Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
File:                     yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft (raw, json)
Hash identifier:          JcuNMzC1jSK6ShQOxv4u8ZvxR2a/E7VIliPhmcHr7PU=
Subject key identifier:   D8:DF:7E:E4:B2:4F:1D:DF:45:B2:A1:1B:A8:01:F5:58:D8:4B:0A:F7
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Certificate issuer:       /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial:       02B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
Manifest number:          02B1
Signing time:             Thu 31 Jul 2025 04:09:42 +0000
Manifest this update:     Thu 31 Jul 2025 04:09:41 +0000
Manifest next update:     Sat 02 Aug 2025 04:09:41 +0000
Files and hashes:         1: yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl (hash: hAg28kvMGBRT76Yc6SvQrkAKALAo8kakt6FzWsYh7gA=)
                          2: 04EB056A6ABE11EE9E4243804AD9E6FC.roa (hash: EyVlkSGybf5bnAy71sGPmJ47rqIPQfEXtljbaai4c88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C38D9AF, serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
        Validity
            Not Before: Jul 31 04:09:41 2025 GMT
            Not After : Aug  2 04:09:41 2025 GMT
        Subject: CN=688aec86-01f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:b1:d4:4a:88:a5:c6:1e:41:bf:5e:12:15:
                    b8:52:ac:48:52:09:29:03:52:7e:54:68:d9:1d:dc:
                    dc:4b:0d:25:20:ce:5a:d9:b8:82:e5:ce:e8:be:1a:
                    03:8f:ed:46:81:65:7a:51:9f:5d:20:61:02:53:64:
                    48:2e:bd:7a:d8:99:e3:3c:a3:61:28:78:df:1c:26:
                    6b:42:e5:9d:05:bb:69:ff:89:39:25:27:73:dd:5e:
                    b7:4e:9d:fe:79:0f:a7:ea:8b:f3:b9:f0:6c:98:85:
                    eb:5d:d7:c7:a4:f8:1d:a2:cd:7f:bd:1e:5a:3a:7b:
                    ef:09:a1:e5:e1:f0:e1:26:8e:c2:3d:dd:1e:3a:42:
                    55:ad:b4:c0:83:a3:84:79:0d:ae:f9:ee:21:dc:c0:
                    0f:79:49:bc:38:59:a9:d5:20:0a:41:0b:b6:e0:09:
                    8a:d7:45:30:2c:15:cf:90:3e:74:ec:52:63:b8:2d:
                    5b:ee:f8:23:12:b5:af:02:b8:2e:9b:ee:85:3b:67:
                    a5:02:a8:b8:20:8f:8b:7d:88:bd:42:cd:8d:95:ad:
                    76:75:a1:2d:9f:5b:e6:0b:75:62:5b:18:8c:99:15:
                    20:c4:67:a1:7e:a5:4c:c2:0f:cc:00:bc:5f:55:4d:
                    58:40:0c:52:42:17:a5:a3:53:30:06:ac:77:64:50:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:7E:E4:B2:4F:1D:DF:45:B2:A1:1B:A8:01:F5:58:D8:4B:0A:F7
            X509v3 Authority Key Identifier:
                keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fd:6c:90:41:11:06:06:5f:b6:d5:5d:bc:02:50:00:2d:f2:
         f1:03:ef:20:8c:a0:55:62:83:2f:11:e5:7e:73:d1:1c:c2:6a:
         d4:bd:0e:cc:50:d2:b3:a6:03:11:e4:b3:a2:5e:2e:00:c4:73:
         28:a2:ce:05:83:23:c2:09:cb:70:b6:68:01:51:62:c3:64:71:
         e7:91:13:8d:d0:61:3e:f2:77:5f:e7:e3:7c:98:f7:39:23:42:
         7b:4f:7f:04:25:48:a6:f9:fd:db:20:60:19:f1:b2:69:68:9b:
         1c:9e:25:e6:59:3a:86:20:43:32:3d:92:a2:e8:98:14:03:70:
         73:6f:46:7f:67:bc:9b:35:81:1d:54:31:b8:e7:b8:e2:aa:74:
         21:1f:39:80:47:6e:6f:ac:cf:2b:67:d3:50:ac:90:d2:e5:4c:
         60:3a:64:27:24:9b:7f:21:3f:fb:d7:28:75:1e:8d:2a:c9:8f:
         53:3d:9c:1d:b2:ed:ab:f4:40:d0:df:1a:4e:b6:52:a8:81:33:
         c1:be:47:9c:cb:37:f8:90:47:01:c9:ca:02:9b:aa:d7:32:c3:
         87:0f:ed:70:7d:39:ed:df:f2:16:d0:3c:d7:a0:36:a2:0b:0f:
         11:fb:4e:c2:d1:ce:13:10:10:4c:b1:a9:e0:34:da:9a:21:57:
         3c:91:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:14:49 2025 by rpki-client