Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
File:                     yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft (raw, json)
Hash identifier:          mr8LND/V4IAvZM9oYhLnPrc4VXSibPxp+0f49KDWI3w=
Subject key identifier:   00:DC:D8:D4:6B:05:E3:93:78:21:C5:5C:DA:89:93:BF:1E:0C:C6:A4
Authority key identifier: CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F
Certificate issuer:       /CN=F36B905AAF/serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
Certificate serial:       5A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
Manifest number:          5A
Signing time:             Tue 12 Aug 2025 05:18:40 +0000
Manifest this update:     Tue 12 Aug 2025 05:18:39 +0000
Manifest next update:     Thu 14 Aug 2025 05:18:39 +0000
Files and hashes:         1: yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl (hash: JOttJGrxlv2yJHlY2hDlyiB//s2XTxS5+dPpP9baX/Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 05:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B905AAF, serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
        Validity
            Not Before: Aug 12 05:18:39 2025 GMT
            Not After : Aug 14 05:18:39 2025 GMT
        Subject: CN=689aceb0-c656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:c0:ee:87:ed:8a:cd:ac:a9:5a:52:d9:c8:
                    68:33:d0:e8:d0:77:bb:ab:6d:f8:c8:70:14:92:62:
                    b3:7a:99:00:4d:45:a6:4b:d4:35:f3:06:74:38:88:
                    fe:f5:e3:7b:51:9a:1a:2a:d3:55:b8:d4:bd:37:79:
                    ec:43:c4:85:0b:94:91:bf:c2:4e:c5:7e:b5:17:20:
                    52:69:07:f2:80:40:e9:18:e4:5a:97:e5:da:2c:d7:
                    fe:ee:19:aa:5f:c8:27:78:21:a9:80:aa:cd:3b:47:
                    68:5a:49:ab:7c:b4:90:55:48:ff:f2:60:97:87:69:
                    f1:35:b3:2f:38:cc:2c:5b:7e:87:66:f5:9e:ad:30:
                    7b:04:d4:31:ad:38:f3:eb:18:07:6b:24:4f:d1:9c:
                    33:ec:da:f2:d9:bb:31:26:69:19:ad:ac:6f:a4:b6:
                    63:10:ac:37:9c:de:1c:b6:f9:7a:9d:a2:4e:3a:f5:
                    25:1b:65:25:2d:1c:55:92:94:33:e8:60:bb:1a:ce:
                    2a:34:a4:7a:b9:6e:a8:7c:d8:7e:87:69:b8:17:ef:
                    cc:63:f6:a4:70:46:ed:13:b8:7c:4f:cc:bb:c6:43:
                    bd:1b:28:66:93:f3:f8:6c:fb:34:bf:dc:0d:65:fc:
                    fa:0b:79:9f:66:13:1b:23:fb:90:30:6d:a6:dd:f3:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DC:D8:D4:6B:05:E3:93:78:21:C5:5C:DA:89:93:BF:1E:0C:C6:A4
            X509v3 Authority Key Identifier:
                keyid:CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4d:ae:d0:d0:6b:91:23:81:d7:7f:7c:89:ec:ed:79:30:c5:
         cf:3f:95:7a:d9:dc:90:5b:e4:fb:6a:39:6d:ab:2b:1b:0e:80:
         61:4c:b6:40:15:20:68:ef:3a:cc:1c:73:ce:f2:1d:8b:83:e5:
         17:cc:55:d7:9d:c3:a9:0b:d3:0e:15:3a:03:8e:09:25:ed:8d:
         6c:92:20:61:a4:5a:85:ac:93:fe:9b:4d:85:2d:d7:40:30:b6:
         a1:42:54:52:01:48:1c:27:22:8a:35:a7:63:88:fd:21:77:05:
         a8:f8:94:84:ba:36:56:c1:5d:43:d4:35:ff:9e:6f:fb:38:4b:
         7f:59:ba:93:26:41:94:56:f9:95:c7:57:5d:5b:94:29:1e:16:
         17:ae:f8:c6:ed:bb:76:20:6b:54:1e:9a:76:eb:09:2a:84:66:
         f0:57:bb:2f:73:e9:ce:c8:22:d6:d7:da:10:23:d3:a9:31:eb:
         a6:35:a4:1b:3f:52:c8:5f:32:ac:18:02:b9:92:1f:41:4b:82:
         b9:7c:16:e0:0b:7b:31:99:04:96:75:e9:db:13:ee:43:29:d7:
         cb:b6:1c:7f:0d:5e:71:3f:51:96:f7:3d:f3:55:99:42:50:35:
         c4:7e:f7:79:6a:9f:c4:5d:bf:45:6e:93:63:a3:07:10:8c:f8:
         de:c2:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:39:44 2025 by rpki-client