Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File:                     yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier:          u5cHAv6EatotXvvsttwMrs4NurBvGQZZLN+t/fOxUA4=
Subject key identifier:   AF:0E:6F:84:50:77:8C:EB:FF:28:78:26:D3:E8:AD:C3:64:08:D3:42
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer:       /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number:          02A2
Signing time:             Wed 05 Nov 2025 04:18:17 +0000
Manifest this update:     Wed 05 Nov 2025 04:18:16 +0000
Manifest next update:     Fri 07 Nov 2025 04:18:16 +0000
Files and hashes:         1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: 3vq3D84rBTooNBlzF9t55Au9rP5O8d/9vI1UIvbxPiw=)
                          2: E7E6ED96B5B911F0897D0386DAE4EC9C.roa (hash: USTrTqgafFdAdWVQRnFi5xBXcAuIAY9hmlsS/Lw+jKU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB15EAF, serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
        Validity
            Not Before: Nov  5 04:18:16 2025 GMT
            Not After : Nov  7 04:18:16 2025 GMT
        Subject: CN=690ad009-f19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:20:57:e0:c7:8f:83:2d:3b:7f:5e:90:78:
                    85:33:19:42:c4:cf:73:50:a3:bc:52:ad:ef:10:13:
                    8d:98:03:08:fd:de:27:bf:e5:86:00:36:84:cc:3f:
                    34:2c:7a:3c:e2:93:7e:84:65:e5:a6:27:ba:ad:e5:
                    45:86:18:9e:aa:84:04:8c:5a:69:89:f4:74:01:65:
                    25:70:17:4a:08:89:71:25:be:c7:27:ac:43:85:95:
                    d6:ac:9f:c2:de:d1:c4:cb:0d:99:63:6e:40:f1:7d:
                    e9:40:24:65:0d:aa:e0:ee:0f:49:da:bf:e7:5e:e4:
                    bc:d1:11:0e:74:f6:12:a5:9c:55:7d:26:ab:d4:1e:
                    9c:56:72:d6:20:80:ff:64:81:7c:a1:6a:bb:98:e2:
                    c8:cf:03:e1:2a:83:ec:b5:54:bb:00:0a:ec:ce:e6:
                    26:4a:10:e0:88:c3:2d:b2:55:49:69:d5:ea:b6:a0:
                    2d:2c:8d:7b:08:d7:e9:6e:0c:9b:d1:f5:7d:41:b3:
                    b0:41:76:c7:ae:b9:fd:c2:ef:32:17:6c:0b:34:66:
                    d8:42:df:8f:85:26:32:ed:0e:44:c8:19:ad:b6:a8:
                    ee:53:1f:6e:bc:3d:8c:18:db:81:53:be:78:a2:53:
                    9a:7a:93:a1:af:71:85:f4:f7:ab:aa:d5:44:69:fc:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0E:6F:84:50:77:8C:EB:FF:28:78:26:D3:E8:AD:C3:64:08:D3:42
            X509v3 Authority Key Identifier:
                keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:7c:77:90:9d:c4:ca:0b:76:2f:cc:eb:58:b3:e0:36:93:
         dd:09:75:c8:1f:21:76:7e:2d:a9:3d:1a:89:db:8c:7d:fa:48:
         eb:6c:87:c3:18:86:42:62:1f:7a:0b:24:67:7e:d6:80:23:5c:
         c2:41:18:aa:61:56:8b:f9:b6:44:a2:1d:d6:86:3f:2d:f1:45:
         07:70:96:f1:44:10:4b:13:3c:9a:71:af:e7:e8:d1:76:6a:df:
         43:b1:21:90:92:5a:2a:17:9b:4a:0c:04:7e:36:db:7c:88:09:
         50:1f:92:9c:68:35:f2:aa:f8:e5:2f:86:30:fe:93:2c:ae:7a:
         08:10:2b:cf:53:5c:99:93:de:59:c5:04:63:cb:90:b8:1a:f1:
         68:0f:e7:e3:75:43:08:88:e7:e5:43:79:4e:27:32:6f:fe:ae:
         46:da:58:fc:eb:10:86:02:02:58:38:f5:3a:2c:61:e3:a5:73:
         36:69:1f:b6:3c:2b:8b:fe:56:38:26:5d:d7:5f:5a:8f:71:16:
         32:dd:a8:9c:18:ad:f2:91:ec:71:0a:cf:1b:81:d5:df:8f:a6:
         5f:14:87:23:1b:90:5c:ce:63:9b:5b:fa:61:9c:db:b2:5b:c8:
         ee:fb:3b:dc:d3:b2:16:78:86:75:a0:2c:ab:8c:23:09:0b:0c:
         13:5f:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:07:50 2025 by rpki-client