Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
File:                     yRNvElsMvwHLUu8Ona1pO53hebE.mft (raw, json)
Hash identifier:          jx2kp3BpbZLoAh6L4RspTj+jLQ3X3PE1OQNT9Mg7JtI=
Subject key identifier:   A2:CC:E9:5A:49:70:90:8B:72:09:0F:B6:68:4C:2A:D8:3D:0F:14:79
Authority key identifier: C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1
Certificate issuer:       /CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
Certificate serial:       01BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
Manifest number:          01BA
Signing time:             Wed 05 Nov 2025 04:51:17 +0000
Manifest this update:     Wed 05 Nov 2025 04:51:17 +0000
Manifest next update:     Fri 07 Nov 2025 04:51:17 +0000
Files and hashes:         1: yRNvElsMvwHLUu8Ona1pO53hebE.crl (hash: iAN7TSHCvvx9CAPXgN4qSzMI1r7rPXGfRuZFysgE47I=)
                          2: DAA13BB269C211EF87DB5478762E951A.roa (hash: Y1C12JjUCRZB6miS2tftf7tn5FoqQq5MI2tzdSPlKmM=)
                          3: 6902F9DC69DB11EFB4D7CE8D762E951A.roa (hash: bWiMdJKsCZRqY9/D/tP0KK4vV03plvkNcR9SdfYbiCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F5CBAF, serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
        Validity
            Not Before: Nov  5 04:51:17 2025 GMT
            Not After : Nov  7 04:51:17 2025 GMT
        Subject: CN=690ad7c5-c13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:ce:76:2e:cf:13:65:0a:33:6e:08:b5:20:
                    4f:0e:e0:80:66:6c:4a:19:23:b2:66:27:60:bd:48:
                    f4:c5:80:38:5f:6d:e7:95:60:c9:2e:4c:23:c9:a8:
                    01:83:a3:40:4a:3f:7b:52:c7:a6:0a:f8:29:69:ef:
                    cf:22:38:54:e8:38:bf:e5:43:f2:40:77:29:db:69:
                    b5:33:a1:2f:06:fb:c2:44:78:3a:4c:f6:d2:dd:48:
                    53:43:9e:75:8a:7c:a6:d8:82:4c:1f:8e:4b:ad:81:
                    c9:4e:d9:94:37:91:7d:03:26:1b:42:79:4c:47:cf:
                    81:9f:9d:39:7b:08:7a:35:31:25:cc:e9:77:6d:86:
                    76:c9:22:cd:e8:21:31:fe:b4:13:1e:e4:e1:59:b8:
                    a9:a6:22:70:7f:65:78:49:e4:63:d1:ea:81:30:92:
                    7a:90:3c:a1:3e:ea:c1:6a:98:ff:5c:65:05:c2:0a:
                    d3:3a:91:18:bc:35:71:2b:01:99:d2:f3:b2:19:01:
                    60:fc:44:5c:b2:4f:f8:95:68:9c:48:4e:dc:76:7b:
                    ac:7f:7e:64:16:69:6d:1e:1a:06:87:52:cf:30:15:
                    c3:50:bd:50:4f:7a:0c:7a:2b:3a:a9:b6:10:76:4d:
                    d2:e6:9f:7a:fb:c0:f4:1c:6b:c3:41:70:d3:eb:a7:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CC:E9:5A:49:70:90:8B:72:09:0F:B6:68:4C:2A:D8:3D:0F:14:79
            X509v3 Authority Key Identifier:
                keyid:C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ea:ca:fe:05:75:15:24:22:9c:c7:ac:bf:cc:96:ea:dd:51:
         e3:d6:e9:c6:b1:6d:d3:40:03:1b:4f:e3:88:cb:4b:1d:ea:33:
         49:6d:c4:e4:d4:37:ee:2c:9a:16:1e:30:74:3f:c3:46:a1:99:
         48:bc:fe:cf:d9:21:97:98:56:0a:72:64:4b:e7:c8:04:52:34:
         6b:ba:ec:d0:81:06:d2:ce:3c:8a:53:dc:c7:e9:c3:83:90:c2:
         ce:f5:34:f5:bf:26:5c:f9:99:42:63:67:92:63:62:00:db:f2:
         40:30:3f:b5:fc:32:65:ff:f2:9a:5a:04:aa:f5:9c:d4:ed:a5:
         c8:a5:e2:0a:25:7f:83:86:7d:0e:05:c3:47:d3:9e:d9:72:7f:
         7d:10:51:9d:d3:d7:72:f4:4e:fa:66:fa:51:d4:86:57:4b:bc:
         10:8e:9e:9d:2f:fa:54:32:5f:37:ac:a1:2d:f9:ac:98:f2:7e:
         29:16:41:8c:06:d5:4e:50:f4:fe:33:dd:bb:4a:cf:67:f8:5e:
         2f:48:9b:26:c8:a0:7b:6f:b8:13:e6:70:fe:b5:e5:36:9b:55:
         a1:d9:cf:79:be:b6:e2:1d:f9:80:56:90:c5:5f:ea:02:7d:85:
         79:4f:55:93:4a:13:7a:10:69:0a:1c:8e:2c:79:77:8a:8f:a2:
         06:1d:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:33:18 2025 by rpki-client