Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
File:                     yPkMVon3YrNhQtkt1sUlegJhrds.mft (raw, json)
Hash identifier:          XKjUYl6Ti3FVtMh/CzqJbAhYv9hJmjdIgyyvs+9EMUI=
Subject key identifier:   AC:42:B3:9C:98:93:4D:01:44:E5:06:A2:4D:EC:4F:06:30:14:54:F4
Authority key identifier: C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB
Certificate issuer:       /CN=F3694F05AF/serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
Certificate serial:       04A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
Manifest number:          04A2
Signing time:             Mon 20 Oct 2025 03:00:42 +0000
Manifest this update:     Mon 20 Oct 2025 03:00:41 +0000
Manifest next update:     Wed 22 Oct 2025 03:00:41 +0000
Files and hashes:         1: yPkMVon3YrNhQtkt1sUlegJhrds.crl (hash: wj9Sog0Vp0me+vztyvvjimW3JNF5+CZ5I4Gw6KOgSbY=)
                          2: 6ECEC2DC6C0911EDBFB8DA80F1222468.roa (hash: Qd6bY+8iuvDaqKzd/WcuiQUwTCse/+zVhf0U8LadsWg=)
                          3: D8E35AAC6CAE11ED8CAEFAC8F1222468.roa (hash: kqrWgEOzDnCn82yozTeD80QmS2hjPuYLw7e7eTjqcVU=)
                          4: A151A4662ACF11EDA1204EE7F1222468.roa (hash: qoPnGPjM6gW9jZ+S12ZaxBTKQE06UsPi3piDTRaCbeA=)
                          5: AE443020498E11EDA2B1F8E7F1222468.roa (hash: AHhgL0rZvCxvAyYSEc5OQFHil4XndoOT9Znv4QX+e+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3694F05AF, serialNumber=C8F90C5689F762B36142D92DD6C5257A0261ADDB
        Validity
            Not Before: Oct 20 03:00:41 2025 GMT
            Not After : Oct 22 03:00:41 2025 GMT
        Subject: CN=68f5a5da-eb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:82:1f:d0:c4:2c:35:09:b0:7d:11:81:97:0f:
                    a4:0e:e8:97:04:79:e6:04:97:b2:bc:b8:99:29:21:
                    95:32:6c:d9:60:b6:d3:00:52:73:cc:3c:65:0b:8a:
                    6e:3a:dc:9b:bd:35:f3:fe:34:6d:46:0c:ce:90:3e:
                    ed:4a:5e:0f:bf:5a:48:55:d4:0e:66:dd:53:aa:66:
                    14:f2:2c:d8:9c:26:bf:40:f0:61:06:f8:6c:c6:3a:
                    16:aa:75:02:a4:d1:ba:ac:ad:06:09:0f:ed:fd:3f:
                    82:0e:43:30:e9:d8:46:f0:1d:33:a4:02:c5:93:57:
                    36:db:77:b2:40:cd:f7:91:d3:97:7e:93:63:b9:a4:
                    94:83:86:e8:be:1c:b4:85:c0:1e:44:37:0b:4d:89:
                    33:c3:8a:3d:20:e1:ba:4a:d1:47:40:e9:ca:ea:8c:
                    c2:fd:31:ee:98:59:27:a0:10:f3:c4:ce:ed:eb:cd:
                    ea:28:32:b4:c3:e3:31:a6:b8:46:c8:3e:1b:ac:54:
                    09:32:e5:b2:88:54:22:74:4f:79:db:99:fa:57:eb:
                    d2:3b:65:83:99:b0:a2:a3:44:a2:c3:66:ac:bc:ea:
                    ff:e1:a3:70:60:9b:08:5a:f8:26:51:1b:2e:78:01:
                    31:d5:1c:55:3b:e9:f9:4d:5a:6d:13:0f:a9:e9:52:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:B3:9C:98:93:4D:01:44:E5:06:A2:4D:EC:4F:06:30:14:54:F4
