:bd:26:15:b7:0b:
                    56:42:a6:34:e0:8c:5c:b8:2f:e5:31:6a:d5:ea:7c:
                    cf:ca:1a:d9:53:df:03:f5:67:bc:0e:82:87:e0:1c:
                    d4:d9:49:62:24:b6:14:bb:70:63:ca:b2:f5:03:1f:
                    23:b4:8b:af:0a:5d:d2:a7:2b:1e:51:24:b1:2e:5a:
                    bb:94:39:32:54:4c:c3:37:20:36:47:96:2a:08:f7:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:89:10:30:BC:41:0E:26:0C:C3:66:E6:10:9C:1E:16:D9:5F:2F
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:d5:90:c8:2c:6a:67:44:8f:24:a5:4a:b3:51:3b:be:a8:
         69:a7:f1:22:df:38:4b:0a:52:f3:ee:65:2a:8c:a1:1d:d9:17:
         a4:99:d4:ae:1a:0f:fe:1f:10:70:df:f3:75:84:8e:f1:ff:9c:
         a7:52:f7:6f:01:7c:1a:a2:f1:bb:d9:2f:43:25:19:36:b3:b5:
         2f:d2:62:26:1f:83:c0:6d:99:a6:d7:f3:0a:5e:70:83:13:d3:
         39:58:08:2d:c9:d2:f4:3e:14:94:76:71:8d:2d:3f:e9:36:6b:
         bf:0c:e6:b0:ad:9e:ca:53:19:95:17:ae:6f:45:79:11:95:5b:
         f9:17:48:1f:6d:8d:04:50:4d:d7:46:74:74:fb:8b:0d:3f:0a:
         55:65:11:c7:ea:44:e2:8a:b2:af:6b:ce:2f:2b:66:05:ed:2c:
         56:3b:f6:3a:ca:f0:68:1d:82:8d:b9:d4:19:1a:83:cc:fa:9a:
         31:53:5d:54:1f:fe:30:e3:72:25:78:dc:1e:00:fa:1f:83:92:
         4d:f2:13:ee:d6:66:36:fc:34:dd:29:f0:18:5d:9d:08:84:99:
         ff:43:f7:38:6a:71:4f:f2:de:41:f3:a7:18:23:63:10:39:9a:
         bf:da:ac:8b:37:1b:5e:86:32:27:ba:07:9c:a9:86:1c:89:35:
         08:e8:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:33:27 2025 by rpki-client