Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
File:                     Y8NA4QrXVoDHqjzdANvkjX1BneY.mft (raw, json)
Hash identifier:          hgwqtWTvrjxjJ+eejlzdt0RvG8+fFojQQMttiMWRz7o=
Subject key identifier:   10:3A:33:E3:76:CF:58:C9:AB:DB:8E:86:62:9C:06:FF:A6:4C:17:9A
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Certificate issuer:       /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial:       062F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
Manifest number:          062D
Signing time:             Mon 20 Oct 2025 02:22:41 +0000
Manifest this update:     Mon 20 Oct 2025 02:22:40 +0000
Manifest next update:     Wed 22 Oct 2025 02:22:40 +0000
Files and hashes:         1: Y8NA4QrXVoDHqjzdANvkjX1BneY.crl (hash: kZs2o8Iwwk6Tuw5l4kKLureXzUFL8+GMztq0iTZhh4s=)
                          2: E22275A0F42B11EB8DE13535D8A014CE.roa (hash: ixRAeAOi1PIeYWgmp7z7mBTbmz/nQmCMeTxu8P6RJX8=)
                          3: 75DE7694F4E611EBBD7D085AD8A014CE.roa (hash: 3ZB2CJ/bayIERLBg5mRjM6sGFJ1JWNYNoqaW/CbBpAw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
        Validity
            Not Before: Oct 20 02:22:40 2025 GMT
            Not After : Oct 22 02:22:40 2025 GMT
        Subject: CN=68f59cf1-e34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:d5:fb:63:3a:c0:24:a5:4d:b0:bd:6c:b5:
                    69:bb:f6:d7:30:af:33:48:0b:f0:22:68:02:90:07:
                    c5:f7:9e:e5:5e:8f:8a:c9:26:86:8e:e6:d9:b9:16:
                    04:fb:18:b9:44:35:00:86:fd:5c:69:f5:96:68:1b:
                    de:0f:54:0b:db:c9:cd:2b:41:6d:55:b5:63:5c:93:
                    2f:fc:68:c1:ca:de:bd:f6:cf:61:5f:9e:d5:7a:4b:
                    7c:53:50:9d:b1:08:56:d1:71:61:2f:a8:c6:92:9f:
                    21:e9:eb:71:d9:6d:27:23:da:54:3a:1c:5a:9d:17:
                    e7:07:92:dd:65:7a:10:aa:1d:31:8a:2b:22:1b:e5:
                    ad:21:a5:9b:3d:c7:54:a0:e1:91:7f:ec:58:49:2e:
                    88:90:27:89:35:26:2a:c8:19:0d:b8:4a:46:8c:d5:
                    e4:a1:d2:0f:bd:77:51:43:6e:7b:ce:3b:ac:3b:ca:
                    14:53:90:c3:54:49:98:9f:ba:9e:16:a0:cf:c9:62:
                    f3:60:b1:bd:3f:a2:5e:8e:4c:cb:85:2c:4a:e2:5c:
                    ce:13:96:82:a4:73:20:1c:c9:58:ce:50:a2:17:76:
                    6a:06:23:30:16:14:c5:a4:64:ca:81:a0:2b:26:48:
                    d5:fd:7a:a7:2b:28:7e:17:14:6b:b6:27:56:1a:8d:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:33:E3:76:CF:58:C9:AB:DB:8E:86:62:9C:06:FF:A6:4C:17:9A
            X509v3 Authority Key Identifier:
                keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:25:13:ee:c4:e5:76:b5:84:7e:18:20:25:70:19:08:3d:12:
         c8:8f:b9:bc:ac:b2:a6:46:f5:9e:1f:44:fc:7f:cb:ba:36:9a:
         69:65:4f:3e:ba:1c:c6:61:f2:24:30:1e:73:39:ed:da:f7:f7:
         34:75:dc:0a:e3:24:f7:4b:60:89:3c:3b:bc:89:38:5b:d6:c5:
         7d:b7:26:a0:7a:eb:1a:a4:55:bd:b9:6e:4f:83:5d:d2:ed:18:
         93:f3:02:13:c7:6d:b1:10:43:04:bc:7b:a0:39:88:03:01:e8:
         f9:a7:1c:8e:dd:71:66:25:88:3d:23:ad:ce:38:56:7f:32:9e:
         be:3e:34:24:a2:96:0e:bf:25:16:35:94:6e:93:1a:4d:61:51:
         15:fa:a4:ba:20:79:69:98:4a:ad:9a:43:cf:94:6a:c2:d5:12:
         7b:27:58:97:89:f6:16:6f:96:3f:06:4a:2f:15:19:f5:fb:35:
         18:4d:4b:d7:b9:99:55:fb:e0:a8:c3:cd:32:32:60:9e:85:f2:
         a3:60:e7:cc:72:cb:12:65:1a:75:7f:ee:1f:d7:5e:a4:c9:cb:
         13:79:96:cc:25:80:2f:c4:48:e6:91:8b:0a:85:8a:4d:8b:0d:
         fa:49:16:ca:8e:fd:14:b7:39:ca:0d:ef:06:40:b1:21:c4:6f:
         0e:02:1c:08
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0ExQzRBRjExMC8GA1UEBRMoNjNDMzQwRTEwQUQ3NTY4MEM3QUEzQ0REMDBEQkU0
OEQ3RDQxOURFNjAeFw0yNTEwMjAwMjIyNDBaFw0yNTEwMjIwMjIyNDBaMBgxFjAU
BgNVBAMTDTY4ZjU5Y2YxLWUzNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKjtX7YzrAJKVNsL1stWm79tcwrzNIC/AiaAKQB8X3nuVej4rJJoaO5tm5
FgT7GLlENQCG/Vxp9ZZoG94PVAvbyc0rQW1VtWNcky/8aMHK3r32z2FfntV6S3xT
UJ2xCFbRcWEvqMaSnyHp63HZbScj2lQ6HFqdF+cHkt1lehCqHTGKKyIb5a0hpZs9
x1Sg4ZF/7FhJLoiQJ4k1JirIGQ24SkaM1eSh0g+9d1FDbnvOO6w7yhRTkMNUSZif
up4WoM/JYvNgsb0/ol6OTMuFLEriXM4TloKkcyAcyVjOUKIXdmoGIzAWFMWkZMqB
oCsmSNX9eqcrKH4XFGu2J1YajbrbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEDoz
43bPWMmr246GYpwG/6ZMF5owHwYDVR0jBBgwFoAUY8NA4QrXVoDHqjzdANvkjX1B
neYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBMUM0LzE3MjY3QTlBRjQyQjExRUI5MTg4MUUzNEQ4QTAxNENFL1k4TkE0
UXJYVm9ESHFqemRBTnZralgxQm5lWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1k4TkE0UXJYVm9ESHFqemRBTnZralgxQm5lWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0ExQzQvMTcyNjdBOUFGNDJCMTFFQjkxODgxRTM0RDhB
MDE0Q0UvWThOQTRRclhWb0RIcWp6ZEFOdmtqWDFCbmVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKJRPuxOV2tYR+GCAlcBkIPRLIj7m8
rLKmRvWeH0T8f8u6NpppZU8+uhzGYfIkMB5zOe3a9/c0ddwK4yT3S2CJPDu8iThb
1sV9tyageusapFW9uW5Pg13S7RiT8wITx22xEEMEvHugOYgDAej5pxyO3XFmJYg9
I63OOFZ/Mp6+PjQkopYOvyUWNZRukxpNYVEV+qS6IHlpmEqtmkPPlGrC1RJ7J1iX
ifYWb5Y/BkovFRn1+zUYTUvXuZlV++Cow80yMmCehfKjYOfMcssSZRp1f+4f116k
ycsTeZbMJYAvxEjmkYsKhYpNiw36SRbKjv0UtznKDe8GQLEhxG8OAhwI
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:58 2025 by rpki-client