Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          e/N2+GwBC0991IKymO/iESsDWQaGap2//OeC8X9QdIY=
Subject key identifier:   60:06:FF:76:C0:65:6E:99:21:88:F7:8A:C6:A1:2C:86:97:57:6D:3D
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       02AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          02AA
Signing time:             Wed 17 Sep 2025 03:56:31 +0000
Manifest this update:     Wed 17 Sep 2025 03:56:28 +0000
Manifest next update:     Fri 19 Sep 2025 03:56:28 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: rFuerOzvKMFnRf6hnG/vkABGVK+DoaJ9XriEdchDu3Q=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF, serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Sep 17 03:56:28 2025 GMT
            Not After : Sep 19 03:56:28 2025 GMT
        Subject: CN=68ca316f-bbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:cb:3d:ff:19:80:6c:e7:7e:e9:74:b5:75:
                    59:12:c7:f5:10:2b:11:6d:1a:77:b5:28:a2:e5:ea:
                    be:f7:e2:ef:66:77:52:86:56:0e:9d:a4:bc:e3:a6:
                    b9:f5:66:9c:fa:94:aa:11:a8:49:3e:67:b3:ef:b8:
                    2d:cc:8c:2c:71:58:00:86:f2:ef:f7:45:d5:46:8a:
                    1b:81:3d:92:df:95:70:0c:49:ca:42:42:6d:25:c8:
                    87:00:21:ce:83:7f:5f:b3:76:e3:1b:09:cc:4d:b6:
                    23:41:04:93:17:68:23:d3:d2:3f:81:1b:6b:cf:20:
                    21:09:71:32:6f:f6:d6:88:b0:d0:d6:18:25:28:85:
                    3f:6e:16:ee:fd:24:ad:0c:4a:2a:bf:3a:4e:e0:98:
                    f7:c3:26:52:ad:0e:37:93:e3:e7:98:1f:ce:17:f7:
                    4a:e9:63:8c:04:7e:ee:a8:93:a2:bb:79:bb:3d:10:
                    c7:eb:b2:25:74:27:84:06:58:12:d3:93:a1:bf:76:
                    f3:dc:4d:d1:91:b7:e9:ce:21:58:55:ca:9f:2e:ba:
                    e4:ba:63:df:e3:5f:a0:db:8b:80:62:91:ea:d6:e1:
                    9c:ca:47:64:d8:40:33:b7:2d:b2:0f:f3:05:85:b6:
                    65:e9:82:a6:09:12:9b:b1:83:2f:55:01:ad:f2:41:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:06:FF:76:C0:65:6E:99:21:88:F7:8A:C6:A1:2C:86:97:57:6D:3D
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:de:44:1d:6b:72:9b:50:c2:16:7e:97:53:9a:1d:18:c1:d5:
         9f:69:16:8f:c6:cc:fa:b1:be:2e:d5:0f:55:b8:6e:a6:31:00:
         8c:a2:2c:5e:f1:33:72:2c:79:2e:c1:52:23:f6:e1:93:f5:00:
         e4:c5:f8:77:6d:56:89:83:86:ad:54:c2:96:b5:52:be:59:83:
         39:3a:52:5c:ea:2a:e0:da:c8:f4:ff:25:3f:f6:a8:d7:8f:b1:
         e3:49:6a:d3:54:b7:c1:ec:9f:8f:f6:b1:d2:e4:e7:96:cc:1c:
         40:0d:30:8f:0b:db:19:d4:12:c4:53:f8:c2:30:2f:35:cd:db:
         e9:42:fa:d7:58:06:90:ad:3a:63:0c:97:c3:77:41:b4:9e:f3:
         6c:1b:36:ae:03:e0:64:79:e8:93:fe:4f:03:7b:f7:a6:33:79:
         09:f7:55:bd:42:a5:64:9a:9b:1a:e5:f4:5d:5f:8a:5c:8f:3e:
         80:fe:b0:f1:c9:b0:0e:1f:bc:7e:84:22:c6:6d:8f:6b:9f:4a:
         c2:46:35:cf:57:e4:45:ed:63:e0:1e:2d:9a:a0:a0:50:b2:c9:
         50:bb:76:90:3e:72:d4:5c:06:70:b7:54:8f:f1:f8:a6:ff:a1:
         99:15:34:73:4d:45:d8:ea:58:b3:de:f8:21:70:f1:9e:1a:d9:
         ce:d7:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:31:12 2025 by rpki-client