Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          ku3P0V7BXlYbtcApvxlmJcaj16zWuuMMV/rEss9yuLQ=
Subject key identifier:   59:2E:56:B3:5E:14:EB:52:C2:51:BF:C2:98:FF:EF:68:90:51:EB:3B
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       0526
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          0525
Signing time:             Sun 27 Jul 2025 02:48:25 +0000
Manifest this update:     Sun 27 Jul 2025 02:48:25 +0000
Manifest next update:     Tue 29 Jul 2025 02:48:24 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: iyLiJX/dwTnP5C/+TCfpHtXOhx4UW8A1tHen8jOQB/k=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Jul 27 02:48:25 2025 GMT
            Not After : Jul 29 02:48:24 2025 GMT
        Subject: CN=68859379-3e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:3b:3b:df:68:92:c0:e8:ea:3e:0e:68:05:
                    9d:67:3c:1d:ad:a4:cd:a2:1c:76:61:d1:81:53:b5:
                    b5:59:59:bd:71:ce:dd:40:4d:70:05:f2:b7:49:60:
                    fd:c3:8f:d7:c8:46:86:5a:e5:a2:fd:e8:fb:ed:39:
                    a8:6e:48:d9:11:aa:2f:b3:eb:69:6a:fd:25:11:9a:
                    ae:34:1c:0d:71:35:8a:c6:30:c2:88:48:0b:83:16:
                    62:c4:89:9c:4c:e9:d4:d4:3d:a9:ea:9c:9a:40:45:
                    25:24:fb:50:77:81:e8:02:f0:61:a5:62:bd:6d:b2:
                    12:40:35:89:4b:c6:9b:df:2c:a2:d2:4c:8e:4d:15:
                    77:be:27:38:b4:e6:85:3f:cf:28:05:35:8b:a9:9c:
                    c6:75:db:e4:a0:8a:36:76:f6:75:b2:7b:5e:6e:8b:
                    88:d8:c9:e1:45:ce:39:43:94:36:85:bc:e9:71:6a:
                    51:f2:6c:26:f3:92:58:6a:fe:6a:5d:98:4f:f3:62:
                    55:ed:03:fc:4f:9f:08:50:09:51:3a:c6:d4:26:10:
                    01:96:ac:56:98:46:14:fa:2f:b2:31:10:4a:76:6a:
                    7c:7c:dc:41:e6:27:1b:eb:1b:70:d6:b1:10:b8:72:
                    ca:34:54:ce:d6:f3:7f:7a:08:22:8c:e6:3f:4e:5e:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2E:56:B3:5E:14:EB:52:C2:51:BF:C2:98:FF:EF:68:90:51:EB:3B
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:01:ad:04:8d:14:4d:e1:d3:cd:ae:37:ae:07:9f:ad:85:23:
         57:be:f8:2e:27:2c:bd:2d:f8:c6:e9:14:07:8e:6e:31:40:f0:
         d9:ce:99:ff:7d:24:64:54:04:5a:86:ed:b4:bc:3c:60:bc:19:
         36:58:26:a9:af:78:e3:c7:e1:66:18:bf:7c:d9:19:11:4f:5f:
         64:d0:2e:22:ed:e3:71:a6:d8:24:09:1a:71:59:a3:a1:4d:0d:
         6a:ca:9d:b1:c2:95:e0:3e:d2:d5:81:09:03:4c:84:c2:3b:b1:
         29:09:91:cd:83:9a:17:a6:2d:5b:5e:c8:07:25:3e:3e:6a:a8:
         c9:9d:41:dc:9b:34:11:2a:0d:82:5f:14:e5:d8:e1:2d:11:5e:
         b0:88:39:fa:58:6c:21:75:8f:82:4b:ae:2f:0f:b3:38:52:10:
         ac:c3:74:75:f8:76:6f:0a:cc:49:ed:8e:71:65:7e:ed:c5:75:
         d8:53:47:17:b4:58:68:90:1e:fe:75:c8:09:0a:58:d9:d8:e3:
         84:91:e9:52:36:6b:16:a8:62:db:78:ff:a9:f2:23:a2:bf:6c:
         80:95:32:fa:9f:1f:32:2e:cd:96:03:2a:1b:83:f9:28:b7:2a:
         f4:86:8a:f4:69:20:db:13:6a:67:19:e1:58:31:86:cb:2f:07:
         9f:3d:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:58 2025 by rpki-client