Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          JY2MDlMjgNy80mxgAVVe9hUSzfF6tkCH7F+VPSBJxvU=
Subject key identifier:   EF:AD:BD:1F:4F:9F:E0:5A:F3:52:24:42:59:E3:A4:3D:27:7F:C7:9D
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       086B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0866
Signing time:             Wed 06 Aug 2025 01:44:28 +0000
Manifest this update:     Wed 06 Aug 2025 01:44:28 +0000
Manifest next update:     Fri 08 Aug 2025 01:44:28 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: rmPqPAVeYUYdpjuqW0syU574tk3JcV0uP7xs0vLw964=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 00:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Aug  6 01:44:28 2025 GMT
            Not After : Aug  8 01:44:28 2025 GMT
        Subject: CN=6892b37c-a59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:2c:40:bf:05:43:a0:63:03:ba:04:0d:2e:
                    31:da:d8:da:bb:96:3c:d7:68:a6:a6:19:f0:ba:7d:
                    47:c2:c4:1f:f2:a4:7a:5f:48:f7:21:ab:a2:82:a1:
                    19:e0:c0:aa:32:16:2f:5a:2f:3e:63:a7:ef:9a:32:
                    1c:9d:48:a0:ae:86:83:68:6d:72:62:33:28:c1:74:
                    20:e0:bc:7b:1c:00:a9:b5:eb:ff:2e:2b:ed:9e:3f:
                    31:18:4d:f3:89:19:7d:f1:71:60:de:4f:a1:07:01:
                    64:f3:ac:d4:75:1b:2e:74:06:51:91:03:6c:53:56:
                    d3:ee:3c:e5:69:be:88:de:f8:fd:98:56:97:4b:d7:
                    c1:a3:4e:ec:8f:be:de:39:0c:a7:24:c5:82:30:d0:
                    47:4c:32:2a:f0:d7:68:84:27:09:14:55:51:4f:eb:
                    6b:bf:c6:38:58:01:d2:60:2e:f4:51:a0:50:dc:05:
                    ef:13:d0:bf:a6:f8:4c:b4:5d:ed:72:a7:42:ba:e3:
                    41:80:69:1b:c5:dc:72:2b:23:b2:60:b6:c5:81:f4:
                    7e:3d:e8:4e:0a:25:73:cc:ad:67:1e:55:5d:5e:ec:
                    f2:f6:56:0e:18:c1:2f:b8:18:8a:77:7e:e5:de:7d:
                    5e:99:54:56:29:34:6f:7d:75:84:a6:e5:81:1f:6d:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:BD:1F:4F:9F:E0:5A:F3:52:24:42:59:E3:A4:3D:27:7F:C7:9D
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:49:38:e7:d7:e8:85:e0:d4:7b:ab:86:2e:73:36:67:f1:14:
         32:63:af:3d:3a:4f:4e:00:08:61:b3:91:7a:dd:56:ff:3a:2e:
         d9:58:c1:f8:89:a9:59:dd:e0:12:41:a8:18:1c:32:ab:f5:72:
         87:cd:fb:7d:b1:a3:0f:3a:ef:ef:63:af:f8:3a:d2:ff:b7:21:
         16:09:ec:ae:37:af:59:31:17:f9:1e:38:aa:09:b9:ee:b6:10:
         51:99:c9:6a:f3:ee:b3:1d:b2:e9:6d:48:e2:4a:36:6e:8c:ea:
         cd:77:d0:43:49:d6:fd:05:9e:0f:14:de:1a:b5:d9:fb:b9:f4:
         8c:b0:18:f7:0c:17:1e:9e:86:3d:43:52:9b:79:38:bb:30:90:
         1d:98:d0:a8:d6:96:d2:87:6b:21:14:7d:19:0a:f3:fd:43:49:
         53:99:6b:04:1e:64:36:f2:68:92:4e:75:37:b1:d7:7e:83:c2:
         28:fe:07:e8:e5:d6:9f:55:bc:ea:f3:cb:ac:d7:de:8e:9e:42:
         ed:0c:ab:78:45:ee:ca:6c:17:91:b6:9c:02:9b:8d:22:48:eb:
         63:75:b7:22:03:df:f5:ef:e8:5f:77:c2:43:37:ee:07:b6:e1:
         9a:f5:b1:26:9b:65:e2:08:6a:60:3d:40:50:8e:17:f3:2e:5f:
         eb:44:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:51 2025 by rpki-client