Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
File:                     yDmJhjJn0TZLxz9143zW0rf-yYc.mft (raw, json)
Hash identifier:          YHQ559g36ooOf7vseH0v6uDnHPllNV//1t3QkEPYxsQ=
Subject key identifier:   E3:F2:3E:7A:A5:A0:C6:ED:30:A1:8A:23:75:D7:8D:B9:B5:3D:A7:28
Authority key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
Certificate issuer:       /CN=F361F0D8AF/serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
Certificate serial:       12
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
Manifest number:          10
Signing time:             Sun 19 Oct 2025 05:17:48 +0000
Manifest this update:     Sun 19 Oct 2025 05:17:47 +0000
Manifest next update:     Tue 21 Oct 2025 05:17:47 +0000
Files and hashes:         1: yDmJhjJn0TZLxz9143zW0rf-yYc.crl (hash: uCamK42JlS1yy8zaXpbhp3vpSNHhQ+FqyRHpqBzbGI4=)
                          2: 8FDC3D26A3BD11F0B640C8E9DAE4EC9C.roa (hash: z+EMCGVRvbS1M60Ygkphk04UU0Xnx+NfxQ7EP0ilmi0=)
                          3: 5598B34AA8D311F09951D4DFDAE4EC9C.roa (hash: ekkmLGUII3HkbjQJ5DqbrnE5zNaEvepsyMeJezGqRJY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
        Validity
            Not Before: Oct 19 05:17:47 2025 GMT
            Not After : Oct 21 05:17:47 2025 GMT
        Subject: CN=68f4747c-4e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:4f:a2:2c:0b:06:3e:8d:a9:d0:62:07:ad:
                    7c:20:65:67:f1:f3:c5:25:82:3d:13:dd:ab:20:b5:
                    5f:d5:d6:d7:7d:e0:d9:7b:45:1c:92:07:52:d0:76:
                    6e:fe:5c:c2:f5:1b:e4:b0:9f:32:30:84:1d:35:38:
                    00:d6:c6:31:f8:54:4f:2c:bc:ed:04:6b:77:b5:fc:
                    0b:57:8e:16:72:a7:8b:e2:1a:5b:f7:bb:52:ca:46:
                    52:07:75:bb:51:67:58:c8:e9:bc:9f:5d:bf:d0:7b:
                    ae:36:58:09:c2:8a:79:22:c1:f7:1a:4e:5e:30:bf:
                    84:43:13:93:e4:60:63:36:ad:ac:80:95:5b:5c:f8:
                    1c:d5:ac:4c:ef:e0:4c:ab:e0:40:8a:e1:cb:21:18:
                    cc:1e:1b:56:a8:07:2c:c3:51:21:9e:0b:5b:c4:dc:
                    bd:33:c9:e2:b0:75:04:4b:fa:94:f9:e4:71:ff:2b:
                    fe:21:63:fc:8f:d4:19:5a:6f:d0:26:2d:1d:cd:02:
                    49:0e:f9:63:88:a7:0b:b2:32:41:d3:6c:62:94:23:
                    63:cb:55:45:80:81:a8:ee:20:57:b8:d0:3a:ee:db:
                    7d:4f:c7:f2:08:a5:c0:0b:5c:c6:c3:f9:e9:69:71:
                    1f:68:38:32:1d:b1:6f:77:52:b9:88:c2:38:a4:db:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F2:3E:7A:A5:A0:C6:ED:30:A1:8A:23:75:D7:8D:B9:B5:3D:A7:28
            X509v3 Authority Key Identifier:
                keyid:C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a8:58:45:52:95:e1:9f:7d:6d:fd:d8:99:c0:7d:57:05:a4:
         d7:e9:65:14:9a:7a:bc:28:ee:1c:34:6e:a2:8f:77:88:23:ee:
         79:60:63:22:91:bb:97:10:e8:5f:f5:7d:94:4d:4a:63:b3:95:
         51:8d:bf:14:01:55:37:44:f6:98:85:c3:5e:6a:ce:58:2c:d5:
         bf:70:da:b6:70:81:e3:db:e8:5d:59:bb:3b:70:36:c1:a5:90:
         51:52:7d:f0:c6:85:ce:16:22:41:9a:c7:dd:55:c3:66:3e:5a:
         13:27:18:e1:f1:38:32:1d:8b:37:1e:b0:68:d5:83:40:4d:fd:
         22:4d:88:b5:7e:5c:8e:a0:7b:de:16:e3:4b:cc:0b:aa:5a:d3:
         72:54:1e:92:ac:fe:c2:07:a6:1b:6f:72:c0:ee:0c:c3:75:37:
         5e:4c:b2:6f:d4:53:6c:62:24:f8:e6:d9:65:09:64:64:8d:89:
         80:1e:9b:32:32:81:8d:e5:7b:e7:ee:5f:8b:10:e6:b8:bb:2f:
         fe:c7:71:77:53:70:ab:8f:14:be:bd:db:ca:07:fb:f7:81:b5:
         57:2f:fd:68:64:07:0f:7e:e6:3d:0d:04:d1:57:d3:73:35:f5:
         98:a8:97:d1:0e:ea:4c:9e:3b:91:6e:40:6d:58:88:ff:f7:13:
         0b:ba:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:58 2025 by rpki-client