Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          LQmV9ZMwXd18dfwVF7e0wokzVokBRhp7ajSIOULglqA=
Subject key identifier:   C7:FD:CA:9D:F4:CC:AF:4F:95:88:49:20:FF:09:A4:DB:41:2A:28:8E
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          43
Signing time:             Thu 31 Jul 2025 05:29:42 +0000
Manifest this update:     Thu 31 Jul 2025 05:29:41 +0000
Manifest next update:     Sat 02 Aug 2025 05:29:41 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: tOdDwnxfcyiv4t4vN8I35j84kluKEDAaUh117WcleUE=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Jul 31 05:29:41 2025 GMT
            Not After : Aug  2 05:29:41 2025 GMT
        Subject: CN=688aff46-b887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:a3:3c:24:00:64:17:61:d6:e9:c3:06:a1:
                    d2:9b:85:85:a2:64:cb:b8:3e:47:44:1e:4f:ba:06:
                    fe:50:0b:cc:73:23:35:62:ac:05:bd:85:01:20:81:
                    2a:e7:e8:05:2f:03:5a:c5:2d:06:3f:8c:21:cb:d0:
                    8a:77:e2:d6:03:32:91:d5:d6:4d:27:4d:2a:64:63:
                    1c:b9:f8:38:43:73:d6:60:61:0c:88:0c:73:ad:11:
                    0f:67:04:69:55:81:ff:31:5a:ed:3e:11:70:84:a7:
                    24:dc:e5:0b:9b:da:d2:7f:a6:57:ce:2c:d6:1d:4a:
                    7b:f5:9a:3b:bb:91:1d:7c:70:e0:4e:96:bd:14:a9:
                    81:32:d8:94:39:86:27:e7:5e:51:7c:8a:fd:c5:ee:
                    7d:60:55:6d:41:63:20:df:87:2e:81:64:e7:54:dd:
                    bc:7c:6a:bd:af:28:c3:28:85:10:6e:22:50:a5:8b:
                    c0:31:20:2a:38:3b:28:10:9c:c4:08:09:58:f8:f1:
                    bf:b4:19:57:7b:06:79:35:44:4e:1a:b4:f4:f7:a1:
                    91:be:64:a5:3d:a1:90:83:fa:77:3f:f2:28:d5:fb:
                    a0:13:b9:69:c7:60:57:34:95:d2:c8:d6:0c:12:e5:
                    f7:0e:90:24:bc:f3:18:e7:7c:6b:dc:ba:28:e2:1a:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FD:CA:9D:F4:CC:AF:4F:95:88:49:20:FF:09:A4:DB:41:2A:28:8E
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2d:8e:7b:c7:ae:31:23:b2:67:6d:3d:9f:f3:02:04:7c:67:
         81:2e:e5:02:cf:5e:35:4f:1e:e7:58:3f:08:1c:fd:d4:11:4e:
         6d:32:b5:39:cd:54:94:cc:0c:7a:50:2a:1f:f7:a2:0e:69:19:
         e4:6d:23:7b:1e:a0:17:1e:84:67:dd:28:cd:3a:ac:26:a6:14:
         95:0b:b9:9c:2a:76:4b:04:9b:e9:be:0e:6d:db:0e:d2:f4:72:
         e0:bb:75:19:fb:79:c3:cc:a6:7b:dc:23:45:52:18:f4:ff:12:
         16:1b:81:51:dc:a1:cc:a9:f4:69:ba:19:94:e2:27:be:18:db:
         dd:6c:bf:21:87:dd:71:87:9d:e9:d6:45:37:db:9d:e9:2c:a4:
         cc:01:d8:13:05:2a:c1:65:72:a9:76:48:58:89:b0:22:f6:1e:
         0b:d1:39:4a:50:c5:41:0a:30:1f:8d:7a:c9:3e:a9:f8:16:a2:
         a3:49:3b:e7:12:36:54:4c:a4:93:69:08:b9:bf:db:8c:6d:0b:
         16:f6:7e:87:ce:50:d4:3d:a0:1e:29:5c:fa:a3:36:ac:d7:c6:
         3b:24:ef:d0:bb:38:f9:cb:f4:2d:c4:98:88:e3:53:08:fa:c4:
         07:33:2d:b8:b0:97:df:aa:3f:19:88:f7:79:00:78:80:68:79:
         7e:1d:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:24 2025 by rpki-client