Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
File:                     yDmJhjJn0TZLxz9143zW0rf-yYc.mft (raw, json)
Hash identifier:          w3Tz0SCblXAGhvc5p2dPO1f4YD8D+z6s/9YlYl/V/5o=
Subject key identifier:   96:6F:A2:A3:68:85:28:B9:F9:DB:56:B1:3F:CA:FC:D9:8B:36:80:93
Authority key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
Certificate issuer:       /CN=F361F0D8AF/serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
Manifest number:          21
Signing time:             Tue 04 Nov 2025 06:48:43 +0000
Manifest this update:     Tue 04 Nov 2025 06:48:42 +0000
Manifest next update:     Thu 06 Nov 2025 06:48:42 +0000
Files and hashes:         1: yDmJhjJn0TZLxz9143zW0rf-yYc.crl (hash: DJreKU689yamic8uQbUPHG0ytL7L80gZrCdbacZAxfE=)
                          2: 8FDC3D26A3BD11F0B640C8E9DAE4EC9C.roa (hash: z+EMCGVRvbS1M60Ygkphk04UU0Xnx+NfxQ7EP0ilmi0=)
                          3: 5598B34AA8D311F09951D4DFDAE4EC9C.roa (hash: ekkmLGUII3HkbjQJ5DqbrnE5zNaEvepsyMeJezGqRJY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
        Validity
            Not Before: Nov  4 06:48:42 2025 GMT
            Not After : Nov  6 06:48:42 2025 GMT
        Subject: CN=6909a1cb-7c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:df:a9:59:a8:65:6a:a8:1f:75:63:3a:8c:
                    3e:55:c5:26:b9:69:6e:09:3d:df:c0:2e:d4:3e:03:
                    c3:d8:4d:ae:85:3b:d2:27:70:c7:ca:47:0f:20:cd:
                    f9:37:d5:28:2e:dc:9e:af:65:d4:42:56:0f:59:c1:
                    14:4e:5d:07:54:1f:77:b4:5c:3e:3a:e9:df:cc:a9:
                    3c:e2:04:15:ef:ea:07:ac:04:f0:77:40:09:4a:21:
                    fa:ac:51:ab:8a:16:54:8a:43:63:e6:e8:42:fc:32:
                    0a:de:ee:01:7e:96:25:eb:e7:ad:6a:25:f0:a7:82:
                    b6:f1:a0:89:49:3c:e0:4e:81:a6:0a:7d:08:98:c7:
                    88:c9:3f:d0:be:2c:46:f3:cb:97:4b:90:14:c9:38:
                    5b:6a:50:f2:7b:dd:a0:a6:38:9e:ee:24:75:c3:1c:
                    c3:c6:be:c5:41:d7:90:dd:e4:15:d0:bd:80:d6:c0:
                    68:85:78:89:dc:db:46:9e:84:ec:a4:5c:69:b6:bb:
                    fc:b3:91:d5:ad:62:ef:6b:a8:f1:01:24:4b:e5:d4:
                    5f:61:c7:5d:9c:dc:72:a3:0e:21:9d:02:c3:42:57:
                    63:dd:17:1e:e7:2a:a9:3f:d5:33:84:19:f8:dd:5c:
                    5f:98:66:d5:2f:12:b0:ae:0a:00:c3:34:0d:48:16:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6F:A2:A3:68:85:28:B9:F9:DB:56:B1:3F:CA:FC:D9:8B:36:80:93
            X509v3 Authority Key Identifier:
