Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
File:                     ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft (raw, json)
Hash identifier:          PkWMjEA44Kr9KcWJqHQwxy92MBw0rEXCmooXDCRTUdU=
Subject key identifier:   90:8F:8F:F1:58:28:85:F5:14:3F:CE:77:3A:2C:15:63:F4:D9:CD:C9
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       02D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
Manifest number:          02C3
Signing time:             Wed 17 Sep 2025 03:54:22 +0000
Manifest this update:     Wed 17 Sep 2025 03:54:22 +0000
Manifest next update:     Fri 19 Sep 2025 03:54:22 +0000
Files and hashes:         1: ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl (hash: 7b5H8G3d35jLc9vC2rgd9a6nlbZl8VL5f1gf487wmeo=)
                          2: 4EA7D32E53E611EF9B5BE56C762E951A.roa (hash: NtlpVvP6+zWzB8RFTth6ghNvN5nR/THSHfhDD9x2bP8=)
                          3: C1A1DD34BE5E11EE99164ABD775412E6.roa (hash: wvW9kZ5/AUNQWgKaGpjvpIVPHuqxftH9YadONSy7YnM=)
                          4: 757D2A34887711EE836A404E4AD9E6FC.roa (hash: +ZI3X/alavjG8hd5TUGXudmlVMdSEsoVpfbaqPGHQKA=)
                          5: A1BBDFB45BDA11EFA2803F75762E951A.roa (hash: B+/DOrNgATDNRMYx/JLMgJNXWHAPifjl6iw4sXJYoDA=)
                          6: D2F9CEC4BE4B11EE8D656598775412E6.roa (hash: Cxpb4VpHsS5nAkYLG5LF8Ro6WmVM8kJPPNxJ4wnGbyc=)
                          7: 75479C3CBE5711EEA57807B1775412E6.roa (hash: KJ78VQh/EaM4VrWU0qtdFJzJqdOESws+8hhBj0+/JkQ=)
                          8: DC282EF8882211F0A7704DDBDAE4EC9C.roa (hash: T0igekGrTYaRpNadHLliqhNPK9+LbtXEGTfnQQPv4/o=)
                          9: 8804A9420EF611EF90E9CB4F017001B1.roa (hash: Ah/gC+WFiWi7Jlp6m9g/RNWVwD4e/UvuFekwBmptqnY=)
                          10: A8121FD29CFC11EF91E12A85762E951A.roa (hash: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=)
                          11: EC1D132E0D2A11EFB8F87A2D017001B1.roa (hash: Ly9LZH0Fh6E4ZtDar/abB8C31gGCVwPrBo7kMnb8boM=)
                          12: 0EF37AD45BDA11EF9E5BF670762E951A.roa (hash: 51koAiGBT4Qlz96Il2OYaGj869PU6MSFeqlPyjHqg1Q=)
                          13: 518CAA929CFC11EF95640782762E951A.roa (hash: OyktAYCtLdWaRz8aqABUtVcVPRFArgA2QV1t66oDcS8=)
                          14: 23292B7612C311EFB9087350017001B1.roa (hash: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=)
                          15: F3558888612511F098D6E98EDAE4EC9C.roa (hash: JDtyMwOOrKTy2qsgEw1FCl42QKzix0RW6dRZVcnlssk=)
                          16: D265FEDE0BCA11EF917FA0F3007001B1.roa (hash: JnlsXUtJ6yRPF3xH5RBfKSof1yPWn25dJe2aCkd3Tug=)
                          17: 68E2FFBA615611F0A2488AD5DAE4EC9C.roa (hash: w3HgJ6iasE0Baeop5RBkwj/+ubVBgHbMYQzGZBLJCBU=)
                          18: 7F5635A2887511EEBFD443484AD9E6FC.roa (hash: ocQwdIyiszloWpRuczWxhp841V/qq4mP8+w57e47R8w=)
