Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File:                     _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier:          +k++dzR1EsYOQHuwBOOBsTN+iBISXnimV/LS+7PhOSQ=
Subject key identifier:   AF:C8:DF:E5:4E:0A:E8:DE:82:98:F4:1E:EB:C6:A3:EA:E9:C2:0A:E6
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       0971
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number:          0955
Signing time:             Tue 16 Sep 2025 01:27:59 +0000
Manifest this update:     Tue 16 Sep 2025 01:27:58 +0000
Manifest next update:     Thu 18 Sep 2025 01:27:58 +0000
Files and hashes:         1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: HBDP3T4y7wB79aYGlH10udJ7Cq2LuH9LgFWGlwpoDbg=)
                          2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
                          3: 8CFF0D3452E011EEB9E2557C4AD9E6FC.roa (hash: AjdT4e8a6WXfxGEzOMU2Ejz3vHkEPA/+xC+T83HmsUY=)
                          4: 7E2AA4AC953C11ECB825FCA95A40D577.roa (hash: V0xEm03mcnP/23ED2cL/AoR2czYuEnqqGtBl0cqLVJY=)
                          5: 771B25DAC1DC11EBAFF27A22F8AEA228.roa (hash: hB7LK5vkWRJBikNKLrZykTmcN1gbhqGJuoapPw28t74=)
                          6: 487A092ADA8611ED9609AEE52F6D8C1D.roa (hash: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=)
                          7: EBFDEB1CDA8511EDAD8DC8E42F6D8C1D.roa (hash: T0K4k+0IgpuVi35+ZPDqnwWPZANeAHrt4BvXYlWbXMI=)
                          8: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
                          9: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
                          10: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
                          11: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
                          12: 7F0A8334DA8611ED854699E62F6D8C1D.roa (hash: GP3NdP5uExbY2GZHQJ+RZAHZhDY8bRc/dyrY/rF4P6I=)
                          13: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
                          14: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
                          15: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
                          16: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
                          17: A6F9E6BC52E711EEA98697134AD9E6FC.roa (hash: 522xUbFyDNAfNVyOqkEJj/kgs5vlVi6RihMtJZxJPIA=)
                          18: 51E7667A198311EDA6FEC5BFF1222468.roa (hash: 5AYXvFdqlcLtOaW600VeglJz5MATpO6Rt2/LbZme/P8=)
                          19: DBFF1E3C43DD11ED95883DBCF1222468.roa (hash: Y8zoZUQnQqpVoToxLOumwxqYjQxD2d4+Fg81697ZwlM=)
                          20: 60E94C82DA8611EDB9B5F0E52F6D8C1D.roa (hash: uN0Q1zV+VPkcLgC9gryjBgSon2OLOyHeE5NbuOjD/vU=)
                          21: 14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (hash: S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 01:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417 (0x971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Sep 16 01:27:58 2025 GMT
            Not After : Sep 18 01:27:58 2025 GMT
        Subject: CN=68c8bd1f-9c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:1a:70:5e:9f:be:94:51:f5:96:cd:ac:e0:
                    0e:30:26:81:5c:cd:60:7e:00:74:54:03:ce:d1:e6:
                    a2:cf:b1:70:2f:88:03:57:48:f1:01:b7:a8:23:15:
                    c1:bc:11:8f:ec:29:4b:25:04:1f:c2:a6:5b:c3:85:
                    45:07:ae:ee:0e:b8:84:c3:09:50:9a:99:7a:25:19:
                    d3:29:a8:b3:6d:3e:58:7a:5c:b6:5f:b5:ef:e4:d7:
                    78:b7:b9:39:12:33:16:71:c3:3a:a6:96:f8:5e:5c:
                    35:1c:95:16:05:72:b7:87:b5:e2:6e:77:fe:e6:42:
                    2c:c6:ff:68:f5:7c:4b:f6:dc:f6:13:3f:ce:13:19:
                    3a:a0:ca:72:b1:64:ef:76:fb:57:ce:1b:38:d2:e7:
                    01:d4:a5:85:51:4a:fb:9d:a5:87:0d:73:d5:24:03:
                    92:86:77:da:f2:1e:82:97:cb:b2:36:fd:41:58:4b:
                    82:2d:a7:61:98:75:28:f8:3d:b5:41:cf:a8:be:4b:
                    0e:32:38:d3:b3:81:ba:2c:06:8e:5d:d6:ca:23:18:
                    f5:15:1d:ec:3a:de:91:bb:ff:4d:24:a0:96:fe:4d:
                    c3:c1:bc:71:12:e5:69:1c:2c:c6:57:b4:8a:29:f5:
                    bf:3c:30:ce:f2:27:e1:25:18:83:18:f4:c7:db:b2:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:DF:E5:4E:0A:E8:DE:82:98:F4:1E:EB:C6:A3:EA:E9:C2:0A:E6
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:1c:0a:6b:ad:8a:1f:00:6d:2b:6c:dc:57:54:80:da:2e:
         d1:a1:84:9d:ab:3a:db:8a:45:fc:af:47:54:9b:1f:43:2e:6e:
         ea:1e:81:73:cb:4a:b7:b7:26:fb:92:d5:df:bc:9c:56:71:4d:
         72:8e:ea:1e:4e:a4:7c:81:25:ad:1e:a3:df:98:20:03:16:39:
         a7:c4:86:15:d3:b5:84:7f:07:2d:a1:f4:f8:5c:cc:54:d1:9d:
         07:f5:7a:d3:83:84:2a:3a:5f:73:86:0c:e6:eb:c0:00:21:03:
         56:b3:5b:4d:82:b5:b4:0c:d4:8d:90:db:1f:90:c8:51:34:af:
         e3:06:f4:a4:d6:a1:98:15:55:c3:70:e6:81:80:94:c8:fd:44:
         16:59:79:21:7e:fb:88:0a:cf:a5:e2:77:7e:c3:3b:23:da:ac:
         2d:49:64:98:80:fc:8b:77:e7:cc:6c:21:c9:d0:34:0a:6d:32:
         32:bc:74:56:47:e3:85:50:34:3f:70:85:93:94:66:e2:00:d9:
         b3:c8:1e:fc:60:d7:ca:71:0c:56:85:58:99:ff:ee:ad:99:0e:
         14:87:df:49:e3:bd:ef:e9:6a:4e:d5:66:99:e5:27:bf:8e:1c:
         fd:03:98:25:07:5e:6a:e7:8f:e7:fe:ad:50:8c:f5:e9:3c:07:
         92:38:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:54:49 2025 by rpki-client