                keyid:C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:db:6f:0b:a5:b7:d3:a5:4d:00:95:53:49:ce:a9:72:15:46:
         77:c8:53:3a:1d:dc:44:64:33:1c:15:0b:78:b6:3c:df:ed:81:
         1e:77:18:70:1f:3c:a2:f8:2e:01:5d:9f:56:00:d0:51:d8:d4:
         65:0c:80:4d:2b:19:ba:9d:3f:2d:53:a0:b6:8c:d5:41:46:e3:
         7e:f2:62:2b:21:7a:37:3f:e6:a3:81:5a:27:06:90:27:5e:d4:
         e0:e1:0b:ba:d8:33:a2:d5:d3:d6:dd:a7:e3:cf:5a:af:b0:f9:
         2f:2f:b1:88:2a:96:95:4d:86:f2:d4:70:72:78:36:bf:01:e5:
         88:37:40:5c:e0:0c:a5:6b:43:4a:2f:5e:59:bd:45:94:1f:87:
         bc:c2:58:e6:c5:9d:a9:04:f4:68:4e:57:76:5b:d2:34:e8:d5:
         49:7c:b3:4a:6f:7a:19:53:fb:bf:0c:9d:51:a6:37:3e:27:2a:
         7c:d3:c0:f1:a2:47:e0:9f:9f:d9:59:82:14:3f:e3:48:84:12:
         ca:ba:b1:f2:75:05:c4:33:a5:78:f2:ee:c6:e0:0c:b8:6d:53:
         30:68:f3:1b:97:73:3a:20:59:37:5a:ca:b5:e2:dc:4a:4a:d3:
         fd:9b:d8:a8:63:44:69:37:2d:f0:f6:9a:16:48:3f:c0:8c:ab:
         9c:3b:cf:a0
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
RjBEOEFGMTEwLwYDVQQFEyhDODM5ODk4NjMyNjdEMTM2NEJDNzNGNzVFMzdDRDZE
MkI3RkVDOTg3MB4XDTI1MTEwNDA2NDg0MloXDTI1MTEwNjA2NDg0MlowGDEWMBQG
A1UEAxMNNjkwOWExY2ItN2M1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9Q36lZqGVqqB91YzqMPlXFJrlpbgk938Au1D4Dw9hNroU70idwx8pHDyDN
+TfVKC7cnq9l1EJWD1nBFE5dB1Qfd7RcPjrp38ypPOIEFe/qB6wE8HdACUoh+qxR
q4oWVIpDY+boQvwyCt7uAX6WJevnrWol8KeCtvGgiUk84E6Bpgp9CJjHiMk/0L4s
RvPLl0uQFMk4W2pQ8nvdoKY4nu4kdcMcw8a+xUHXkN3kFdC9gNbAaIV4idzbRp6E
7KRcaba7/LOR1a1i72uo8QEkS+XUX2HHXZzccqMOIZ0Cw0JXY90XHucqqT/VM4QZ
+N1cX5hm1S8SsK4KAMM0DUgW780CAwEAAaOCArgwggK0MB0GA1UdDgQWBBSWb6Kj
aIUoufnbVrE/yvzZizaAkzAfBgNVHSMEGDAWgBTIOYmGMmfRNkvHP3XjfNbSt/7J
hzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUYwRDgvREZCODhGODBBM0JDMTFGMEFDODI3MkU1REFFNEVDOUMveURtSmhq
Sm4wVFpMeHo5MTQzelcwcmYteVljLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveURtSmhqSm4wVFpMeHo5MTQzelcwcmYteVljLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxRjBEOC9ERkI4OEY4MEEzQkMxMUYwQUM4MjcyRTVEQUU0
RUM5Qy95RG1KaGpKbjBUWkx4ejkxNDN6VzByZi15WWMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACjbbwult9OlTQCVU0nOqXIVRnfIUzod
3ERkMxwVC3i2PN/tgR53GHAfPKL4LgFdn1YA0FHY1GUMgE0rGbqdPy1ToLaM1UFG
437yYishejc/5qOBWicGkCde1ODhC7rYM6LV09bdp+PPWq+w+S8vsYgqlpVNhvLU
cHJ4Nr8B5Yg3QFzgDKVrQ0ovXlm9RZQfh7zCWObFnakE9GhOV3Zb0jTo1Ul8s0pv
ehlT+78MnVGmNz4nKnzTwPGiR+Cfn9lZghQ/40iEEsq6sfJ1BcQzpXjy7sbgDLht
UzBo8xuXczogWTdayrXi3EpK0/2b2KhjRGk3LfD2mhZIP8CMq5w7z6A=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:36:31 2025 by rpki-client