Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
File:                     ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft (raw, json)
Hash identifier:          th07ezjb8HwyrYJpNG4GvNerwnBMU2Fpvr9sG8FoSUU=
Subject key identifier:   C5:AD:8D:1D:35:D5:DE:6F:84:5C:23:12:AD:F9:2D:B3:F4:A5:B5:E6
Authority key identifier: CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
Certificate issuer:       /CN=F36F6A4DAF/serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
Certificate serial:       0173
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
Manifest number:          016F
Signing time:             Mon 20 Oct 2025 04:45:16 +0000
Manifest this update:     Mon 20 Oct 2025 04:45:15 +0000
Manifest next update:     Wed 22 Oct 2025 04:45:15 +0000
Files and hashes:         1: ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl (hash: VFt2lnMIjZJrJLi3C9iegvP+fBeZHNrU6q2HDN29ZWI=)
                          2: 68314CFA9E6711EF831C3572762E951A.roa (hash: +2OyFRy+2ufdlClFPPFiOYpBXJw/swztJHB2roxpChk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6A4DAF, serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
        Validity
            Not Before: Oct 20 04:45:15 2025 GMT
            Not After : Oct 22 04:45:15 2025 GMT
        Subject: CN=68f5be5c-cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:7b:58:34:a6:1e:0b:79:4b:86:46:2d:a5:
                    84:b3:16:15:1b:d7:d8:42:34:b0:60:ad:0a:6c:72:
                    67:16:ff:d5:ec:65:e6:2f:a8:10:83:51:32:ad:05:
                    0a:b6:03:f9:97:c3:db:86:08:51:8f:5e:71:50:3f:
                    f2:ff:18:a4:8d:32:25:8a:03:cc:75:03:33:a5:91:
                    9a:69:a9:5a:47:13:dc:6f:99:22:41:d3:c0:b3:20:
                    6f:cf:36:31:61:01:42:bb:6f:cd:de:50:9b:b0:4f:
                    d8:48:62:09:c1:c3:f9:0f:ee:e5:f5:b0:0c:3a:47:
                    b8:ba:18:c8:b1:16:c0:ff:15:66:92:cd:50:67:e6:
                    4f:69:7b:56:b1:b7:b5:46:d8:03:36:51:fd:df:d0:
                    f1:34:ad:33:a9:6c:80:c1:d6:21:7d:15:be:f3:a5:
                    c1:a3:a4:1b:17:59:0e:9c:26:46:99:38:75:c8:2c:
                    9e:a6:6a:4a:e2:b9:5f:5c:fd:e5:60:3a:9a:69:44:
                    48:c6:26:be:dc:b1:52:32:0f:45:9b:2c:21:b4:28:
                    7e:9f:46:25:44:8b:1c:43:5b:47:05:2e:f0:11:b9:
                    4b:7e:45:93:a6:c1:a9:2d:e5:34:6f:50:7b:99:00:
                    dc:41:7d:26:49:31:95:14:09:4a:89:2d:d7:ec:79:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AD:8D:1D:35:D5:DE:6F:84:5C:23:12:AD:F9:2D:B3:F4:A5:B5:E6
            X509v3 Authority Key Identifier:
                keyid:CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:fa:91:b7:dd:b9:3e:f7:cc:b1:8e:06:ed:36:a4:4f:f9:
         98:74:2e:e8:c6:cc:16:0e:e7:64:8a:ff:54:0c:05:57:74:04:
         a9:7b:06:67:64:fe:1e:f9:4a:90:1b:8a:b3:d5:cb:71:23:3f:
         e4:16:5f:0d:7a:54:f5:bd:b9:e6:ad:bf:35:88:db:f2:ef:38:
         cf:fe:2c:fd:c3:63:5d:0a:b7:a0:41:80:b9:b5:40:01:52:79:
         5d:fe:94:33:87:42:22:fa:52:0a:3e:e4:b5:50:d3:13:f5:da:
         10:1c:80:81:54:08:5e:7e:b6:ab:7f:13:ac:c4:b2:72:1b:59:
         ec:f8:06:89:aa:da:95:15:a4:3f:79:d4:8c:54:11:37:0b:08:
         7d:21:61:53:67:b8:86:ae:ec:75:a8:a6:88:10:a6:29:fd:32:
         f9:69:69:25:9e:c7:83:41:d2:2b:67:28:07:65:36:41:ce:61:
         05:f1:b4:7d:1a:4a:96:5a:68:d3:63:27:d5:39:b1:42:ca:2c:
         44:07:94:20:d8:c7:21:a1:c0:26:05:95:9e:e2:a2:93:86:cb:
         23:d5:f2:80:f7:b7:03:40:f9:32:be:30:55:8f:82:d9:ca:3e:
         74:0b:4a:e3:4a:79:5b:ce:85:75:45:a4:4b:a1:87:00:4e:3f:
         2e:78:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:50 2025 by rpki-client