Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
File:                     Y8NA4QrXVoDHqjzdANvkjX1BneY.mft (raw, json)
Hash identifier:          NQq64SEwbPxSo3/7HYIeE+NMEbVqgoKeWHbxySMSXow=
Subject key identifier:   82:A3:29:D1:DC:A0:B8:F1:86:90:81:F0:58:2D:71:B7:A6:12:0A:11
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Certificate issuer:       /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial:       05F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
Manifest number:          05F3
Signing time:             Sat 23 Aug 2025 02:27:36 +0000
Manifest this update:     Sat 23 Aug 2025 02:27:36 +0000
Manifest next update:     Mon 25 Aug 2025 02:27:36 +0000
Files and hashes:         1: Y8NA4QrXVoDHqjzdANvkjX1BneY.crl (hash: rOlu2NvZLEODkW3vZPxQ38GEREKmLRyjbFj9xt5BZ38=)
                          2: E22275A0F42B11EB8DE13535D8A014CE.roa (hash: ixRAeAOi1PIeYWgmp7z7mBTbmz/nQmCMeTxu8P6RJX8=)
                          3: 75DE7694F4E611EBBD7D085AD8A014CE.roa (hash: 3ZB2CJ/bayIERLBg5mRjM6sGFJ1JWNYNoqaW/CbBpAw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
        Validity
            Not Before: Aug 23 02:27:36 2025 GMT
            Not After : Aug 25 02:27:36 2025 GMT
        Subject: CN=68a92718-a1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:94:56:ec:89:a3:6d:11:4d:4f:b6:53:4f:
                    a5:d3:63:94:a0:d1:c2:d5:11:68:3b:69:46:a0:42:
                    be:8d:01:ed:d1:ab:e0:38:ab:50:1a:fa:23:d4:ca:
                    23:ad:b2:0f:3d:95:d2:34:e8:d5:68:61:cb:63:f6:
                    dc:3c:15:6f:71:ce:3b:b2:24:df:a6:2d:cf:e2:c7:
                    4c:39:c6:98:40:63:12:68:14:f8:fe:9d:7b:28:ff:
                    51:96:fe:16:cc:be:ae:ba:12:18:60:48:31:64:70:
                    8c:4f:65:1b:36:93:e2:e1:21:2b:a9:50:78:bf:60:
                    a6:34:44:5b:86:5b:f0:00:87:20:87:b3:61:5e:ac:
                    c8:84:3c:2e:7f:f1:a5:23:43:b6:27:fd:ab:56:9b:
                    72:35:9e:b4:63:40:70:3e:76:32:a9:7e:73:f1:f4:
                    d6:19:6d:a8:7f:73:36:bb:17:15:7f:78:96:19:af:
                    7f:12:ec:9c:69:83:16:7c:56:6c:fc:12:65:10:94:
                    65:8b:11:3a:4b:52:43:22:70:18:2c:63:da:66:b1:
                    72:46:33:70:2a:56:2a:55:aa:c3:6b:95:f3:55:6e:
                    37:f7:f4:c5:8e:d3:1e:0b:a9:8c:a2:ef:e9:dd:dd:
                    16:3e:66:ef:1f:89:c4:a5:ae:a5:fd:5e:c6:d8:ad:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A3:29:D1:DC:A0:B8:F1:86:90:81:F0:58:2D:71:B7:A6:12:0A:11
            X509v3 Authority Key Identifier:
                keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:fd:c3:b8:1c:af:b1:ad:60:b1:14:97:6a:bc:a5:74:d8:
         ab:12:c8:d0:8e:72:93:d0:78:4a:da:7a:2c:30:7f:b7:4f:35:
         7f:a5:b8:2b:61:73:47:f3:7a:e6:9e:a5:4f:9e:93:0e:46:61:
         93:db:65:45:1b:99:74:b4:7b:51:c5:63:a2:8e:a3:29:99:18:
         60:11:55:4d:5a:55:86:6d:b6:ac:91:6d:dd:04:8e:de:33:ca:
         a1:07:03:64:aa:52:45:f8:4b:9e:0a:96:0f:ff:ee:b6:f7:87:
         23:92:ae:73:8e:a4:36:4f:e1:12:1d:7e:91:01:50:cb:62:18:
         ef:5c:5e:b6:66:63:04:2c:c0:ea:bd:76:4d:15:57:b9:d4:ee:
         6f:c2:d8:af:2c:f6:ab:4a:7c:e7:61:a5:b3:99:65:72:f1:1f:
         b9:0b:5e:8e:20:2b:d1:e3:79:73:7c:52:bf:3e:ac:4c:42:12:
         27:84:9c:45:98:b5:9a:b2:c3:bd:31:d1:70:de:ed:62:0c:09:
         2e:f4:46:bd:f9:91:28:63:69:f8:41:31:76:2c:83:fd:70:98:
         a4:33:3b:00:17:c9:00:fa:74:fe:a8:0e:23:74:2a:71:b3:71:
         4b:b6:d8:29:da:6a:de:49:9f:96:38:80:58:5a:4a:05:ed:96:
         76:fc:49:a8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0ExQzRBRjExMC8GA1UEBRMoNjNDMzQwRTEwQUQ3NTY4MEM3QUEzQ0REMDBEQkU0
OEQ3RDQxOURFNjAeFw0yNTA4MjMwMjI3MzZaFw0yNTA4MjUwMjI3MzZaMBgxFjAU
BgNVBAMTDTY4YTkyNzE4LWExYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwCpRW7ImjbRFNT7ZTT6XTY5Sg0cLVEWg7aUagQr6NAe3Rq+A4q1Aa+iPU
yiOtsg89ldI06NVoYctj9tw8FW9xzjuyJN+mLc/ix0w5xphAYxJoFPj+nXso/1GW
/hbMvq66EhhgSDFkcIxPZRs2k+LhISupUHi/YKY0RFuGW/AAhyCHs2FerMiEPC5/
8aUjQ7Yn/atWm3I1nrRjQHA+djKpfnPx9NYZbah/cza7FxV/eJYZr38S7JxpgxZ8
Vmz8EmUQlGWLETpLUkMicBgsY9pmsXJGM3AqVipVqsNrlfNVbjf39MWO0x4LqYyi
7+nd3RY+Zu8ficSlrqX9XsbYrdaLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUgqMp
0dyguPGGkIHwWC1xt6YSChEwHwYDVR0jBBgwFoAUY8NA4QrXVoDHqjzdANvkjX1B
neYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBMUM0LzE3MjY3QTlBRjQyQjExRUI5MTg4MUUzNEQ4QTAxNENFL1k4TkE0
UXJYVm9ESHFqemRBTnZralgxQm5lWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1k4TkE0UXJYVm9ESHFqemRBTnZralgxQm5lWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0ExQzQvMTcyNjdBOUFGNDJCMTFFQjkxODgxRTM0RDhB
MDE0Q0UvWThOQTRRclhWb0RIcWp6ZEFOdmtqWDFCbmVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzsv3DuByvsa1gsRSXaryldNirEsjQ
jnKT0HhK2nosMH+3TzV/pbgrYXNH83rmnqVPnpMORmGT22VFG5l0tHtRxWOijqMp
mRhgEVVNWlWGbbaskW3dBI7eM8qhBwNkqlJF+EueCpYP/+6294cjkq5zjqQ2T+ES
HX6RAVDLYhjvXF62ZmMELMDqvXZNFVe51O5vwtivLParSnznYaWzmWVy8R+5C16O
ICvR43lzfFK/PqxMQhInhJxFmLWassO9MdFw3u1iDAku9Ea9+ZEoY2n4QTF2LIP9
cJikMzsAF8kA+nT+qA4jdCpxs3FLttgp2mreSZ+WOIBYWkoF7ZZ2/Emo
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:56 2025 by rpki-client