Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
File:                     i_LUycasChgyjdPrbLWQRBc3zug.mft (raw, json)
Hash identifier:          2up1iStUcN5oY4ZeD/sCOeyE9iCl5WMjcaEWUBRqtxY=
Subject key identifier:   DD:C6:47:DB:04:40:01:EF:55:5B:DB:84:95:66:1A:6F:23:FA:78:88
Authority key identifier: 8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8
Certificate issuer:       /CN=F369442EAF/serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
Certificate serial:       074A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
Manifest number:          0749
Signing time:             Wed 05 Nov 2025 02:02:21 +0000
Manifest this update:     Wed 05 Nov 2025 02:02:11 +0000
Manifest next update:     Fri 07 Nov 2025 02:02:11 +0000
Files and hashes:         1: i_LUycasChgyjdPrbLWQRBc3zug.crl (hash: zWh9nP4b8TKmT+GQYNqoXGV2bopVIecR9tZXIREgJ2g=)
                          2: CA4847F0260111EBACE81C12F8AEA228.roa (hash: wvHb/Kw9w+IZBIpt5st+Xz0N4A4tUwQJ6TE8L7LFn7U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369442EAF, serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
        Validity
            Not Before: Nov  5 02:02:11 2025 GMT
            Not After : Nov  7 02:02:11 2025 GMT
        Subject: CN=690ab02d-99f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:46:6b:cd:4d:97:73:3f:d0:da:c0:c0:47:
                    8b:e1:0b:5f:b2:be:1b:ca:62:06:50:1d:6e:1c:eb:
                    fd:0c:27:03:87:85:40:27:9f:98:19:b4:a8:72:bb:
                    52:9f:b0:d8:4e:cf:68:7f:58:86:59:a2:36:4f:59:
                    9e:9b:22:f5:f4:52:4a:7a:ed:c4:a5:e6:08:c0:b0:
                    11:f6:71:4d:3a:33:57:0d:69:ec:f7:0c:62:76:6d:
                    f3:c0:b1:28:2a:7c:21:35:d9:72:59:d3:87:60:6b:
                    ca:ed:8d:aa:91:3c:81:a3:d8:a3:a4:db:80:4d:72:
                    f4:3a:dd:3b:c8:5b:65:d0:d5:8d:56:da:85:ee:42:
                    6f:c1:95:a1:25:fe:30:1f:28:33:ee:bc:09:63:6a:
                    c9:14:b6:56:b2:9f:81:b8:dc:40:4b:e1:6c:d1:cf:
                    db:0b:13:7f:7e:de:03:e4:72:16:0b:c6:f4:f3:da:
                    76:0f:58:5d:0b:2c:da:1b:6d:22:83:71:9b:80:0e:
                    46:de:65:17:33:cb:ee:9f:30:e9:f8:ee:1c:21:b3:
                    12:c8:40:e9:4b:8a:a3:ec:5b:34:98:6c:61:f0:b3:
                    c6:ab:e7:b0:c5:bd:ea:9a:29:bf:fc:52:9f:c7:58:
                    16:45:fe:1a:e0:91:d5:16:0b:4e:72:d3:01:7f:76:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C6:47:DB:04:40:01:EF:55:5B:DB:84:95:66:1A:6F:23:FA:78:88
            X509v3 Authority Key Identifier:
                keyid:8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a9:58:55:87:57:a0:90:e0:a3:ac:75:15:af:7d:45:bc:0f:
         53:75:8b:45:97:29:16:bb:c3:b5:2c:4f:a7:2c:a3:cc:f9:21:
         84:d7:d4:17:4f:4f:16:3a:9f:3c:9a:e3:e8:09:2b:a7:88:63:
         81:7a:f7:65:f2:d3:b5:19:76:bc:27:08:e6:3b:97:fb:67:ea:
         bf:0c:4c:67:da:d7:db:74:44:0d:12:75:ba:eb:5a:f8:c7:3b:
         94:dd:70:c5:87:73:d4:50:9c:01:44:15:aa:be:44:d4:a6:98:
         a6:93:5d:1b:94:fc:07:70:71:43:30:53:67:d2:9c:de:3b:f0:
         2b:fe:30:e6:db:dd:94:e4:13:1c:e5:7d:da:f0:8f:48:3c:82:
         cf:92:aa:d9:17:7f:ee:84:08:54:a1:24:d7:0b:c5:88:b6:f3:
         aa:3e:16:ba:38:85:a6:3d:ee:e6:58:19:9d:8b:a3:c7:7a:99:
         cf:f2:91:50:7b:9b:d6:c3:b0:58:4a:ec:3e:f4:78:4e:df:18:
         04:77:4f:8f:8e:8f:27:6d:bc:7a:1c:eb:a6:b1:4b:c4:77:b2:
         55:cf:95:e1:03:5f:fe:fa:fd:61:e9:84:51:d1:bd:33:34:9d:
         ae:a3:84:b9:e2:61:02:37:b3:30:76:23:ff:94:11:ff:85:d2:
         b2:e0:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:22:43 2025 by rpki-client