Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
File:                     ePyy5tDIIPu5vVgQYfogSi1R9BI.mft (raw, json)
Hash identifier:          LoyNRXzKyCcgsxRIDHyiu7ArTVjvhRvqQItCCJ3Zcc8=
Subject key identifier:   A4:DC:C3:C7:3E:D4:15:03:78:6D:01:8B:56:3F:B1:F3:18:22:10:0F
Authority key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Certificate issuer:       /CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
Certificate serial:       02C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
Manifest number:          02C1
Signing time:             Sat 23 Aug 2025 04:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 04:01:41 +0000
Manifest next update:     Mon 25 Aug 2025 04:01:41 +0000
Files and hashes:         1: ePyy5tDIIPu5vVgQYfogSi1R9BI.crl (hash: HfSpsXS1v2BJeVYoOBivJkjUU3PnvMLM5wiYhS1HaHs=)
                          2: D64EDDEE6E5F11EEBF42781C4AD9E6FC.roa (hash: wwS9H3v6Oq2KT+bOS8yPt+2S5/l9UTYbItXO4BiUcNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FABDEAF, serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
        Validity
            Not Before: Aug 23 04:01:41 2025 GMT
            Not After : Aug 25 04:01:41 2025 GMT
        Subject: CN=68a93d26-62d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b3:20:69:a9:fa:f3:2a:78:ee:b2:59:5f:a8:
                    3f:be:19:34:07:57:18:c1:49:31:03:3d:0a:0d:f7:
                    f6:ce:0d:d9:40:50:f4:e3:18:27:d1:48:07:c7:db:
                    cb:82:61:ce:a8:a0:df:1e:17:88:06:de:8d:d9:24:
                    df:d4:b3:6d:2a:d3:31:af:39:ae:21:15:9e:41:5d:
                    ee:b5:3b:89:5e:14:b4:b7:74:e7:3b:49:c4:84:3b:
                    98:43:87:a6:c5:c6:f1:0a:fc:a5:42:14:34:13:e9:
                    19:a6:13:c2:50:fd:fd:42:46:a7:32:da:5b:72:9d:
                    77:cb:5e:de:81:e1:46:e8:84:87:2d:bf:a7:b1:87:
                    75:ae:48:19:29:3a:ad:85:d6:97:53:d4:14:eb:92:
                    0d:ce:b2:e9:be:dc:a4:e4:12:c4:a6:39:fd:0f:e6:
                    8d:eb:7a:f7:99:79:5c:92:28:71:8d:3f:f8:51:9c:
                    3c:e1:87:ab:2b:ea:82:b0:1e:02:f4:1a:6e:f4:8f:
                    e4:b9:1d:7c:c1:e5:cb:e0:f7:d2:b8:c0:6e:92:4a:
                    59:bd:60:4c:ff:d5:41:a9:e0:db:f4:04:1d:7c:2b:
                    ea:b3:b8:4f:5e:40:98:db:c1:10:10:6b:15:74:72:
                    48:33:7e:36:9f:be:a7:77:a8:37:94:67:04:26:02:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DC:C3:C7:3E:D4:15:03:78:6D:01:8B:56:3F:B1:F3:18:22:10:0F
            X509v3 Authority Key Identifier:
                keyid:78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:94:e4:40:28:89:67:c4:95:af:d5:e7:d8:a6:e7:34:51:7a:
         55:c1:53:9a:c3:d8:3e:32:b8:56:72:56:8a:19:fc:93:e3:3b:
         11:cd:ba:c4:32:f4:9b:75:03:36:95:6e:47:f1:e8:89:1c:99:
         68:6c:19:b5:12:14:c5:75:3d:c8:16:97:ae:be:36:9d:e6:cc:
         a5:44:ad:88:f8:e7:b8:85:68:77:ef:a2:59:f8:01:6c:11:43:
         ae:60:6d:07:09:25:5f:ed:10:8a:5f:a1:5a:b5:0f:a5:a2:eb:
         31:c2:5d:93:44:b8:76:27:7b:f2:cc:c1:74:d1:fe:77:93:e5:
         a4:3f:bb:2a:7e:37:1f:d2:37:b5:96:f8:21:96:21:5d:f1:e4:
         68:09:a6:ef:66:c6:01:02:11:77:02:4b:3d:3e:93:a5:7e:ea:
         83:cf:68:ce:e5:f1:72:34:9a:7a:2a:c3:a7:4d:f5:f4:4c:f3:
         36:90:dd:99:ad:91:e7:d3:0c:db:3b:c7:82:23:ba:84:17:af:
         3d:4b:78:3b:16:8f:3c:0d:fa:e7:0d:d2:da:b9:97:a0:2f:25:
         2a:16:04:e8:a4:e1:5b:38:79:13:3f:bd:ae:70:c2:ae:02:30:
         b5:58:a1:d2:e9:fa:d7:24:3b:99:91:8a:8d:34:d5:d4:dd:f9:
         75:e0:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:38 2025 by rpki-client