Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
File:                     YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft (raw, json)
Hash identifier:          PRJSGbnVgHwuyK2WV27UexdNIwioBbA8Ja02HQmYzFY=
Subject key identifier:   FD:2A:4F:3C:7F:A4:63:D8:A0:C3:F5:C5:B9:91:EC:57:9E:9C:DB:E7
Authority key identifier: 60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC
Certificate issuer:       /CN=F36426B7AF/serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
Certificate serial:       51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
Manifest number:          51
Signing time:             Thu 31 Jul 2025 05:27:40 +0000
Manifest this update:     Thu 31 Jul 2025 05:27:39 +0000
Manifest next update:     Sat 02 Aug 2025 05:27:39 +0000
Files and hashes:         1: YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl (hash: UCvQpIY63zkElRcPbsdzV/y0G7c2FPE7HqiZiq0yqD8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36426B7AF, serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
        Validity
            Not Before: Jul 31 05:27:39 2025 GMT
            Not After : Aug  2 05:27:39 2025 GMT
        Subject: CN=688afecc-afab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:62:9d:a5:91:af:e5:ca:7a:6a:38:4a:c1:
                    5a:92:2f:1b:15:3a:e2:6c:a4:12:bb:c1:7d:c0:6d:
                    e3:a4:7b:b7:5e:72:18:57:f5:aa:e4:7b:62:f8:56:
                    c2:cd:de:51:57:0f:80:72:c6:49:9a:19:dd:e7:c9:
                    80:0d:b2:00:3c:a2:09:10:c6:44:44:ce:0d:b4:0d:
                    fe:59:1d:21:e9:74:24:2e:a0:55:68:95:bf:eb:6c:
                    d3:c4:58:ee:9c:d3:f0:13:cb:af:c9:e9:d8:2d:3e:
                    35:06:8c:d0:d9:5a:be:3d:b9:af:8a:18:1f:8b:06:
                    cd:cf:89:72:42:de:89:7f:73:e3:ac:b9:66:b1:7c:
                    f2:77:c2:ac:ae:49:68:a3:1b:4c:94:60:65:02:c8:
                    56:61:e1:bb:07:97:b9:80:07:9c:0c:1f:44:92:91:
                    36:5c:50:52:a6:55:a3:7f:cd:be:f5:fb:78:19:96:
                    ee:f4:14:a0:32:d3:b2:33:c7:f6:9d:57:d3:e5:c7:
                    b1:7a:aa:6b:c4:fe:9b:1d:5c:e6:d9:72:24:53:53:
                    02:da:92:01:c6:f3:f1:b5:c7:26:ed:af:25:a7:f8:
                    7e:f1:90:58:7b:82:6d:11:29:8b:6a:52:a8:80:2c:
                    3d:ed:d4:59:af:0a:5e:38:b3:7a:d5:8c:be:7a:0b:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2A:4F:3C:7F:A4:63:D8:A0:C3:F5:C5:B9:91:EC:57:9E:9C:DB:E7
            X509v3 Authority Key Identifier:
                keyid:60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:72:78:05:2f:bc:39:1c:ac:05:c6:18:6e:60:9f:81:9e:01:
         e1:e2:14:94:37:41:99:ef:72:95:24:94:e0:93:5e:1d:5d:bd:
         b8:ad:4d:98:18:b9:31:e0:42:60:47:ad:dc:25:ab:76:3c:77:
         66:fe:12:0a:79:b3:35:a1:ed:13:f7:14:7a:86:c8:43:8c:46:
         72:34:7a:dc:47:8a:60:cc:8c:dd:4b:28:55:0c:7c:b1:90:a5:
         f2:ed:00:0f:ab:a0:b4:73:3d:db:ab:a9:a8:a7:24:65:71:e4:
         e2:42:f3:4c:4d:68:c0:e7:03:b7:13:99:b1:14:0f:ce:a9:1f:
         8b:06:24:e9:36:ad:ba:f1:d8:45:62:83:4d:a7:92:f4:b8:91:
         cd:51:dc:34:e4:51:0d:8e:ea:5a:ed:2e:bb:5f:46:4f:fc:4f:
         7a:12:74:c0:c4:64:aa:ea:0d:e9:43:f8:d5:83:4c:95:95:c6:
         03:19:ca:e3:32:97:76:66:d5:e4:69:ea:20:47:78:ef:97:f5:
         42:64:74:22:83:a2:30:b4:bc:f2:4f:8c:8c:6b:d9:cf:d1:4c:
         5f:78:6d:c4:5e:10:62:f5:2c:12:b2:8b:fa:79:d1:dc:e9:dc:
         46:3f:45:0a:00:c2:23:7c:2d:41:08:d4:cb:e7:7b:9d:f7:55:
         4c:30:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:20:04 2025 by rpki-client