Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File:                     ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier:          /+Enu4D9IV7FgX8Il+3TL51xk5DbBqvwCSRw8rFb5bw=
Subject key identifier:   93:76:B1:9B:D5:E8:0B:6B:13:9D:8B:D7:43:8D:CB:70:A5:57:FC:CD
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer:       /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial:       0868
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number:          0866
Signing time:             Sun 27 Jul 2025 01:43:31 +0000
Manifest this update:     Sun 27 Jul 2025 01:43:30 +0000
Manifest next update:     Tue 29 Jul 2025 01:43:30 +0000
Files and hashes:         1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: ikyYjFFD/IBsehI93IOeXmdy8qM5JyjGPQOFrWdCQY8=)
                          2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
                          3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
        Validity
            Not Before: Jul 27 01:43:30 2025 GMT
            Not After : Jul 29 01:43:30 2025 GMT
        Subject: CN=68858443-4fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:ef:75:d6:69:77:11:2a:4a:79:1b:4b:7b:
                    0f:0f:b2:6a:40:63:42:66:54:ce:1e:e7:70:17:a9:
                    dc:d5:fa:2b:e9:fb:67:7d:30:6b:50:43:a2:ff:da:
                    79:cc:2e:99:60:c4:e4:45:28:d2:d8:42:e4:37:c4:
                    56:70:81:0e:24:bb:e4:41:9e:eb:4f:23:1c:67:65:
                    2d:1a:69:c0:aa:04:87:5f:27:71:0e:3c:60:20:b4:
                    86:5b:37:af:fb:f4:14:de:65:12:37:91:ea:92:6c:
                    5e:ee:0c:58:68:15:c0:dc:93:bc:26:34:1d:ea:40:
                    a3:b8:d6:26:65:71:cb:de:61:cb:ef:38:c8:7a:f4:
                    1c:98:1c:44:7d:39:a8:6c:81:5f:3e:a5:04:44:20:
                    63:cd:31:92:4f:5d:2f:d0:8f:2b:c6:ea:60:75:53:
                    87:4b:9d:10:0b:1c:6e:7f:5b:e8:b5:af:da:b0:f3:
                    38:92:59:d2:f0:bd:32:2c:9f:a4:5b:b9:9f:d4:dc:
                    da:d3:15:9e:59:64:82:71:cb:30:ca:7c:9f:2e:8d:
                    cf:ee:73:c8:79:12:63:42:7e:ef:d8:47:34:3b:ee:
                    e8:31:cd:5a:5f:55:95:f5:fe:a9:cc:19:73:00:92:
                    0d:08:2e:81:ec:5c:46:0f:a5:95:1a:38:0a:9a:67:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:76:B1:9B:D5:E8:0B:6B:13:9D:8B:D7:43:8D:CB:70:A5:57:FC:CD
            X509v3 Authority Key Identifier:
                keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:06:81:c7:13:06:15:1f:1d:e3:5c:16:26:96:33:f9:a0:44:
         ca:67:9c:11:e5:9d:6a:2a:69:e3:55:bd:8b:0b:55:a1:35:1b:
         58:7a:a1:bb:b5:75:ac:0d:34:17:9f:92:a3:3c:7b:bb:8f:f2:
         2d:57:a0:dd:d4:5b:7d:b4:b0:fb:cf:97:ae:b2:ce:be:51:da:
         7f:9b:52:2d:71:dd:82:0a:8b:70:b8:ee:3e:e3:ee:7e:ea:a3:
         f9:6b:cd:e9:e1:c4:6f:ce:3b:4b:82:fe:6a:da:bb:47:91:da:
         2c:a3:a3:a6:fb:b4:1a:94:0a:d8:30:38:77:0f:af:89:7e:c9:
         4b:6c:48:5b:a4:ca:21:f4:17:a1:77:cd:05:b4:a1:3d:9b:5a:
         37:51:6f:65:43:ba:69:cf:79:4a:69:2b:11:c9:0c:a5:f6:04:
         06:1d:6d:1d:ed:f9:46:6a:ce:e8:24:09:16:39:dc:d5:75:3d:
         f4:95:de:d0:1a:b8:6a:14:ef:15:ac:80:bb:05:d6:f0:8f:e8:
         f6:77:11:37:d4:91:bb:7a:96:1b:a4:2d:bf:3f:2b:7b:f5:f0:
         d1:61:bd:8f:10:8d:0f:c9:92:5e:1f:66:44:16:92:b3:b9:cd:
         45:18:c8:cb:fa:0d:56:47:71:46:b4:93:9b:af:9b:ac:e3:10:
         20:76:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:45:05 2025 by rpki-client