Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          TlHqAyQAX00CKHbvGvSbuPiI9evsZKebR+tPERi7+2U=
Subject key identifier:   18:85:C2:90:66:44:34:38:8C:91:0E:67:A1:9F:BC:55:51:F9:45:0C
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       0289
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          0284
Signing time:             Sun 10 Aug 2025 04:21:08 +0000
Manifest this update:     Sun 10 Aug 2025 04:21:08 +0000
Manifest next update:     Tue 12 Aug 2025 04:21:08 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: DuEMY7RbPa0orRVE5l9oHfLYnGfJYbFGQx8iB5owFYM=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF, serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Aug 10 04:21:08 2025 GMT
            Not After : Aug 12 04:21:08 2025 GMT
        Subject: CN=68981e34-32d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:a0:a1:f0:76:3d:5a:db:96:a3:7b:40:84:
                    10:65:47:9b:08:b1:43:1b:2a:da:28:fc:9e:a1:7d:
                    82:8e:84:17:1f:22:12:cb:ca:5d:e1:b7:c8:20:90:
                    b0:c7:f3:e5:39:ea:bc:69:7f:35:fa:e0:58:bf:23:
                    0e:75:6a:81:ba:1d:21:ae:e5:26:d3:ea:91:0d:72:
                    02:f1:aa:ea:c6:32:fc:ca:12:e8:ea:8f:27:98:49:
                    b2:45:35:b1:dc:09:36:60:2d:a9:81:b0:27:d6:0f:
                    1d:68:46:4c:f5:a8:66:61:b9:18:bd:3e:a5:2e:eb:
                    cf:b0:83:7d:a3:dd:a7:ac:36:e3:20:15:4e:45:82:
                    bd:d2:4e:58:4d:01:24:00:2d:f2:55:9c:cd:35:32:
                    3b:55:c1:41:0a:af:73:5e:de:e7:c1:68:02:ac:d9:
                    28:e0:81:ec:c2:7a:62:91:0b:71:35:3b:d3:80:ac:
                    4e:8c:1f:6e:f7:f3:a0:04:cd:c3:b3:1a:df:c3:c5:
                    64:51:56:ae:89:d3:48:b7:af:f4:84:30:61:67:3b:
                    56:32:bd:2d:4b:ca:0a:07:88:73:d0:d4:0c:01:d7:
                    10:28:57:ad:f9:6d:c9:b1:f2:1f:40:e2:22:22:d7:
                    a8:7d:21:d3:c6:85:3c:84:84:b3:d1:26:83:bb:0e:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:C2:90:66:44:34:38:8C:91:0E:67:A1:9F:BC:55:51:F9:45:0C
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:f6:c5:fa:4b:6c:bb:23:4a:56:56:c9:0e:fe:93:2a:8c:
         07:67:ab:02:a4:bc:eb:c3:71:03:77:b4:3f:43:8e:fe:fa:c9:
         fe:c9:86:ed:5f:11:c9:84:ef:9a:e7:5d:f8:c7:3a:fc:f9:ab:
         91:2a:2e:8c:dc:2c:5e:d9:ec:cd:76:66:4c:45:12:ec:24:06:
         4e:9b:52:1b:07:a7:27:ca:29:b0:de:91:51:c8:ff:cf:bc:c8:
         78:a6:74:8c:fe:54:c5:68:87:c6:29:d5:1e:b6:c8:94:a8:36:
         1c:ca:b7:44:dd:42:18:c2:a1:8c:ab:29:cb:ae:fb:2f:e0:ab:
         44:6e:b6:8c:ad:91:14:43:5a:65:4b:f4:54:9b:71:6b:94:2d:
         bf:93:52:f9:1c:7a:14:ce:13:5f:6c:b8:f7:25:5d:25:db:cf:
         c0:69:29:35:71:db:1b:3a:50:46:da:5a:93:dd:fb:82:bd:a1:
         5b:7f:d8:93:3b:2e:93:b0:4b:48:83:a5:1b:5f:b7:69:a5:e1:
         cb:c5:87:32:50:5a:c8:25:44:2a:6d:ad:10:73:d7:56:dc:ac:
         a4:d7:97:ed:a1:16:ee:c1:5d:3f:60:a7:a0:74:cc:1c:41:f3:
         03:df:73:f9:05:4b:09:20:4f:d4:82:3e:d9:66:71:f6:75:a7:
         84:ce:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:13 2025 by rpki-client