Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
File:                     Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft (raw, json)
Hash identifier:          c7q6AHN1mEurVPPczCHgJ7Pg5FpmX+/33+aYwjQPo30=
Subject key identifier:   53:2F:DC:F5:00:29:C0:77:A7:B8:60:64:0C:E6:8B:1C:39:DF:89:06
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Certificate issuer:       /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial:       04E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
Manifest number:          04E3
Signing time:             Mon 20 Oct 2025 02:52:54 +0000
Manifest this update:     Mon 20 Oct 2025 02:52:53 +0000
Manifest next update:     Wed 22 Oct 2025 02:52:53 +0000
Files and hashes:         1: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl (hash: U2mfMNjAicdLv0rg76Ku2BV2i4nxxj9Q9zNvsrbsDYo=)
                          2: 90A4B082F61711ECAADA17ACF1222468.roa (hash: CaEhC6ko8rU8vfgfvjdKNqBvDwiD5+5f3Laxi98D208=)
                          3: B84D6F0CF61711EC9E38A0ACF1222468.roa (hash: 2mZmU9le3XeMP1Ox8Wu5Hc79KfraT0VEEUN4L6+zeCQ=)
                          4: F05CFC3CF61711ECB1B82FADF1222468.roa (hash: Au6s2pxaSDvChW+FzABudGYSlCnH0CYLP8pI+Txi2cM=)
                          5: D83E4E26F61711EC8578F9ACF1222468.roa (hash: skbNDT3ppZgY3ou45+uEjEyueX8K01a5I/sQR4qbdro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
        Validity
            Not Before: Oct 20 02:52:53 2025 GMT
            Not After : Oct 22 02:52:53 2025 GMT
        Subject: CN=68f5a406-20d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:cb:42:28:ab:2b:e2:36:7c:6d:7d:de:84:
                    c0:a1:ee:8a:32:e4:cd:12:e5:a4:10:1f:9a:34:91:
                    ae:47:a4:a9:ca:a1:18:6e:5f:f6:1a:82:fb:89:48:
                    fd:47:63:af:c8:62:3a:4f:32:9d:b6:f9:45:a0:f6:
                    6f:d7:d6:2b:07:18:6b:88:ab:6f:66:6f:75:0a:05:
                    7e:30:9b:a2:39:4f:e8:66:8d:42:9b:ce:bf:e4:75:
                    98:10:68:c1:d9:2f:eb:ed:cc:2b:b1:03:f9:f8:aa:
                    0f:82:39:01:20:ff:c9:f8:3d:7d:ac:bf:77:c5:2d:
                    21:e2:54:fd:6c:ec:cc:e4:42:96:e1:68:c9:73:59:
                    8e:bf:97:22:ea:7a:78:5f:6b:5d:53:1c:52:1b:9b:
                    5a:2f:fc:13:e4:24:a4:b4:6b:90:6b:af:82:6c:14:
                    dc:72:78:f0:00:9b:13:f9:6a:2e:24:b0:e5:a0:03:
                    64:01:90:86:1b:40:1d:6a:77:40:4e:d3:9a:5e:99:
                    59:19:40:53:0b:b2:46:6d:04:a4:56:85:b8:05:e7:
                    46:5c:b9:e8:59:8a:05:54:55:7e:98:b5:43:a1:b4:
                    cb:f9:11:64:98:77:32:d9:e7:e4:47:54:ed:47:49:
                    41:f8:89:5d:30:35:0f:ae:d5:fa:e6:71:47:b1:de:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:DC:F5:00:29:C0:77:A7:B8:60:64:0C:E6:8B:1C:39:DF:89:06
            X509v3 Authority Key Identifier:
                keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:0d:78:49:f6:ac:f6:88:61:77:ff:79:c3:b2:c9:79:9b:
         60:7f:f7:18:ef:91:3e:e1:6b:62:cf:00:4e:29:dd:4a:c5:88:
         91:9a:a5:ac:98:9f:74:b5:f2:34:da:b3:63:01:78:dd:7f:a2:
         c4:1e:e2:bf:95:2b:8d:4b:98:9a:34:11:58:9a:0f:00:6e:a0:
         78:90:10:b1:58:af:c3:e6:1b:e5:05:79:3b:b9:72:ee:c9:d0:
         d3:05:50:77:16:0b:da:67:86:cd:93:60:33:83:49:fe:9b:95:
         15:7d:05:a9:6b:21:5f:4e:1f:f6:e1:1d:08:f2:94:95:32:04:
         b4:6b:62:c9:b9:60:ec:1f:8a:48:c5:b0:e7:fc:b3:8c:31:bd:
         fc:3b:08:a2:35:6a:bb:6f:e3:33:80:a3:03:1a:24:0b:2a:65:
         88:0c:03:cc:09:5a:50:6d:ca:12:8a:93:82:6e:f8:88:38:35:
         3f:6e:d2:0a:fa:19:7e:b0:7f:e9:89:5a:d2:ef:11:ea:db:c6:
         61:98:be:8c:42:bc:4d:22:f9:4a:31:24:b4:48:3f:2d:89:45:
         a0:9f:2e:88:af:d2:7a:7c:f6:f9:da:fa:76:e1:48:7c:2e:c1:
         9f:0c:c8:5c:d4:c6:2f:70:ba:ac:84:8a:4c:79:f7:16:46:a3:
         ac:c8:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:02:42 2025 by rpki-client