Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
File:                     YmHXJNC9IPWdDi44xn6JVKbUy98.mft (raw, json)
Hash identifier:          AXiaWYaLvCzWuYYVAoA/azQB5Ulhj0JbQUFNWq5u/sc=
Subject key identifier:   CB:DD:F6:08:09:5B:64:D5:58:56:8C:A1:48:6C:8C:3D:C0:60:D9:37
Authority key identifier: 62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
Certificate issuer:       /CN=F3610DE1AF/serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
Certificate serial:       0558
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
Manifest number:          0555
Signing time:             Wed 13 Aug 2025 02:45:08 +0000
Manifest this update:     Wed 13 Aug 2025 02:45:07 +0000
Manifest next update:     Fri 15 Aug 2025 02:45:07 +0000
Files and hashes:         1: YmHXJNC9IPWdDi44xn6JVKbUy98.crl (hash: Qx9owFgj7uYMQPNbqlqyjz4exf+TvcDKcFQ8Dotq3YI=)
                          2: EC347D644F7011F0B0E5A285DAE4EC9C.roa (hash: 7VqGdhK0QKVxfwrcQu0g+uIjAEEmddmp5+L+0+/1OA0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610DE1AF, serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
        Validity
            Not Before: Aug 13 02:45:07 2025 GMT
            Not After : Aug 15 02:45:07 2025 GMT
        Subject: CN=689bfc34-02a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:27:ef:6b:db:e9:d1:0c:0a:33:b0:68:a5:
                    29:0d:95:c0:a8:73:2d:fa:d9:53:87:7e:97:32:a5:
                    bd:0f:55:73:10:85:2a:23:a3:64:88:4b:14:00:5c:
                    47:e1:b2:75:16:6e:7e:7c:b9:fb:df:91:2a:27:e4:
                    a6:e7:12:e8:c5:31:eb:81:55:34:8b:e4:1d:76:5d:
                    12:8b:d9:bd:6c:80:6f:99:3d:bc:24:8d:1a:92:c7:
                    7b:e9:4a:a5:cc:65:85:7e:19:66:a3:d7:84:ca:b9:
                    4d:09:77:17:45:20:f5:17:04:46:5e:39:a1:30:97:
                    3b:d6:55:c1:7d:f4:2d:8b:86:1d:b8:83:26:1f:68:
                    97:a0:7f:64:86:49:d7:be:ae:16:6b:1e:61:7d:80:
                    83:28:74:d1:dc:9d:ea:b8:66:63:db:04:1d:b7:b3:
                    5f:d5:12:98:fd:16:1c:99:75:a6:ea:d7:2d:4f:94:
                    40:f5:db:44:03:61:b8:4f:6e:f8:e8:e8:4b:c6:4c:
                    f1:89:ed:c1:22:d0:f5:06:d2:2f:08:32:1c:68:b4:
                    cd:74:5d:96:5b:c9:47:5e:82:44:b1:90:6a:fd:ea:
                    45:e5:e7:37:4d:d6:74:8b:7a:fd:28:8b:58:7d:ad:
                    89:d0:27:ae:bf:e2:12:15:97:a2:f5:61:74:ec:1e:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:F6:08:09:5B:64:D5:58:56:8C:A1:48:6C:8C:3D:C0:60:D9:37
            X509v3 Authority Key Identifier:
