Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
File:                     YmHXJNC9IPWdDi44xn6JVKbUy98.mft (raw, json)
Hash identifier:          4naAOrAtAn+1wK0rY1DI0S2CEt1N/v+njkEyegPlDRw=
Subject key identifier:   1D:8E:11:2C:F0:98:02:95:F8:94:FA:56:00:9B:31:B3:D2:44:BB:E4
Authority key identifier: 62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
Certificate issuer:       /CN=F3610DE1AF/serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
Certificate serial:       059C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
Manifest number:          0599
Signing time:             Mon 20 Oct 2025 02:37:57 +0000
Manifest this update:     Mon 20 Oct 2025 02:37:56 +0000
Manifest next update:     Wed 22 Oct 2025 02:37:56 +0000
Files and hashes:         1: YmHXJNC9IPWdDi44xn6JVKbUy98.crl (hash: 1cJNiYdpLmUo0VLTb/fNJUF33at7EFQGsD5Hhzfq/bw=)
                          2: EC347D644F7011F0B0E5A285DAE4EC9C.roa (hash: 7VqGdhK0QKVxfwrcQu0g+uIjAEEmddmp5+L+0+/1OA0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610DE1AF, serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
        Validity
            Not Before: Oct 20 02:37:56 2025 GMT
            Not After : Oct 22 02:37:56 2025 GMT
        Subject: CN=68f5a084-3351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:1f:9b:bf:da:e0:ff:8b:66:e5:86:95:1d:
                    71:db:c6:f7:3c:dc:6d:92:0c:d9:19:64:fa:c1:99:
                    c5:6a:d1:14:c7:6f:e3:2f:0c:95:65:fe:86:4e:73:
                    e3:7b:25:c8:ac:2a:7f:60:bf:cb:83:38:24:ef:98:
                    5d:13:b3:82:94:28:98:34:f6:89:b8:5d:b8:8a:b3:
                    2f:1a:78:2c:9e:3a:66:19:1b:73:b2:6b:d4:b2:e3:
                    26:1b:2c:a4:e2:c9:4f:97:33:c1:3b:91:79:69:ad:
                    c8:bf:71:0d:73:a3:fb:0a:34:2a:ed:c3:33:35:3a:
                    2f:1c:81:35:cb:69:9f:8f:da:d4:d1:32:25:3f:2d:
                    39:89:d7:00:de:d6:57:88:8c:47:4f:b2:2f:8d:41:
                    d7:b2:da:c4:a4:b5:da:a8:f7:e4:e2:1f:65:74:9c:
                    ad:75:1b:00:c8:94:86:3c:81:6b:86:eb:b0:cd:cc:
                    1d:bf:2c:76:10:51:9a:b4:1c:21:6e:f2:4a:21:55:
                    21:17:f4:30:77:1f:ba:b9:c3:11:6a:3f:67:13:8a:
                    e1:0d:35:e9:d1:d3:27:9f:b3:01:6c:92:24:53:ff:
                    04:ba:89:f9:36:81:38:a1:a4:7b:8d:7e:02:19:99:
                    b3:49:dd:c1:d4:47:9f:49:9a:2a:e9:ff:63:61:1b:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8E:11:2C:F0:98:02:95:F8:94:FA:56:00:9B:31:B3:D2:44:BB:E4
            X509v3 Authority Key Identifier:
                keyid:62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:bc:bf:25:30:e3:9d:e8:0e:f5:84:82:11:9c:02:55:2a:
         2d:9c:c8:81:84:c5:9e:80:9c:12:44:85:e9:cc:5f:2d:90:cb:
         2f:9f:f9:cc:f6:34:d3:57:b9:06:99:e0:bb:f6:17:bb:ba:1a:
         fc:a6:25:95:f3:59:23:bf:64:c5:a4:98:77:25:94:84:13:35:
         e4:21:25:c9:40:aa:8f:66:91:7a:c6:84:5c:27:3f:38:0d:c1:
         92:84:c6:ae:93:d5:a6:93:e4:37:d3:23:4d:0d:30:4d:84:34:
         25:fe:1e:b8:b7:b1:c5:4c:f3:84:aa:ab:6d:11:0e:77:dc:bc:
         f3:5e:11:6c:4d:70:42:f1:8f:08:61:9b:28:a3:a5:31:d1:18:
         67:bf:04:2f:46:e0:67:53:92:65:97:af:01:2b:02:e2:10:dd:
         b8:ab:ac:74:f3:e2:76:db:45:86:8f:02:c9:07:d5:38:8c:c5:
         ce:3b:c5:cb:5a:28:d0:6e:a1:26:dd:3c:5b:74:c9:f6:b9:b8:
         04:e6:e3:12:e0:88:7c:17:11:e4:33:95:f3:26:d7:74:1b:1b:
         3a:1b:5d:1a:f9:e8:f7:c9:99:ac:52:0d:51:e7:6b:02:2d:66:
         de:0c:2b:a2:ac:8b:43:11:0a:b0:38:87:65:f8:8f:19:52:1a:
         19:7f:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:45 2025 by rpki-client