Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File:                     yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier:          B1iYaCn7LpujCxrbcOUd3348VuVbKOP0KyyGd5twijg=
Subject key identifier:   1B:9E:81:C1:7B:D0:3C:0D:7D:A5:8D:84:A4:C9:C9:9D:01:A9:A9:0A
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       0956
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number:          094F
Signing time:             Thu 31 Jul 2025 01:21:53 +0000
Manifest this update:     Thu 31 Jul 2025 01:21:52 +0000
Manifest next update:     Sat 02 Aug 2025 01:21:52 +0000
Files and hashes:         1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: tlEFFA1woJrDbqCphUoPJ6QP54cbvavFzbEXHUhrv5I=)
                          2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
                          3: 04605838361A11F0B9F961F3DAE4EC9C.roa (hash: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=)
                          4: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
                          5: 32FAEFC2361B11F0B2EA437CDAE4EC9C.roa (hash: 22FqTrSwm7BxiKIiscjIzYYBmw1MfLawSBgcnxT4pB4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390 (0x956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Jul 31 01:21:52 2025 GMT
            Not After : Aug  2 01:21:52 2025 GMT
        Subject: CN=688ac531-c970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:77:25:cc:b3:18:1e:94:ea:1e:22:1f:c1:eb:
                    99:5a:c2:c3:c2:d4:6f:28:76:fa:37:bc:ea:16:e2:
                    b9:79:4b:4f:0e:d4:a9:24:8a:b4:12:9a:8d:e4:18:
                    e5:7c:e4:78:9c:1e:7a:8b:33:7d:ed:b6:95:d0:fe:
                    59:72:c5:8b:3c:4f:7b:27:77:c2:e0:39:bf:54:22:
                    71:47:c3:8a:78:a6:44:ad:4c:99:98:dd:06:ac:78:
                    a4:32:9e:cd:b6:45:26:05:2c:f8:71:dc:61:6b:67:
                    ca:38:13:9f:c6:c4:d8:09:cd:e0:0b:c4:26:c0:8e:
                    65:20:e2:8c:14:ff:76:20:45:fd:a3:58:84:15:c7:
                    80:6d:ba:c8:25:ea:51:ae:33:d3:3a:4d:d1:51:7c:
                    4b:85:27:a5:f4:5f:21:30:f4:99:ca:61:e8:35:d9:
                    ec:06:53:02:43:dc:ec:4b:6e:64:43:b5:d0:ff:f3:
                    a6:bc:dc:e7:c7:4b:ab:f9:37:57:2b:f0:c9:95:d7:
                    30:02:67:6a:37:45:73:8c:84:7d:3c:26:2e:46:58:
                    7d:1e:69:15:88:f6:ec:c1:49:77:1b:95:80:19:24:
                    fb:16:27:cb:e6:26:88:4f:a7:7a:25:83:b7:f7:1e:
                    7e:38:69:17:e5:ab:3e:be:5f:1d:87:fd:b5:29:1d:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9E:81:C1:7B:D0:3C:0D:7D:A5:8D:84:A4:C9:C9:9D:01:A9:A9:0A
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:ed:4e:d2:ee:ca:3c:40:43:65:92:0e:c4:d4:09:94:1c:
         cd:31:3a:b1:20:ff:b8:5a:0d:98:3e:8a:ff:e0:10:09:a0:2e:
         b6:f6:3f:1b:58:05:00:fb:fa:e0:69:95:90:4b:ae:d4:81:ba:
         d3:64:7c:d9:4d:8e:2c:09:52:59:3e:0e:a5:33:de:d9:01:5b:
         aa:86:b1:d4:e2:47:b8:29:2a:b9:38:8b:ff:97:35:a8:80:44:
         c3:b4:90:cd:ff:ee:9a:38:e0:87:d8:33:43:be:e8:2f:20:85:
         98:a2:12:0e:00:e7:e2:3b:55:8f:7e:18:97:7a:a7:04:74:79:
         b4:7e:66:49:cb:4b:98:09:4f:15:74:af:37:7a:96:a2:c5:44:
         f6:c8:1e:8c:c4:66:1f:ab:a4:a1:7a:94:f9:12:08:f9:c1:b8:
         75:4c:75:da:6c:5f:9b:2a:ca:07:cb:ff:ab:42:66:e1:50:04:
         c0:42:09:a3:f8:bf:38:33:4b:83:c0:35:04:d0:31:54:d5:3f:
         3e:98:0f:54:1f:68:5f:2c:4b:2d:ac:08:da:2b:aa:d0:18:40:
         a0:f0:31:d9:b4:bd:a1:37:d6:4f:d9:02:01:4f:36:34:ed:ef:
         ca:16:50:bd:b7:dd:25:09:85:42:35:19:9e:14:47:0c:4f:84:
         12:a0:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:02:14 2025 by rpki-client