                keyid:62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:76:a6:73:57:9e:e1:48:eb:41:0a:7b:38:fb:ba:8b:ce:
         6c:93:72:65:b7:83:59:3b:49:8c:a3:6b:57:0f:c9:d1:1d:d7:
         fe:e8:c6:07:66:ee:4b:90:62:09:7e:5f:6a:32:27:b8:ed:d3:
         54:47:24:2e:cb:8e:f5:72:5c:c1:4d:81:90:e4:a7:10:82:80:
         f2:9f:4f:4b:50:bd:08:22:45:bd:36:28:b6:a8:57:f2:62:6d:
         dd:6b:28:4b:00:46:70:9a:ef:06:59:0d:d1:52:51:5b:9d:74:
         b8:47:28:92:f4:37:ec:ce:ce:52:04:88:21:90:38:01:8f:34:
         14:1c:22:45:74:b8:46:91:21:ba:1a:00:ed:ce:64:f3:4c:73:
         85:e6:71:a0:63:8e:7b:83:30:38:13:0a:ed:51:e7:53:26:35:
         06:e2:22:2b:49:36:21:1a:70:76:cf:5c:67:24:fd:d8:49:2f:
         66:19:cc:96:68:b5:3e:c4:86:25:95:45:4b:8d:9d:e1:87:34:
         ae:04:87:6c:fa:66:68:65:f1:c8:e7:de:60:fc:41:b9:61:e5:
         a2:3a:86:4b:07:7c:a7:cf:41:0c:43:ae:a2:9f:24:74:34:fc:
         3d:9c:16:1c:59:fb:2a:2b:6f:19:87:8f:b4:0c:a1:0c:36:99:
         da:e4:c7:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTBERTFBRjExMC8GA1UEBRMoNjI2MUQ3MjREMEJEMjBGNTlEMEUyRTM4QzY3RTg5
NTRBNkQ0Q0JERjAeFw0yNTA4MTMwMjQ1MDdaFw0yNTA4MTUwMjQ1MDdaMBgxFjAU
BgNVBAMTDTY4OWJmYzM0LTAyYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZPCfva9vp0QwKM7BopSkNlcCocy362VOHfpcypb0PVXMQhSojo2SISxQA
XEfhsnUWbn58ufvfkSon5KbnEujFMeuBVTSL5B12XRKL2b1sgG+ZPbwkjRqSx3vp
SqXMZYV+GWaj14TKuU0JdxdFIPUXBEZeOaEwlzvWVcF99C2Lhh24gyYfaJegf2SG
Sde+rhZrHmF9gIModNHcneq4ZmPbBB23s1/VEpj9FhyZdabq1y1PlED120QDYbhP
bvjo6EvGTPGJ7cEi0PUG0i8IMhxotM10XZZbyUdegkSxkGr96kXl5zdN1nSLev0o
i1h9rYnQJ66/4hIVl6L1YXTsHrb9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUy932
CAlbZNVYVoyhSGyMPcBg2TcwHwYDVR0jBBgwFoAUYmHXJNC9IPWdDi44xn6JVKbU
y98wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEwREUxL0U5QUJDNzEwNjcxRjExRUM4NkQ1QjhEOTVBNDBENTc3L1ltSFhK
TkM5SVBXZERpNDR4bjZKVktiVXk5OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ltSFhKTkM5SVBXZERpNDR4bjZKVktiVXk5OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTBERTEvRTlBQkM3MTA2NzFGMTFFQzg2RDVCOEQ5NUE0
MEQ1NzcvWW1IWEpOQzlJUFdkRGk0NHhuNkpWS2JVeTk4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHamc1ee4UjrQQp7OPu6i85sk3Jl
t4NZO0mMo2tXD8nRHdf+6MYHZu5LkGIJfl9qMie47dNURyQuy471clzBTYGQ5KcQ
goDyn09LUL0IIkW9Nii2qFfyYm3dayhLAEZwmu8GWQ3RUlFbnXS4RyiS9Dfszs5S
BIghkDgBjzQUHCJFdLhGkSG6GgDtzmTzTHOF5nGgY457gzA4EwrtUedTJjUG4iIr
STYhGnB2z1xnJP3YSS9mGcyWaLU+xIYllUVLjZ3hhzSuBIds+mZoZfHI595g/EG5
YeWiOoZLB3ynz0EMQ66inyR0NPw9nBYcWfsqK28Zh4+0DKEMNpna5Mev
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:35:38 2025 by rpki-client