Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          3MJkQx4eDswabm6OVWd3EMbo+7MYlKwgL0bRh/Yp0bk=
Subject key identifier:   55:E9:0B:E4:78:4A:A5:7F:E6:20:5D:6C:DA:AA:32:9E:75:47:02:70
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       02D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          02CB
Signing time:             Mon 20 Oct 2025 04:00:24 +0000
Manifest this update:     Mon 20 Oct 2025 04:00:23 +0000
Manifest next update:     Wed 22 Oct 2025 04:00:23 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: 1ooGV1dQFYSb4pq5IjXFLff8VN1uQBK6QWLTjW7cC9c=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF, serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Oct 20 04:00:23 2025 GMT
            Not After : Oct 22 04:00:23 2025 GMT
        Subject: CN=68f5b3d8-a7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:21:92:ee:f2:c0:fd:22:cf:d9:42:0d:1f:
                    4e:32:c2:80:ac:af:11:e7:9b:94:a4:5b:6d:5e:f0:
                    d5:7a:47:f6:c4:8e:a3:09:6e:48:ce:32:c0:10:33:
                    92:0e:8c:6c:e7:c8:25:d1:17:c4:df:f7:65:c7:1c:
                    fa:7a:b9:fd:f7:1b:5c:6f:91:20:3c:81:46:2c:cd:
                    d0:6d:7e:15:36:a2:0b:eb:e5:56:d1:91:e8:bb:43:
                    75:10:59:7a:22:80:e9:3f:bf:a1:60:53:8f:cf:24:
                    fc:26:a2:ad:ae:a4:bf:a6:ee:44:a7:3a:57:b2:75:
                    d2:d5:61:24:71:34:12:46:d0:2c:b4:21:c3:d9:d0:
                    6b:6c:a8:07:e7:b1:29:eb:9d:d1:76:ed:c9:0c:77:
                    2a:1d:c7:f8:08:be:b3:1d:a8:47:82:32:3b:8d:89:
                    b5:d9:fd:03:cc:be:7a:b0:ae:cf:0e:c2:62:d9:a6:
                    0f:c6:f4:0a:a9:3a:b5:1c:be:a8:2f:bc:ed:87:cc:
                    69:71:13:18:9a:d3:1e:f5:2b:9e:ab:66:af:df:55:
                    37:cc:af:a4:c5:87:ed:4c:59:3f:62:42:02:37:ba:
                    0f:b6:d9:5b:c4:9c:02:f2:bb:f0:39:2a:67:92:f2:
                    a5:0d:9e:97:86:72:6e:bb:ba:91:2e:f9:e9:88:72:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E9:0B:E4:78:4A:A5:7F:E6:20:5D:6C:DA:AA:32:9E:75:47:02:70
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:85:30:23:9b:9c:b9:a7:18:0f:44:69:49:10:d6:e2:43:8b:
         c0:c4:dc:99:fc:5e:f1:82:af:e0:d8:63:4a:8c:67:75:ac:80:
         f9:86:c5:fe:8a:d2:af:13:75:0e:6b:2b:f1:c3:17:3f:2c:37:
         0d:21:2b:1e:b0:4b:1d:40:0a:0b:60:ef:e4:f9:2a:b3:40:ed:
         85:e2:70:e1:85:43:bc:f3:e4:39:5e:1a:3b:e5:d7:1a:45:6e:
         10:9d:fe:55:f8:3b:e6:31:05:9e:ef:40:ba:ba:2c:de:12:c5:
         65:6b:77:58:74:3d:70:1d:31:f6:b3:6b:7e:8c:9b:15:03:26:
         8b:70:cd:94:99:99:c5:95:8b:19:23:e3:36:9f:5d:3f:98:75:
         42:2e:4e:f5:fa:95:87:23:f5:17:6b:67:5a:32:58:21:ca:68:
         cc:0a:1a:c2:a5:ca:3b:6e:58:72:99:d4:34:41:c1:cb:77:e0:
         7a:99:6b:72:0d:58:b5:38:6a:94:97:60:ae:2f:15:ea:0b:2d:
         47:9f:87:7d:13:5f:c0:a4:0b:eb:fd:91:a7:56:de:5b:5e:56:
         a0:13:49:47:52:02:77:eb:11:6e:74:3c:86:98:ff:cf:bf:78:
         12:bd:bb:04:f8:05:4c:b5:c7:bd:00:d9:44:5d:29:90:ce:7d:
         db:a2:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:58:26 2025 by rpki-client