Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
File:                     IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft (raw, json)
Hash identifier:          USn36BBFundy33isJEksXGWk8NoqUUrGBv+fLEbHuy4=
Subject key identifier:   08:D2:79:AD:04:F6:50:0A:E6:09:23:03:B6:91:E6:BB:49:EB:A1:33
Authority key identifier: 21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Certificate issuer:       /CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Certificate serial:       03C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
Manifest number:          03C0
Signing time:             Sat 23 Aug 2025 03:28:29 +0000
Manifest this update:     Sat 23 Aug 2025 03:28:28 +0000
Manifest next update:     Mon 25 Aug 2025 03:28:28 +0000
Files and hashes:         1: IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl (hash: S3S7r5TW4Tk+U5gOPt48ziFgh6MtI03YyKj8gqd7iJM=)
                          2: 46769BA6A71011ED8E13C6ADF1222468.roa (hash: R9x99ks/pEliB0qi0nkW24IgeK+W3nFZnfzH3UhqkQ8=)
                          3: 16E36298A71011ED8B382EADF1222468.roa (hash: YwrcpofXcW+TieniRsmACWrSZmHA8Ph3c8IA66MXe/8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A1BAF, serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
        Validity
            Not Before: Aug 23 03:28:28 2025 GMT
            Not After : Aug 25 03:28:28 2025 GMT
        Subject: CN=68a9355d-a505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:f2:da:bd:87:e0:f2:42:d3:58:3e:a5:69:
                    a4:71:8c:e9:1f:ac:e2:09:89:9c:f4:e8:8f:6f:f5:
                    b9:fe:4b:15:d5:66:db:50:8d:33:4b:e3:96:b4:4e:
                    58:77:78:c1:7b:03:ec:af:f3:c3:7b:b9:78:b8:7b:
                    b9:c6:12:82:06:47:71:97:78:3b:16:ff:bc:ac:82:
                    32:ce:c8:2a:92:f7:58:57:f0:68:d2:d1:58:79:e0:
                    18:c3:25:2b:b6:a1:2e:5a:1b:6a:3c:b0:1a:8f:8d:
                    a5:b1:23:a8:ae:be:ec:d1:03:5f:55:43:d2:80:4b:
                    f5:83:d3:a8:c7:d7:b8:55:95:6e:cc:9a:ab:a5:d0:
                    2d:7b:ed:85:ff:e4:e4:a7:84:3b:4c:14:4a:ab:2c:
                    aa:8e:41:c2:b4:e0:19:01:c3:bf:59:4f:38:57:f1:
                    7e:8d:f6:61:05:c7:03:bc:3d:e9:8b:be:a7:c9:3c:
                    a5:de:09:1e:98:42:64:ef:32:f3:15:d0:51:4c:a4:
                    dc:3b:ac:5e:03:ab:46:89:17:46:0a:06:12:13:43:
                    ae:52:43:0a:a5:5a:5a:a4:4d:4a:e2:b1:8d:80:fd:
                    9c:a9:b5:c5:90:fa:9f:80:b5:61:fc:f5:e4:ac:8a:
                    1a:49:dd:6d:77:c4:9d:7d:60:a9:72:27:d2:7b:99:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:79:AD:04:F6:50:0A:E6:09:23:03:B6:91:E6:BB:49:EB:A1:33
            X509v3 Authority Key Identifier:
                keyid:21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:be:fb:4e:b0:99:5a:03:e3:51:25:57:52:b3:36:f6:7a:5e:
         93:17:2f:3a:6f:4f:c3:25:af:c7:6d:88:eb:f0:0d:2c:3c:03:
         e4:5f:42:21:cb:36:82:00:c0:ca:c0:98:eb:b4:73:4f:ae:89:
         3f:7a:34:11:93:b4:40:bc:9b:00:38:ee:ba:fa:f6:39:44:4b:
         b2:a0:50:59:de:a4:6e:44:9d:64:5f:e6:27:11:e9:84:65:c0:
         ab:28:2f:22:bb:d5:18:d5:c8:e6:62:98:f7:e8:68:9b:d7:6c:
         4e:27:f1:cb:b6:89:39:c5:2d:c1:51:57:21:c0:df:99:75:9d:
         a1:d4:6f:c0:ef:25:a1:85:cd:14:9b:b3:c1:a9:e5:86:63:49:
         71:75:71:87:d6:55:bb:36:51:c2:35:97:f4:09:3e:42:20:46:
         3c:ce:51:bd:c1:03:59:cf:ae:08:2a:12:7c:57:f7:82:dc:f6:
         f6:8f:5b:25:9d:c4:1e:83:e6:44:cb:34:7a:4b:aa:ed:f5:9e:
         17:4d:3a:5c:6f:85:a1:b4:41:54:2d:17:8f:e9:d0:c3:bf:fc:
         ce:0f:68:e7:f1:cd:70:53:06:c9:8d:bf:40:99:ad:c6:42:95:
         c8:61:cf:26:82:f8:f7:59:b0:1b:97:90:e7:e8:9e:93:a2:94:
         a5:65:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:42 2025 by rpki-client