Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
File:                     Y8NA4QrXVoDHqjzdANvkjX1BneY.mft (raw, json)
Hash identifier:          3bie988WCnX9qMt5ucITLqCAIKjoxWE474e7cOjFtEY=
Subject key identifier:   71:A0:A3:05:27:17:80:CC:72:E8:C6:06:94:19:07:18:89:08:AC:61
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Certificate issuer:       /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial:       0640
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
Manifest number:          063E
Signing time:             Wed 05 Nov 2025 02:27:01 +0000
Manifest this update:     Wed 05 Nov 2025 02:27:00 +0000
Manifest next update:     Fri 07 Nov 2025 02:27:00 +0000
Files and hashes:         1: Y8NA4QrXVoDHqjzdANvkjX1BneY.crl (hash: /udUqvgiyYYTl4UK6yo/92fIoxnxSyRmPIyDRAdbQAM=)
                          2: E22275A0F42B11EB8DE13535D8A014CE.roa (hash: ixRAeAOi1PIeYWgmp7z7mBTbmz/nQmCMeTxu8P6RJX8=)
                          3: 75DE7694F4E611EBBD7D085AD8A014CE.roa (hash: 3ZB2CJ/bayIERLBg5mRjM6sGFJ1JWNYNoqaW/CbBpAw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
        Validity
            Not Before: Nov  5 02:27:00 2025 GMT
            Not After : Nov  7 02:27:00 2025 GMT
        Subject: CN=690ab5f5-31d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:d1:35:33:3d:55:ef:66:fa:3e:67:65:76:
                    9e:f3:c1:a2:8d:9f:2f:78:fe:61:11:a1:d7:c7:05:
                    8b:f9:67:a4:37:92:b9:e3:db:0d:16:c8:b3:e2:df:
                    4a:05:0a:2a:f6:b0:d3:db:83:d0:75:c3:ef:b3:c7:
                    34:3b:e5:50:75:84:5a:4a:ee:0a:50:48:67:97:6b:
                    ba:20:a9:e9:fc:4d:19:a5:a8:89:36:f6:dc:0c:a2:
                    05:c2:9d:32:be:d4:26:08:b3:52:e2:bd:3a:40:a0:
                    33:81:22:53:0b:95:dc:de:d9:2a:e7:70:df:dc:1d:
                    d7:13:b2:89:65:f0:07:4c:5f:35:ef:12:2b:53:bd:
                    38:fb:a7:a8:17:3d:25:8d:7e:6e:37:e1:2c:a8:c2:
                    dd:9f:0d:cc:b2:58:9e:dd:9c:2e:27:e3:b1:ec:1e:
                    0d:20:8b:eb:43:2b:56:77:e0:0d:a7:2c:a9:e3:5e:
                    6a:cc:ea:27:6c:e1:a1:41:2c:dc:34:05:ef:9d:29:
                    85:dd:15:0b:6c:28:70:46:42:cb:08:ea:45:95:ce:
                    ca:e1:04:9a:07:c6:83:de:a7:25:45:c8:eb:1e:ae:
                    3d:b7:90:6e:e3:8f:c8:0a:36:94:c8:69:4d:02:c5:
                    4f:39:bb:4a:a2:c0:cc:d7:dc:fb:19:2a:a9:b8:79:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A0:A3:05:27:17:80:CC:72:E8:C6:06:94:19:07:18:89:08:AC:61
            X509v3 Authority Key Identifier:
                keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:11:d1:32:5e:d1:70:d0:56:b4:04:22:51:2b:7c:b0:f7:
         b0:8f:b5:56:3f:14:3c:e3:cb:f2:17:b9:6b:cf:76:3b:8c:54:
         26:b6:5a:b8:1f:97:0a:68:ec:33:5b:fe:53:5c:b1:56:e9:e8:
         78:77:c4:8b:dd:bf:fe:a1:52:7a:49:61:e1:d5:a8:a9:b1:40:
         b0:e5:87:1f:29:12:41:e7:0a:5b:0e:11:a3:2a:92:e9:f0:ca:
         3c:b9:d7:65:6d:f3:59:70:dc:a6:6e:03:93:94:d3:77:b2:46:
         83:6e:9a:11:7c:88:0c:4d:1c:03:65:59:77:44:71:88:22:34:
         ff:74:ee:99:c8:a8:4d:32:be:67:8d:12:ef:50:2b:0f:9b:06:
         84:15:85:60:29:42:b3:09:3a:37:fe:74:c1:3b:7f:26:48:2d:
         ec:92:3f:3c:52:01:b7:44:98:c7:43:2a:fe:7b:33:c4:bc:32:
         cf:b0:c6:1a:91:86:4c:a7:b8:43:19:07:e7:05:a7:c5:51:64:
         9f:eb:d3:4d:36:b2:ec:00:68:57:1f:7e:59:bf:8c:f2:92:47:
         fe:4f:08:c2:82:11:de:10:cb:63:73:95:88:b7:2a:7a:7c:74:
         bb:32:ff:1e:42:57:1a:64:d3:e4:cb:ac:77:aa:e5:c7:06:eb:
         61:ed:3c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:47:39 2025 by rpki-client