Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier:          NX8Yu3LhpXax0Ive49GWE4zoKeVo+8TvbkKU654zCpU=
Subject key identifier:   BA:70:B3:D6:E8:33:36:6C:31:55:37:23:25:12:0A:3C:47:D7:D2:C0
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer:       /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial:       07F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number:          07F1
Signing time:             Tue 16 Sep 2025 01:45:49 +0000
Manifest this update:     Tue 16 Sep 2025 01:45:48 +0000
Manifest next update:     Thu 18 Sep 2025 01:45:48 +0000
Files and hashes:         1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: u+D+OP7Y/GzegDqJI/67aNJMCfzsbai5DYdntTMHTV0=)
                          2: 24B727805CBA11F0A0DBD87DDAE4EC9C.roa (hash: URhpC1wmpxyjiKTCACXMGSDga5+OKiFUmrZJhnhMHo0=)
                          3: 413B19025CBA11F0B3AC387EDAE4EC9C.roa (hash: huhnDHM3c28d4RK7MjVi9V09R1xz37R9RDv4groETcU=)
                          4: AE18FBD67CA911EEB6D3DD404AD9E6FC.roa (hash: EUXpIG95DQgNgpSPlS78r4ZPbIQJ7nP3j1DIht+45k0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Validity
            Not Before: Sep 16 01:45:48 2025 GMT
            Not After : Sep 18 01:45:48 2025 GMT
        Subject: CN=68c8c14d-f68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:dd:3f:ef:21:f3:18:ee:31:8c:8c:58:e8:
                    d5:e6:4c:f9:b9:05:37:59:9f:5e:a3:6b:4b:7e:9e:
                    7b:39:1c:e1:fd:10:5a:17:27:65:d1:dc:30:01:d0:
                    f1:8b:78:e4:58:b8:73:c1:3e:12:db:91:80:9d:2c:
                    7f:c9:ab:5a:53:1b:33:6f:d5:c9:1f:1a:78:3a:0c:
                    b7:0d:e6:60:52:68:58:70:e2:3f:c5:b4:47:41:f1:
                    d9:5e:f8:b5:55:b3:4e:0b:33:47:98:ae:fc:e3:3e:
                    c7:39:67:0b:34:3d:14:f3:89:5c:f9:7c:f0:f2:9e:
                    d2:6e:f7:86:14:a2:5a:2c:e0:1b:c2:c8:0e:7e:84:
                    7a:0c:d9:ce:aa:52:7e:0b:cc:78:df:58:e4:cb:cf:
                    ef:a5:36:37:a7:ae:59:78:82:1b:62:31:9c:65:08:
                    d7:6f:35:9b:e5:40:37:2d:e8:78:1b:c3:aa:46:b7:
                    fb:ff:a1:0e:cf:89:e3:a6:f5:e5:05:f7:57:20:0b:
                    01:3a:da:ea:36:c1:8a:cd:71:d2:60:5c:39:8d:6e:
                    c8:79:30:ea:fa:0b:80:21:af:96:6e:c2:b8:7b:ee:
                    21:a2:e2:ae:ce:70:a3:99:fe:3d:b9:a6:ed:37:eb:
                    84:d8:72:68:e7:69:1a:de:9a:72:13:b3:53:18:5c:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:70:B3:D6:E8:33:36:6C:31:55:37:23:25:12:0A:3C:47:D7:D2:C0
            X509v3 Authority Key Identifier:
                keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:be:f0:8b:96:6c:66:7a:03:39:61:86:96:e7:f2:65:34:
         0f:37:d5:d6:8e:f9:cd:49:ff:31:d4:05:ee:73:d2:38:50:2e:
         4e:a5:32:60:0c:8d:0e:bc:12:09:76:b8:b2:80:6e:b9:8e:34:
         4c:8d:c9:94:e5:d8:f0:69:db:39:79:bd:d1:9e:35:5c:f0:a6:
         39:da:43:a8:cb:26:32:e1:1d:58:81:28:cb:58:3c:56:30:3a:
         f3:49:06:a9:31:98:e6:6b:c9:5a:6b:64:7a:47:f2:ab:97:06:
         15:dd:3e:b9:18:2e:7e:23:35:0e:09:76:9d:97:98:dd:bb:35:
         e8:31:db:37:62:17:97:2d:c2:fb:11:9d:73:cc:93:67:04:c6:
         1a:96:00:04:fb:a2:08:12:9e:11:e1:28:2c:06:c5:02:cf:b1:
         28:5f:15:c3:7d:5c:6a:71:71:6d:bb:ae:4b:e2:da:3a:82:7c:
         09:3c:d5:ec:e1:e2:d3:4d:94:59:ff:c9:7f:f7:ee:3f:df:12:
         6a:13:37:43:af:e2:27:90:78:c3:da:27:be:c9:36:7a:c2:30:
         00:fc:d8:75:e9:02:9f:d4:50:83:57:d3:1f:e0:5b:33:da:e8:
         a1:f9:e0:d7:f3:ee:5c:27:82:aa:73:84:b7:8b:68:a9:d3:ae:
         43:cc:b3:9b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjNDRUVBRjExMC8GA1UEBRMoQ0I4ODU4NzUyN0IzODM5MTZDQzBCMUQ4ODY2NjUz
QzMzNDMxRTQ1RDAeFw0yNTA5MTYwMTQ1NDhaFw0yNTA5MTgwMTQ1NDhaMBgxFjAU
BgNVBAMTDTY4YzhjMTRkLWY2OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0IN0/7yHzGO4xjIxY6NXmTPm5BTdZn16ja0t+nns5HOH9EFoXJ2XR3DAB
0PGLeORYuHPBPhLbkYCdLH/Jq1pTGzNv1ckfGng6DLcN5mBSaFhw4j/FtEdB8dle
+LVVs04LM0eYrvzjPsc5Zws0PRTziVz5fPDyntJu94YUolos4BvCyA5+hHoM2c6q
Un4LzHjfWOTLz++lNjenrll4ghtiMZxlCNdvNZvlQDct6Hgbw6pGt/v/oQ7PieOm
9eUF91cgCwE62uo2wYrNcdJgXDmNbsh5MOr6C4Ahr5Zuwrh77iGi4q7OcKOZ/j25
pu0364TYcmjnaRremnITs1MYXHH1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUunCz
1ugzNmwxVTcjJRIKPEfX0sAwHwYDVR0jBBgwFoAUy4hYdSezg5FswLHYhmZTwzQx
5F0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYzQ0VFLzFGQkM0NDIwODNCRTExRUE4QTY1QjczMEY4QUVBMjI4L3k0aFlk
U2V6ZzVGc3dMSFlobVpUd3pReDVGMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3k0aFlkU2V6ZzVGc3dMSFlobVpUd3pReDVGMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjNDRUUvMUZCQzQ0MjA4M0JFMTFFQThBNjVCNzMwRjhB
RUEyMjgveTRoWWRTZXpnNUZzd0xIWWhtWlR3elF4NUYwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbHL7wi5ZsZnoDOWGGlufyZTQPN9XW
jvnNSf8x1AXuc9I4UC5OpTJgDI0OvBIJdriygG65jjRMjcmU5djwads5eb3RnjVc
8KY52kOoyyYy4R1YgSjLWDxWMDrzSQapMZjma8laa2R6R/KrlwYV3T65GC5+IzUO
CXadl5jduzXoMds3YheXLcL7EZ1zzJNnBMYalgAE+6IIEp4R4SgsBsUCz7EoXxXD
fVxqcXFtu65L4to6gnwJPNXs4eLTTZRZ/8l/9+4/3xJqEzdDr+InkHjD2ie+yTZ6
wjAA/Nh16QKf1FCDV9Mf4Fsz2uih+eDX8+5cJ4Kqc4S3i2ip065DzLOb
-----END CERTIFICATE-----
Generated at Wed Sep 17 00:53:00 2025 by rpki-client