Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
File:                     OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft (raw, json)
Hash identifier:          zu0X4GGiVxtpXfWO7gN5ouoC4IUHMeyKM5djAu9DhCA=
Subject key identifier:   2D:45:EF:4A:61:97:52:40:40:26:B3:BA:6D:58:F8:2A:77:66:9E:30
Authority key identifier: 38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85
Certificate issuer:       /CN=F36B4943AF/serialNumber=3876135BFCA9AAF0B00B42D87651846E70AC4785
Certificate serial:       0492
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
Manifest number:          0491
Signing time:             Mon 20 Oct 2025 03:03:13 +0000
Manifest this update:     Mon 20 Oct 2025 03:03:13 +0000
Manifest next update:     Wed 22 Oct 2025 03:03:13 +0000
Files and hashes:         1: OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl (hash: Orkc0wbjkjwNB1KZXiUUOeVidwDm64ArZ8NYSNB1WIM=)
                          2: 5F5C762E343B11ED8107BC8DF1222468.roa (hash: UY9fesmRjhCAtSt7ylIqZRb84VTjMeAJ6kuCyASadn4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 03:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4943AF, serialNumber=3876135BFCA9AAF0B00B42D87651846E70AC4785
        Validity
            Not Before: Oct 20 03:03:13 2025 GMT
            Not After : Oct 22 03:03:13 2025 GMT
        Subject: CN=68f5a671-4780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:45:cc:8c:b3:1c:85:ae:3c:4c:97:0f:6d:
                    c7:bf:fe:b6:f5:b5:ae:6e:2f:de:b3:de:50:00:02:
                    4a:d1:59:f8:61:0e:22:b2:50:3d:e7:21:9f:a8:94:
                    fb:0a:41:85:ab:49:12:84:f1:15:56:45:a8:02:58:
                    52:bb:f3:82:92:42:5c:5c:50:67:60:79:69:d6:f4:
                    ba:3a:df:31:dc:d9:97:bf:35:2a:0f:c2:9b:41:93:
                    c6:1f:99:04:89:8a:39:77:e6:63:a1:a4:c1:7b:e3:
                    c4:32:a7:8c:2a:18:44:a3:23:31:3d:4f:1a:d8:68:
                    82:7c:3f:7d:40:ab:49:86:ad:d5:f5:7f:80:5b:04:
                    a2:3b:8c:89:57:21:a1:76:0d:bc:ef:6f:9e:7c:69:
                    6b:b9:38:38:9a:15:68:3f:96:b4:36:a4:98:ba:62:
                    75:f5:8c:ce:22:1e:12:02:10:f3:5a:16:02:8f:a0:
                    54:09:cd:85:4d:f6:4c:f2:48:ef:36:bd:f8:4f:dd:
                    15:73:f6:ec:67:bb:c4:71:de:e2:f5:5a:11:da:08:
                    e7:fa:b6:91:63:67:18:cb:4e:2b:c9:3f:e4:f5:43:
                    cd:f4:18:53:3b:0a:f3:8b:9c:15:86:33:28:ec:7a:
                    29:5b:34:2a:7e:15:bf:c3:82:5d:96:ab:91:4c:f4:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:45:EF:4A:61:97:52:40:40:26:B3:BA:6D:58:F8:2A:77:66:9E:30
            X509v3 Authority Key Identifier:
                keyid:38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:73:54:e4:48:d6:10:ea:d5:c7:d7:8f:41:52:fc:ca:13:49:
         25:b6:f8:dd:3d:5e:cc:bc:93:60:98:98:a6:a2:2a:f8:cf:c6:
         20:6e:a8:b4:15:5f:d5:87:9b:91:f7:78:4f:f4:50:6f:13:fd:
         9a:0b:87:74:cd:1c:37:9a:62:2d:ff:36:3e:bb:66:1b:fd:9d:
         1a:e0:4e:b1:56:09:88:bd:2e:f7:c1:ff:d0:e1:dd:0c:9f:0f:
         e9:19:c8:b3:6c:60:fa:b5:43:6c:0e:2f:57:81:81:a9:d4:e9:
         c6:15:14:a4:f1:61:81:db:59:58:0c:bb:cf:36:9d:27:67:63:
         73:2e:60:28:db:ed:df:32:7b:1c:a0:5f:40:3e:0f:69:a8:84:
         1d:1d:51:0f:f9:5f:06:41:f9:2b:d6:92:a3:a7:dc:da:3d:65:
         51:ae:93:71:2b:bd:21:9e:33:97:f8:a3:c9:f9:24:04:d3:80:
         a4:1a:89:2c:62:58:31:fe:0b:0e:55:2f:8f:49:24:7e:9b:90:
         70:ad:2e:32:b3:14:0e:25:0e:21:4a:02:a0:2e:50:d9:ef:9f:
         d1:35:2b:86:db:93:d4:dc:1d:c7:ae:a5:47:19:d4:8a:60:28:
         2f:f1:f2:b4:22:02:8f:19:af:fc:0c:2d:13:65:41:18:6f:e1:
         b4:1a:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:05 2025 by rpki-client