Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
File:                     ePyy5tDIIPu5vVgQYfogSi1R9BI.mft (raw, json)
Hash identifier:          QnH6RlFVrKDC9KV9mtSxhBSEMRccbozDYUSExffJm6w=
Subject key identifier:   08:98:04:7E:03:9B:9A:6A:E3:F8:7A:5A:02:D2:08:77:9E:05:F1:30
Authority key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Certificate issuer:       /CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
Certificate serial:       02FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
Manifest number:          02FA
Signing time:             Sun 19 Oct 2025 03:49:38 +0000
Manifest this update:     Sun 19 Oct 2025 03:49:37 +0000
Manifest next update:     Tue 21 Oct 2025 03:49:37 +0000
Files and hashes:         1: ePyy5tDIIPu5vVgQYfogSi1R9BI.crl (hash: bm2l2QdkcRRSIgZ41qMAEBnHw4NGldAcAO2Sf/KUQ+o=)
                          2: D64EDDEE6E5F11EEBF42781C4AD9E6FC.roa (hash: wwS9H3v6Oq2KT+bOS8yPt+2S5/l9UTYbItXO4BiUcNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FABDEAF, serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
        Validity
            Not Before: Oct 19 03:49:37 2025 GMT
            Not After : Oct 21 03:49:37 2025 GMT
        Subject: CN=68f45fd2-4d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:af:a0:66:fb:89:fa:2b:97:5b:d8:dc:5b:
                    5f:5b:26:22:d5:ef:56:f9:22:22:9e:51:fa:f3:03:
                    ee:af:8d:79:ee:fb:11:00:19:c6:fd:6f:83:e8:73:
                    25:a9:43:8e:1f:b3:02:b0:53:59:2a:8f:bb:ec:81:
                    b0:ae:d2:e6:7c:ca:75:94:9b:6d:fe:27:80:cb:9b:
                    c3:d6:ce:ad:a1:5f:c0:cb:4f:65:e5:8b:05:45:4f:
                    03:9a:9e:7a:5a:d1:a6:67:ac:54:17:a9:f9:95:31:
                    d2:0d:a4:0e:a6:10:3b:4e:b2:f3:61:e9:02:b9:96:
                    71:91:6c:88:87:94:ec:99:cd:81:3a:1f:7a:a4:33:
                    7c:e3:2c:39:39:9f:15:d4:4b:54:5f:46:69:e4:59:
                    bc:be:11:b5:bc:42:4f:12:c9:47:eb:05:51:c1:82:
                    02:cb:eb:eb:2e:e4:5c:d7:d9:c6:36:99:11:91:3a:
                    a0:c1:d4:b6:1b:38:aa:bf:7d:31:af:81:f7:b5:b2:
                    17:2f:0c:40:78:32:90:01:c1:31:f4:60:11:0d:2d:
                    9e:ff:4d:69:b6:26:25:bd:6d:26:90:29:cc:18:b6:
                    df:91:85:c0:bc:0b:92:74:51:7e:78:03:85:34:7d:
                    04:d7:56:d8:78:47:1b:a7:fd:c7:ed:34:f2:87:5b:
                    4c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:98:04:7E:03:9B:9A:6A:E3:F8:7A:5A:02:D2:08:77:9E:05:F1:30
            X509v3 Authority Key Identifier:
                keyid:78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c1:64:72:13:a7:d8:84:44:e2:3b:d9:d0:90:b3:b5:25:d8:
         1b:05:04:82:7e:e6:3b:3c:2a:d6:f0:b1:eb:ca:20:07:0e:96:
         2d:ea:a9:d4:93:2d:6f:5f:fc:83:3f:29:70:e3:4f:1c:e0:23:
         4f:4c:b4:27:4a:45:d2:fd:e6:37:1b:3b:ed:a7:c7:0a:99:b2:
         1f:f3:81:23:f9:ea:3c:4e:35:e9:65:97:17:ab:a2:db:c6:e1:
         f7:7e:5a:21:fa:16:d4:29:55:9b:53:f3:bc:86:eb:24:c5:69:
         60:4d:74:c1:bf:52:61:83:4c:b7:9c:fd:ee:69:fb:f2:1e:b4:
         08:ca:e7:7f:b6:29:4f:46:b3:e6:b4:27:cd:dc:84:b8:39:c8:
         1f:f4:26:3d:8d:e2:45:c0:da:d1:48:fe:b8:c9:1a:44:ca:b9:
         a1:47:6f:16:b3:fd:62:3b:92:3d:fd:80:bc:38:b2:87:db:34:
         61:6e:6c:92:49:95:fd:14:a0:e9:2e:79:82:c8:86:0d:88:fd:
         ee:26:66:27:ab:6b:52:67:8b:ca:bb:8c:24:fa:b1:e7:2b:8b:
         49:81:36:ca:1b:4b:36:39:c6:c7:9a:86:d5:c7:61:2b:f3:5a:
         ab:d0:f1:13:18:e1:b6:b9:9e:fa:4e:0d:5e:6d:56:66:7f:f0:
         9b:c8:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:28 2025 by rpki-client