            X509v3 Authority Key Identifier:
                keyid:C8:F9:0C:56:89:F7:62:B3:61:42:D9:2D:D6:C5:25:7A:02:61:AD:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yPkMVon3YrNhQtkt1sUlegJhrds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694F05/3F96DAD82AB211EDAE73A79CF1222468/yPkMVon3YrNhQtkt1sUlegJhrds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:4c:1a:27:3f:8d:37:b7:6a:1c:71:a8:bf:e3:c0:52:aa:
         f2:1d:17:5e:11:0e:09:20:6e:98:6b:a0:73:05:9b:28:3f:79:
         bd:5b:bd:3a:cb:59:23:85:78:de:23:dc:2d:15:e2:76:f3:78:
         2a:50:02:97:af:68:04:d9:c2:06:80:90:4d:54:12:34:0e:c2:
         31:4a:b8:19:aa:f6:52:f7:1a:95:1d:99:2b:86:bd:13:c6:28:
         fa:ff:53:15:ce:45:ab:f9:71:c3:28:ef:67:87:00:72:b2:b3:
         bf:bf:d0:0f:f1:c3:c9:4f:82:0f:ab:c7:c8:ef:33:7a:c7:61:
         d5:ac:55:fd:82:3a:ac:ce:80:18:ba:c6:53:65:c4:7a:ba:a8:
         57:b5:6c:6e:49:03:e3:0d:64:e3:17:6f:d8:9b:3f:71:0e:62:
         d3:35:a5:9a:13:67:fb:b8:5e:6e:d4:40:d2:78:35:67:24:a3:
         18:ca:83:8d:46:ad:bb:a2:d8:2e:98:05:3c:ef:ea:98:63:77:
         df:12:fa:a5:c2:07:73:5d:20:18:05:21:73:dd:4d:80:3f:30:
         87:82:ee:45:b3:e2:0b:71:da:e9:ea:0e:fc:b9:44:7e:f0:51:
         52:ad:37:e0:d7:03:f4:34:6a:b0:55:6e:25:ad:ba:73:93:f2:
         8d:41:e0:b0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTRGMDVBRjExMC8GA1UEBRMoQzhGOTBDNTY4OUY3NjJCMzYxNDJEOTJERDZDNTI1
N0EwMjYxQUREQjAeFw0yNTEwMjAwMzAwNDFaFw0yNTEwMjIwMzAwNDFaMBgxFjAU
BgNVBAMTDTY4ZjVhNWRhLWViODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxgh/QxCw1CbB9EYGXD6QO6JcEeeYEl7K8uJkpIZUybNlgttMAUnPMPGUL
im463Ju9NfP+NG1GDM6QPu1KXg+/WkhV1A5m3VOqZhTyLNicJr9A8GEG+GzGOhaq
dQKk0bqsrQYJD+39P4IOQzDp2EbwHTOkAsWTVzbbd7JAzfeR05d+k2O5pJSDhui+
HLSFwB5ENwtNiTPDij0g4bpK0UdA6crqjML9Me6YWSegEPPEzu3rzeooMrTD4zGm
uEbIPhusVAky5bKIVCJ0T3nbmfpX69I7ZYOZsKKjRKLDZqy86v/ho3Bgmwha+CZR
Gy54ATHVHFU76flNWm0TD6npUgFrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrEKz
nJiTTQFE5QaiTexPBjAUVPQwHwYDVR0jBBgwFoAUyPkMVon3YrNhQtkt1sUlegJh
rdswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk0RjA1LzNGOTZEQUQ4MkFCMjExRURBRTczQTc5Q0YxMjIyNDY4L3lQa01W
b24zWXJOaFF0a3Qxc1VsZWdKaHJkcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lQa01Wb24zWXJOaFF0a3Qxc1VsZWdKaHJkcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTRGMDUvM0Y5NkRBRDgyQUIyMTFFREFFNzNBNzlDRjEy
MjI0NjgveVBrTVZvbjNZck5oUXRrdDFzVWxlZ0pocmRzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA41UwaJz+NN7dqHHGov+PAUqryHRde
EQ4JIG6Ya6BzBZsoP3m9W706y1kjhXjeI9wtFeJ283gqUAKXr2gE2cIGgJBNVBI0
DsIxSrgZqvZS9xqVHZkrhr0Txij6/1MVzkWr+XHDKO9nhwBysrO/v9AP8cPJT4IP
q8fI7zN6x2HVrFX9gjqszoAYusZTZcR6uqhXtWxuSQPjDWTjF2/Ymz9xDmLTNaWa
E2f7uF5u1EDSeDVnJKMYyoONRq27otgumAU87+qYY3ffEvqlwgdzXSAYBSFz3U2A
PzCHgu5Fs+ILcdrp6g78uUR+8FFSrTfg1wP0NGqwVW4lrbpzk/KNQeCw
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:08:10 2025 by rpki-client