Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          mEZvzvDUHwfBzZ+jOepSM+6yWNHqgmYmoZS3dxlaIw8=
Subject key identifier:   A3:BA:7A:A1:C0:32:EE:B9:48:C1:33:9F:2E:97:16:5D:1C:D2:43:7D
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       0372
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          0371
Signing time:             Mon 20 Oct 2025 03:36:41 +0000
Manifest this update:     Mon 20 Oct 2025 03:36:40 +0000
Manifest next update:     Wed 22 Oct 2025 03:36:40 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: ypYrlhLgtRdzMm7Kriv5WURNGIc1Zd83IPt6wv44oT4=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Oct 20 03:36:40 2025 GMT
            Not After : Oct 22 03:36:40 2025 GMT
        Subject: CN=68f5ae49-684f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:89:2a:f3:be:22:a2:f9:c0:4a:9a:2b:2d:
                    2d:fe:92:8a:19:22:4c:9f:89:dd:2a:33:ab:b8:92:
                    6c:e7:71:94:a0:c3:31:77:a1:79:00:84:32:c3:68:
                    cd:df:db:38:8f:52:9d:93:34:9c:e9:d7:c1:1b:40:
                    2c:98:6c:a8:f9:3b:75:e1:2e:02:a2:ef:64:26:96:
                    a5:95:f3:1b:d6:57:65:96:e7:e3:45:d7:8f:13:82:
                    44:e1:40:d5:42:2c:61:9f:d2:b7:11:5c:63:c9:e6:
                    09:57:0f:62:1e:a3:be:cf:85:30:fa:99:9a:ec:21:
                    53:81:74:3a:fa:29:cf:4e:ff:ed:9c:5f:d4:ce:12:
                    69:6b:e1:02:7d:21:96:46:61:c6:89:d0:2a:df:e7:
                    1a:ed:4e:81:cf:53:c6:2d:19:24:03:07:79:0d:a5:
                    8e:29:8f:3d:ed:51:0d:0a:3a:e3:a0:6b:de:f4:f9:
                    e6:fa:15:7c:ca:f3:17:ce:d8:14:1d:e5:e2:5d:57:
                    78:ae:51:27:c4:dd:55:87:f2:e7:d1:e5:ac:1a:35:
                    20:23:0f:21:b4:63:51:a8:23:1f:d2:18:09:2c:6e:
                    f4:90:15:ab:60:43:5f:b4:2f:73:a1:1f:d6:c8:46:
                    2b:64:56:22:93:41:62:66:6c:37:53:f1:2a:db:49:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BA:7A:A1:C0:32:EE:B9:48:C1:33:9F:2E:97:16:5D:1C:D2:43:7D
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:1b:b9:b1:2c:47:c4:e3:8e:79:c9:90:44:5d:62:64:ed:
         5e:d4:00:d3:18:5e:6b:37:56:23:4f:cb:a8:e3:8c:d1:01:10:
         12:0a:ec:71:da:a9:4f:06:be:32:46:42:5a:8d:29:bd:01:97:
         60:4e:b0:ac:ba:bd:6f:24:8c:53:75:35:89:57:02:7c:f2:37:
         ed:8e:ff:a0:bf:78:b5:cc:1a:77:ee:27:d6:5c:f7:e9:81:a5:
         2e:8b:53:83:ed:a6:95:dd:a4:e1:72:2b:7b:3e:69:b7:2e:93:
         b7:1c:c5:6e:2d:fe:85:95:3c:38:52:3c:fd:03:39:ae:39:29:
         56:75:08:e6:29:51:81:15:88:28:67:6a:6a:22:59:61:a3:8b:
         fd:9c:51:1b:ac:01:af:da:7f:d6:c9:4a:ae:0f:07:45:f3:9e:
         53:c6:24:63:a4:f3:2b:85:bf:50:6f:a3:b9:2a:52:37:e2:70:
         52:a6:bc:b4:e3:11:99:b3:f3:f4:33:a9:a7:77:d7:73:6f:09:
         3b:24:63:31:4f:08:00:93:48:87:9f:ad:86:fb:e5:03:1a:b7:
         10:4c:d7:38:96:f6:e9:12:9a:db:5a:5f:36:71:33:5b:89:92:
         10:ac:55:a9:bf:3b:80:b3:40:8b:04:4f:3d:80:83:c8:cb:3c:
         75:e9:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:43 2025 by rpki-client