                          19: 3B419B887CAB11EFB49DDE4D762E951A.roa (hash: IQzn2Mmxf3299kc5c2KxlM3LEdiHGEsho1HI4seozUE=)
                          20: 88C005FAE86F11EEA0289955775412E6.roa (hash: 2xUGL17bO3ah/ni1p+4Y+DjG347crU5mRkFs3eTev0U=)
                          21: 566CE01C0BD011EF922BB41F017001B1.roa (hash: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Sep 17 03:54:22 2025 GMT
            Not After : Sep 19 03:54:22 2025 GMT
        Subject: CN=68ca30ee-a493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:33:67:63:c3:4a:ce:9f:21:e0:55:8d:4c:b0:
                    3d:03:88:d4:70:cf:b6:1a:60:24:5b:34:39:8a:f3:
                    48:40:57:33:6f:a3:11:8e:4e:d8:1b:cc:5a:3a:05:
                    b3:a9:d1:91:08:b3:fb:c7:ba:56:79:ac:73:4a:a1:
                    00:ad:ba:7b:6f:42:30:cc:e5:85:10:74:d3:d3:99:
                    98:75:e9:32:2f:87:94:6a:64:2d:10:a7:14:ad:bb:
                    0d:c5:81:0e:c3:ec:bb:ab:e8:7c:fb:18:00:c9:f3:
                    64:82:fb:22:d7:61:48:af:66:0a:15:e5:ff:3a:7a:
                    2a:b1:b5:70:dc:7b:d6:95:f9:f0:28:f6:75:b0:b4:
                    31:b9:66:a5:15:fb:cd:b0:15:ba:33:f4:45:74:36:
                    87:6c:a8:74:5c:60:f0:71:83:e3:6b:a0:40:96:91:
                    5f:91:83:c9:a8:45:a8:f0:4b:8e:20:85:d2:db:d7:
                    01:1e:50:c1:35:8f:1a:37:50:0e:c8:b5:02:18:b6:
                    2b:c6:61:3e:0f:a9:85:04:12:4c:da:69:d4:d4:fe:
                    46:77:e3:7c:29:f8:2c:3e:e6:06:a0:ea:0d:25:81:
                    1e:8a:e0:1b:db:e9:8d:91:ac:5d:c2:a1:00:62:59:
                    36:42:fc:d6:d2:af:1d:0e:b5:65:26:0a:d5:cf:90:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:8F:F1:58:28:85:F5:14:3F:CE:77:3A:2C:15:63:F4:D9:CD:C9
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4d:f4:b3:b3:96:99:6d:d7:f6:b9:14:5d:8a:6c:c1:0e:da:
         49:11:0b:c2:0e:c5:cc:2b:25:35:85:81:e1:26:36:92:fb:2c:
         79:e9:d7:a8:11:0d:01:c7:d8:f1:22:45:ec:ac:b2:12:0b:e3:
         c1:bb:c4:94:e1:41:4a:4e:86:d8:fe:4b:a3:d7:01:33:fe:6c:
         3a:4b:80:0d:db:f2:d3:4b:ce:f2:7c:dc:b6:ae:b2:5f:f6:3c:
         cf:fc:01:63:12:88:79:d9:a0:ae:71:d4:f0:a8:62:56:1a:6a:
         e0:d3:dc:3b:11:17:8c:eb:94:11:4f:b3:38:52:b0:b9:55:19:
         fd:e0:69:41:cd:7d:1d:bd:68:1e:7b:b3:f0:a2:e1:dd:6f:0a:
         cd:c1:6c:20:b1:af:e1:55:3e:0f:d4:09:ed:e4:b4:7f:3d:01:
         de:8b:2a:c9:04:8d:7c:93:69:16:52:ef:be:f3:9b:05:6d:80:
         34:30:76:d1:cd:fa:d4:9d:ba:af:ca:61:8a:87:79:ee:6c:72:
         b8:27:03:71:20:bc:c0:19:d7:52:cf:f2:3a:21:2f:dc:63:2c:
         e7:56:23:85:51:8d:52:b7:f5:73:cc:c8:98:33:88:77:fd:46:
         bd:cb:0e:7f:6a:78:a9:b1:57:67:e0:32:e8:c0:b5:36:0c:3a:
         1d:ef:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:19 2025 by rpki-client