Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File:                     JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier:          YLEky/zlywlZrUrZRviBlL7c9vLxrBrG+ErPqha9DfU=
Subject key identifier:   22:79:38:0C:0B:2F:33:2B:1F:C6:F6:F3:65:99:01:49:25:78:97:64
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer:       /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial:       0265
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number:          0263
Signing time:             Thu 18 Sep 2025 04:02:50 +0000
Manifest this update:     Thu 18 Sep 2025 04:02:49 +0000
Manifest next update:     Sat 20 Sep 2025 04:02:49 +0000
Files and hashes:         1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: MYGUa4Vl62hQW+9/OcBX0ob0uxHe9EjH8Sq/8uzkizo=)
                          2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
        Validity
            Not Before: Sep 18 04:02:49 2025 GMT
            Not After : Sep 20 04:02:49 2025 GMT
        Subject: CN=68cb846a-40be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:57:b6:02:3a:b6:2e:58:ca:18:e1:92:ca:9f:
                    8b:c9:cb:58:c2:d9:8e:bf:6c:c4:e3:e2:52:e2:37:
                    47:23:0d:89:35:61:2e:82:dc:a4:67:dc:e8:bd:68:
                    3c:7c:59:7f:3a:f6:3a:65:89:80:32:ba:ec:db:b2:
                    7c:aa:0d:64:87:59:87:4f:ab:7a:af:1f:a1:f4:b6:
                    00:75:7f:78:af:ad:49:95:46:28:e3:98:ca:d9:88:
                    84:11:db:f8:2b:47:65:4c:9c:0b:9a:8c:d9:56:cb:
                    7c:d0:1e:77:fc:e9:ba:a5:69:1f:2a:82:5c:71:89:
                    43:b6:8c:4b:87:d9:83:97:b3:aa:ed:b3:d3:94:75:
                    06:90:9e:96:f2:ab:d7:e4:0c:a4:6d:66:53:a5:63:
                    ca:3d:72:73:fc:c5:7c:94:38:9a:14:ac:46:2d:16:
                    9e:b5:b3:38:d2:1d:9a:9d:32:de:94:38:b0:8d:e8:
                    79:8a:b2:b6:3b:04:ed:f7:f1:11:1d:54:51:80:0c:
                    1b:2d:a4:e8:0d:6b:f7:d0:b8:c1:28:0c:2b:d4:75:
                    f8:8f:1b:00:c2:08:7d:a3:06:e1:d7:86:16:6f:e2:
                    98:74:55:92:51:37:03:ea:94:61:1c:b1:75:72:eb:
                    4e:e6:e9:45:f9:07:b0:16:a6:82:7e:a4:c0:db:10:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:79:38:0C:0B:2F:33:2B:1F:C6:F6:F3:65:99:01:49:25:78:97:64
            X509v3 Authority Key Identifier:
                keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:52:fb:a1:df:2f:3e:d0:24:dd:93:c3:7f:a0:15:af:65:3f:
         40:18:a5:f5:48:c4:c6:9a:34:1e:4c:9e:43:82:3b:f4:64:34:
         9b:fc:47:56:2f:14:14:d6:07:12:71:86:b2:2c:a8:ea:7c:61:
         9e:49:a2:3f:a8:a8:96:3a:47:a6:50:0b:c2:48:20:2b:66:aa:
         4d:e8:57:db:62:79:51:a0:90:29:36:37:6d:78:c2:de:3c:65:
         48:3a:f5:4c:fa:d6:70:70:41:64:34:fe:05:9f:d2:d3:6e:45:
         94:33:99:82:d8:6a:b7:8c:4d:e1:ab:7e:d2:4c:08:0f:da:de:
         e4:fc:9b:62:c2:5d:1f:57:e9:c3:16:6b:7d:ed:73:9c:7e:8e:
         5b:42:47:39:b8:7f:7b:3f:7d:4f:01:be:33:e2:09:59:ff:a0:
         e6:10:52:57:fc:08:47:56:53:a9:5a:0d:78:d4:d4:4e:32:fb:
         4a:4e:f8:63:86:57:cb:53:f6:d3:6b:40:92:3f:c5:34:2b:ce:
         b7:64:b1:61:58:a4:fd:cf:fd:20:78:8e:3e:b1:4c:82:7b:8b:
         b8:0f:9a:fa:ae:a3:ec:e5:67:e5:fc:ce:c2:97:04:55:89:a4:
         bf:92:13:9c:5b:ec:9c:9f:81:b4:51:54:6a:d0:c0:14:51:c7:
         cd:1a:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:00:09 2025 by rpki-client