Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          HmzKYRGSLfyL/jtx6Qj2QltJVAtt/J8UpoKraJS9pdk=
Subject key identifier:   96:8E:36:71:6C:DA:F9:CB:54:AA:89:12:8C:13:BB:2A:A9:E4:DD:12
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       0197
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          0194
Signing time:             Sat 23 Aug 2025 04:41:47 +0000
Manifest this update:     Sat 23 Aug 2025 04:41:47 +0000
Manifest next update:     Mon 25 Aug 2025 04:41:46 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: bocM2C2oXDsCzwvwGIwb3J41ullRV/gmDmFJYui0/k4=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF, serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: Aug 23 04:41:47 2025 GMT
            Not After : Aug 25 04:41:46 2025 GMT
        Subject: CN=68a9468b-bcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:1e:d4:65:7b:64:38:01:0b:2e:d8:e4:ef:
                    98:49:b3:e8:f7:48:d7:d7:d7:9d:3b:0b:70:5c:57:
                    a0:fa:72:62:47:3f:64:25:6d:24:89:65:c2:12:f7:
                    62:f5:33:d0:9d:de:12:b2:6a:e0:b2:ef:3f:f7:e0:
                    78:6e:1e:13:8d:a2:99:60:06:45:94:24:23:24:e2:
                    d9:8c:35:69:76:1a:da:39:5e:35:94:b7:ee:2f:ab:
                    d6:14:b6:d9:88:64:ad:a2:6e:2f:80:8f:9c:51:7b:
                    77:20:4c:0b:ff:bd:d0:ed:e7:07:f3:3c:eb:84:b8:
                    07:6a:01:36:89:52:15:11:0c:2b:4a:3b:d8:57:fd:
                    a7:98:46:8a:a4:3e:a6:d0:6f:78:3d:31:5b:20:41:
                    56:63:9f:a3:d3:e9:b0:6d:39:f2:86:13:72:8e:59:
                    70:b1:6f:88:b3:80:19:8d:b6:df:9f:2c:52:ee:ef:
                    76:9f:c1:a2:c5:fa:bb:d8:34:ba:a9:9c:1d:95:e5:
                    bf:36:45:e8:73:31:c6:c8:0d:bc:79:4e:2b:77:a3:
                    4d:11:03:be:3d:80:c9:aa:aa:b3:d6:7f:42:20:22:
                    cc:c4:1f:aa:6c:c2:c6:a1:b2:80:bd:71:a4:99:c3:
                    9f:c5:c3:1b:94:cd:9d:1a:ec:cd:9a:4a:cd:b5:a8:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:36:71:6C:DA:F9:CB:54:AA:89:12:8C:13:BB:2A:A9:E4:DD:12
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:04:cc:30:7a:3c:56:36:3b:b2:e3:5f:44:d7:ec:e5:a3:
         9a:fd:fe:17:a4:fc:ee:11:19:80:1f:e6:b7:22:f2:a9:de:e7:
         17:20:f9:51:00:e5:a1:9c:7c:8a:80:05:73:49:ab:db:59:05:
         28:48:e2:1b:57:da:0c:cb:fc:6b:6c:0d:df:52:fb:47:74:5b:
         2d:51:4d:0c:46:1b:f7:43:c8:27:9d:61:22:65:d0:29:42:de:
         3b:ac:b7:b9:70:c0:06:8d:9e:79:8a:63:c7:a2:3b:7c:1d:db:
         c7:72:22:bc:ab:52:40:e1:2f:ca:a1:ce:4a:90:41:6d:8d:95:
         0c:b2:e5:64:06:68:26:8b:cc:d0:8f:e1:6f:1b:84:d5:63:99:
         9b:41:1d:d1:23:6f:fc:09:ab:0c:ff:b3:b4:1d:ef:bb:c6:35:
         a1:a0:15:e1:6f:d7:69:47:d3:93:94:b6:22:0a:19:1f:d1:41:
         93:b3:7f:a5:19:d9:ea:4b:52:6e:4e:7d:89:16:75:dc:a6:2d:
         ef:8a:f8:2b:30:30:d0:67:60:2d:6e:95:16:eb:05:a2:04:f3:
         b8:d0:61:13:3b:3a:43:8b:40:86:f1:71:50:f1:44:cb:ac:64:
         28:1a:99:e5:c3:9d:34:d4:da:cc:48:bb:50:02:41:0e:65:d6:
         5c:f2:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:25 2025 by rpki-client