Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
File:                     YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft (raw, json)
Hash identifier:          I2jPV7mKqpZy/z/AHViTzDw9GuQZ38PW1zmrk6WCrSE=
Subject key identifier:   ED:EE:ED:19:68:E8:49:EC:7D:4F:5C:06:BE:4E:40:65:F5:BA:D1:46
Authority key identifier: 61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96
Certificate issuer:       /CN=F36A42DFAR/serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
Certificate serial:       031F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
Manifest number:          031D
Signing time:             Mon 20 Oct 2025 03:49:13 +0000
Manifest this update:     Mon 20 Oct 2025 03:49:13 +0000
Manifest next update:     Wed 22 Oct 2025 03:49:13 +0000
Files and hashes:         1: YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl (hash: 9O10IPB57mwl083OV+ldTqZuQJfQbpdCs0xMR1As2+k=)
                          2: 3D7EECA2A8A711EFA1D51794762E951A.roa (hash: W7jAbtCXoRcwI8Z2NvEM0UC/9LNhTC0NKo9Io5pOlnA=)
                          3: 676C625A4D6411EEBB83C7834AD9E6FC.roa (hash: iiE25Dzd3pzLzhX8ubXQvlCirPYfptGG+RIQQE+HLD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
                          rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 03:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A42DFAR, serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
        Validity
            Not Before: Oct 20 03:49:13 2025 GMT
            Not After : Oct 22 03:49:13 2025 GMT
        Subject: CN=68f5b139-01cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:aa:f0:5b:c9:f8:8c:22:06:03:db:42:84:
                    c6:25:a1:a1:39:82:e4:fc:25:a3:93:68:48:8f:cf:
                    fe:36:ea:56:1c:f1:82:e0:de:e4:42:78:d8:31:b0:
                    5f:8f:d1:57:d0:f5:e4:cd:2f:5e:23:18:67:25:c5:
                    0f:98:ad:9e:35:3b:19:ef:bc:ae:f7:26:24:8a:cf:
                    a9:c3:81:c3:7b:19:2b:e6:c0:14:f5:0b:65:b2:3a:
                    1f:a2:16:87:1e:3e:be:ae:1a:c5:70:a9:ca:a3:73:
                    9a:a7:14:35:d5:ae:7e:6a:47:28:52:0c:78:49:62:
                    3b:20:94:00:24:63:e5:22:ff:9b:52:1a:e1:dd:eb:
                    95:fb:57:9d:b8:fd:04:fe:70:de:08:e6:8f:f7:03:
                    64:a2:d7:75:33:0e:b6:f0:0d:8a:63:1c:40:1f:91:
                    9c:a4:3a:3a:e6:c9:3a:18:6a:c5:76:39:3c:3f:b7:
                    8a:7f:5d:37:13:4e:bf:04:c8:4f:5a:9c:59:d0:ec:
                    75:0f:5f:97:05:b5:27:69:26:23:03:34:a9:14:d2:
                    f2:4f:db:47:ed:c9:23:a7:36:19:07:90:cd:20:89:
                    d8:73:5d:a5:14:86:fc:ba:64:91:ef:b1:60:5f:1f:
                    4a:02:7c:a7:80:cc:53:07:66:ca:4e:d0:4e:df:1b:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:ED:19:68:E8:49:EC:7D:4F:5C:06:BE:4E:40:65:F5:BA:D1:46
            X509v3 Authority Key Identifier:
                keyid:61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:54:ea:d2:3f:11:c5:c8:68:55:29:e3:47:a3:ff:df:2d:
         75:75:25:1b:bf:e6:a8:23:a6:86:8a:39:7f:b6:f9:00:8d:1b:
         91:a5:12:e4:fa:a9:2e:df:b8:64:2b:0e:95:83:da:7c:b0:17:
         a1:9c:c8:a8:38:c1:af:c5:5f:16:f7:af:50:26:64:1f:75:52:
         e0:5e:1d:02:52:37:fc:50:d1:a6:1a:a4:9c:5f:77:55:3e:01:
         b0:30:26:13:92:f7:e1:ea:3f:4a:6b:cd:84:04:ac:3c:67:6a:
         82:fc:26:3b:a9:ca:5c:47:92:2a:e5:ed:34:30:26:2b:de:39:
         7f:6b:87:27:50:b5:ac:11:15:d3:06:5e:4f:1c:e1:10:bf:5d:
         0d:1d:14:b4:a4:a1:46:9d:6a:9a:ca:a3:35:c6:01:18:39:55:
         88:7e:18:d2:e6:d7:5e:3c:83:56:86:f3:12:14:2c:c0:a5:23:
         43:b4:20:bf:87:12:35:10:b7:7b:44:a5:75:fc:a3:56:09:b1:
         67:52:da:44:cc:e5:cb:8d:18:37:46:38:66:8e:e8:fb:25:7a:
         4f:9e:9e:e5:69:c6:36:10:db:28:d5:fe:3b:1a:42:d3:fd:70:
         b8:b6:03:cc:4a:dd:4d:eb:25:29:85:b7:f8:dd:60:2a:a6:f4:
         d9:12:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:26 2025 by rpki-client