Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
File:                     Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft (raw, json)
Hash identifier:          KhD1A9XF7aAAbeTczkzewKoGrTVgrqS/t4BIPE9ETRY=
Subject key identifier:   B0:00:EE:44:74:47:0E:F6:92:B1:39:B1:28:68:C5:82:71:9B:F7:B3
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Certificate issuer:       /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial:       04F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
Manifest number:          04F3
Signing time:             Tue 04 Nov 2025 04:07:51 +0000
Manifest this update:     Tue 04 Nov 2025 04:07:50 +0000
Manifest next update:     Thu 06 Nov 2025 04:07:50 +0000
Files and hashes:         1: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl (hash: B/Ya5We697wHTM8nwnKrb/W4LRMXCUHzEY/1qivdKwQ=)
                          2: 90A4B082F61711ECAADA17ACF1222468.roa (hash: CaEhC6ko8rU8vfgfvjdKNqBvDwiD5+5f3Laxi98D208=)
                          3: B84D6F0CF61711EC9E38A0ACF1222468.roa (hash: 2mZmU9le3XeMP1Ox8Wu5Hc79KfraT0VEEUN4L6+zeCQ=)
                          4: F05CFC3CF61711ECB1B82FADF1222468.roa (hash: Au6s2pxaSDvChW+FzABudGYSlCnH0CYLP8pI+Txi2cM=)
                          5: D83E4E26F61711EC8578F9ACF1222468.roa (hash: skbNDT3ppZgY3ou45+uEjEyueX8K01a5I/sQR4qbdro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 04:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
        Validity
            Not Before: Nov  4 04:07:50 2025 GMT
            Not After : Nov  6 04:07:50 2025 GMT
        Subject: CN=69097c17-9c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:d7:87:95:26:84:b4:5b:0c:b4:9d:b0:97:
                    7e:79:e9:44:8a:a8:17:70:e1:dd:29:6c:a8:9b:c8:
                    9a:9b:ed:c1:01:d0:60:5e:e9:31:15:fa:5d:f7:6a:
                    53:16:21:98:71:76:a3:35:6f:65:7c:e2:80:a0:a2:
                    47:3d:6e:92:b9:84:f5:a1:ff:7f:58:02:c8:22:d0:
                    56:59:96:78:eb:d8:0f:9e:bf:9c:64:2a:03:ff:c2:
                    a6:e1:cf:62:03:d1:5b:5c:7b:b4:0a:ae:c5:63:be:
                    75:ed:d5:f7:7d:4c:15:59:e8:1b:7c:e5:6f:77:36:
                    b6:ff:42:cf:d5:07:ee:72:22:d4:0b:c9:ba:bc:0f:
                    1c:47:a0:4b:a6:63:c6:07:5d:a9:b8:6c:8d:21:5c:
                    93:7a:4e:ae:15:c4:b1:6d:8f:49:7d:0d:a6:47:7e:
                    70:7d:fa:20:99:39:14:2f:4b:03:c0:e7:28:cb:5f:
                    c8:ec:ba:d0:d8:92:54:35:8f:72:c3:ee:f4:bd:5d:
                    29:57:c4:56:e6:b5:99:6e:dd:c2:8a:53:08:2d:ff:
                    af:9d:83:71:1b:41:43:69:3b:79:80:37:d8:97:d3:
                    23:87:6d:24:a2:6e:2c:d6:bc:ff:6a:af:4d:21:06:
