Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          C+bY1sn8O1vNo0RGs9f7RmzsxXANFQxFViC3sHG4hjk=
Subject key identifier:   70:01:4E:0C:8E:65:70:AD:23:98:C7:FD:86:2A:D1:9B:73:0D:06:01
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          5A
Signing time:             Sat 23 Aug 2025 05:16:55 +0000
Manifest this update:     Sat 23 Aug 2025 05:16:54 +0000
Manifest next update:     Mon 25 Aug 2025 05:16:54 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: L23x1qbiU14EF++IIcnJ0ZmDhwKRLcf2FH/GCKAy4Ks=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Aug 23 05:16:54 2025 GMT
            Not After : Aug 25 05:16:54 2025 GMT
        Subject: CN=68a94ec7-1557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:c4:48:56:9d:8c:25:0d:13:aa:16:83:0e:
                    89:a4:2c:3c:96:4b:77:c0:7c:af:08:90:6c:ef:1e:
                    1d:67:ab:a1:6e:d7:6b:de:43:3a:e1:86:16:57:b4:
                    ba:74:05:47:dc:a0:84:49:a1:40:bd:9f:0e:9c:52:
                    72:64:71:13:94:02:99:8a:63:a6:0c:70:66:85:7b:
                    93:af:b0:6c:0d:b2:65:b1:b3:8b:40:5f:cc:a3:00:
                    cb:d9:69:05:18:d8:c4:dd:68:1a:68:34:47:fa:42:
                    7e:76:5e:9e:19:55:d2:87:9a:8c:94:b1:ed:da:c3:
                    0a:15:6c:a9:fc:f6:4a:db:d5:f7:9a:85:cc:49:5d:
                    f7:e0:22:1f:80:dd:f0:6e:af:e7:69:0a:e2:ee:16:
                    2b:55:d8:4e:4f:90:64:8a:b4:1e:e3:31:ba:b6:aa:
                    32:52:6a:75:d4:4b:4e:fa:d2:44:15:d2:3d:d2:a5:
                    cc:13:6d:b8:dc:73:b9:8e:5a:d6:44:55:a0:3d:11:
                    7a:3d:d3:3d:1d:f9:bd:27:be:d4:eb:5f:7d:e3:3c:
                    6a:ca:bc:30:55:71:0a:9e:c1:cf:be:59:1e:65:01:
                    58:f1:b6:e8:34:7d:ed:49:c6:50:60:9a:87:e9:5e:
                    53:63:06:3b:32:87:3a:b6:7b:06:4e:6b:de:d6:4f:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:4E:0C:8E:65:70:AD:23:98:C7:FD:86:2A:D1:9B:73:0D:06:01
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:89:49:c3:88:39:19:c7:f0:a6:59:c5:94:50:9a:8c:d0:15:
         13:af:9b:9a:52:8f:51:e0:a4:b5:00:fd:21:c1:07:7b:21:fa:
         f3:2f:36:8f:1c:bd:1c:05:35:0c:dd:0d:6e:67:ec:45:c2:13:
         ec:ad:12:3f:98:37:33:e9:95:35:76:97:0a:c4:39:a3:57:8c:
         ea:8a:16:11:a9:2a:b6:85:2e:6f:a1:15:51:83:7e:de:57:b3:
         b1:c1:51:b8:b0:35:74:67:de:fd:69:93:95:39:21:14:9b:b7:
         e0:c5:90:fa:4a:f6:bd:97:b6:5a:4b:6c:ae:86:22:04:b3:48:
         e7:fd:60:8c:a5:a7:c2:36:89:b6:d1:c0:2a:a5:95:74:fd:57:
         27:22:af:43:10:62:74:76:83:a2:8e:cf:08:4a:8c:a6:7b:1c:
         8d:1d:fe:4f:79:d2:39:a6:25:f2:fa:34:3c:4a:f5:dd:df:3c:
         70:05:87:81:f4:ff:02:4d:85:75:d8:b0:6b:00:47:22:5c:b3:
         1e:34:09:57:c6:6e:b7:44:91:9c:58:c1:4c:b2:ba:2a:19:93:
         e7:e8:4a:58:bb:49:12:e9:e6:d7:66:5b:1a:81:35:86:d5:7e:
         40:57:07:87:67:96:7b:1b:ea:99:61:de:c1:e4:b4:1e:da:11:
         18:53:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:41 2025 by rpki-client