Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
File:                     ePyy5tDIIPu5vVgQYfogSi1R9BI.mft (raw, json)
Hash identifier:          SovTOWOOltgMPrKLXAXHrcFOxlUykturIIU/HXHeXms=
Subject key identifier:   1C:32:BB:E8:42:AF:36:01:41:AE:FD:D3:E3:29:D5:B0:8D:71:EE:62
Authority key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Certificate issuer:       /CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
Certificate serial:       02AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
Manifest number:          02AA
Signing time:             Thu 31 Jul 2025 04:09:57 +0000
Manifest this update:     Thu 31 Jul 2025 04:09:56 +0000
Manifest next update:     Sat 02 Aug 2025 04:09:56 +0000
Files and hashes:         1: ePyy5tDIIPu5vVgQYfogSi1R9BI.crl (hash: zeZRMUxgOIQmD9AatriUfth6ctaBgI7B+ssgJU+jMHg=)
                          2: D64EDDEE6E5F11EEBF42781C4AD9E6FC.roa (hash: wwS9H3v6Oq2KT+bOS8yPt+2S5/l9UTYbItXO4BiUcNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FABDEAF, serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
        Validity
            Not Before: Jul 31 04:09:56 2025 GMT
            Not After : Aug  2 04:09:56 2025 GMT
        Subject: CN=688aec95-24eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:d3:57:b2:59:33:ab:ad:b6:75:43:64:a7:
                    a6:13:66:82:04:73:22:1b:f6:32:ed:80:09:7e:cc:
                    90:7b:d6:89:db:3f:d0:2b:f6:8b:11:1b:8a:89:1e:
                    31:66:e5:1f:95:05:f4:e1:6b:94:78:c9:ea:b9:95:
                    17:13:5c:fe:60:7d:34:e1:65:69:21:98:0f:6b:b5:
                    33:c1:e9:37:cf:24:98:19:01:91:5c:e6:da:2f:4d:
                    91:4d:e0:b5:33:e5:0e:bc:39:8f:59:c2:a6:02:57:
                    bd:7b:3b:80:83:65:62:0e:a9:87:ed:7b:a0:06:ac:
                    5f:23:bc:17:3c:bb:33:2a:57:78:bb:48:87:d2:e6:
                    38:bd:8b:16:c1:9f:1e:11:92:2f:18:fb:a8:74:e2:
                    bf:11:7e:df:ad:15:54:36:2c:05:30:9c:45:19:68:
                    57:43:c8:9b:07:8d:ff:c1:80:cc:96:37:90:87:75:
                    33:80:3b:75:3b:3c:e0:2a:a9:ff:0f:f5:3b:0f:3f:
                    b3:79:15:3a:46:6a:1f:e1:ec:46:14:72:e0:31:f6:
                    e4:36:2a:a0:20:3f:ef:29:33:c5:5c:e0:89:7b:50:
                    1a:db:1a:66:92:ee:c0:9c:e1:43:4f:72:22:ce:f0:
                    ac:89:18:63:c4:72:e4:06:0c:23:90:f1:6b:bc:c2:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:32:BB:E8:42:AF:36:01:41:AE:FD:D3:E3:29:D5:B0:8D:71:EE:62
            X509v3 Authority Key Identifier:
                keyid:78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:94:e0:fe:29:07:a8:ee:b4:3d:83:b8:12:25:57:9b:6e:
         ce:db:8c:0f:4e:1d:54:3e:c5:59:e8:4b:2d:03:1e:9f:37:0b:
         86:6b:ba:af:d3:92:1f:c1:c2:aa:3d:d5:51:df:3d:da:b8:04:
         31:62:91:b0:66:86:38:5b:b9:be:9e:96:8d:3c:a1:63:02:41:
         39:41:ca:bd:35:5a:26:1c:ff:a0:d6:8e:48:52:7b:a4:84:38:
         12:51:c8:3a:91:0a:1e:ea:83:07:3a:fd:e2:5f:ad:b0:7b:c4:
         cf:df:50:29:0a:32:e6:19:f4:24:80:10:f3:b4:3d:a3:b6:cf:
         ed:67:b0:50:95:c0:7a:c6:fb:48:88:88:88:6a:91:d2:ca:9b:
         01:d8:97:f5:42:a7:40:8d:c1:3b:e7:9b:22:c2:bd:fc:03:3f:
         3b:23:54:a8:58:32:67:98:84:8d:94:94:10:0b:f7:ca:43:3d:
         82:55:91:4d:5d:f8:3e:07:0c:df:20:43:6c:c7:63:78:30:7f:
         fe:9b:d8:01:a2:56:de:f8:b6:d9:f9:28:3a:cf:60:b7:12:84:
         37:2f:d9:e5:ff:08:8d:56:79:50:5b:99:26:37:0b:ff:30:25:
         ab:20:45:00:44:01:d6:04:45:90:4b:03:de:90:f1:3c:3b:f1:
         7d:9c:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:19:22 2025 by rpki-client