                    36:38:40:eb:32:a9:6c:6b:a6:cf:d0:fb:03:24:4d:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:00:EE:44:74:47:0E:F6:92:B1:39:B1:28:68:C5:82:71:9B:F7:B3
            X509v3 Authority Key Identifier:
                keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fb:40:7f:ec:e2:e8:cc:54:6e:b0:b6:67:d6:d9:39:ae:ff:
         43:b9:5b:6c:97:c4:bb:aa:fa:c9:8c:0c:3f:6e:8c:b7:7d:e5:
         87:97:00:d0:13:d6:d3:46:8d:88:de:dc:60:ea:02:db:04:e2:
         14:51:6f:8f:b7:38:b1:79:fb:19:9f:5b:64:0e:14:72:86:a6:
         a2:72:8d:fd:58:4b:c6:58:d0:1f:b9:a0:f8:e6:f9:b2:13:3e:
         12:0e:3c:13:a4:f3:c4:f1:c1:69:0d:14:45:bd:c3:ad:ff:82:
         9b:00:c2:1a:11:d4:7e:f9:dd:e8:63:67:71:4a:24:06:af:e0:
         54:16:ea:9b:64:c7:2b:5b:df:9f:3d:b5:8f:ef:cb:9f:35:39:
         26:96:75:dc:9e:32:94:cc:76:60:c9:8d:f9:06:b1:56:60:0a:
         5e:7f:bf:d1:1b:8b:41:11:f2:da:fa:28:e4:21:8e:a8:d8:11:
         0b:35:72:cb:7b:31:15:c9:b6:d1:24:c5:4a:42:a4:10:9c:32:
         d3:a2:69:78:d1:33:7e:8b:d3:99:67:d0:ad:f4:2d:10:9f:4a:
         45:74:59:eb:63:b3:91:d9:38:6d:4c:21:e7:da:d5:92:f0:30:
         ae:0b:d4:10:ac:ed:2c:db:0f:13:a6:fd:00:95:c2:d1:b0:e7:
         5b:7c:58:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjEzNDRBRjExMC8GA1UEBRMoNjNFMEE5MEMyQjJBNEI0MkE0NEFENDRDODU3MEU0
QkZGQkY3NUNGNDAeFw0yNTExMDQwNDA3NTBaFw0yNTExMDYwNDA3NTBaMBgxFjAU
BgNVBAMTDTY5MDk3YzE3LTljMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDh1NeHlSaEtFsMtJ2wl3556USKqBdw4d0pbKibyJqb7cEB0GBe6TEV+l33
alMWIZhxdqM1b2V84oCgokc9bpK5hPWh/39YAsgi0FZZlnjr2A+ev5xkKgP/wqbh
z2ID0Vtce7QKrsVjvnXt1fd9TBVZ6Bt85W93Nrb/Qs/VB+5yItQLybq8DxxHoEum
Y8YHXam4bI0hXJN6Tq4VxLFtj0l9DaZHfnB9+iCZORQvSwPA5yjLX8jsutDYklQ1
j3LD7vS9XSlXxFbmtZlu3cKKUwgt/6+dg3EbQUNpO3mAN9iX0yOHbSSibizWvP9q
r00hBjY4QOsyqWxrps/Q+wMkTfV7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsADu
RHRHDvaSsTmxKGjFgnGb97MwHwYDVR0jBBgwFoAUY+CpDCsqS0KkStRMhXDkv/v3
XPQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxMzQ0LzZDMjc4QTE4RjYxNzExRUM4MTcwQUFBQkYxMjIyNDY4L1ktQ3BE
Q3NxUzBLa1N0Uk1oWERrdl92M1hQUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQ3BEQ3NxUzBLa1N0Uk1oWERrdl92M1hQUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjEzNDQvNkMyNzhBMThGNjE3MTFFQzgxNzBBQUFCRjEy
MjI0NjgvWS1DcERDc3FTMEtrU3RSTWhYRGt2X3YzWFBRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAM+0B/7OLozFRusLZn1tk5rv9DuVts
l8S7qvrJjAw/boy3feWHlwDQE9bTRo2I3txg6gLbBOIUUW+PtzixefsZn1tkDhRy
hqaico39WEvGWNAfuaD45vmyEz4SDjwTpPPE8cFpDRRFvcOt/4KbAMIaEdR++d3o
Y2dxSiQGr+BUFuqbZMcrW9+fPbWP78ufNTkmlnXcnjKUzHZgyY35BrFWYApef7/R
G4tBEfLa+ijkIY6o2BELNXLLezEVybbRJMVKQqQQnDLToml40TN+i9OZZ9Ct9C0Q
n0pFdFnrY7OR2ThtTCHn2tWS8DCuC9QQrO0s2w8Tpv0AlcLRsOdbfFjg
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:35 2025 by rpki-client