Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File:                     Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier:          uxkb4tbH0Pue7YMAt/WNurX1BD1JtSXXMiVT1RVrVps=
Subject key identifier:   83:4C:3A:73:F5:D7:BB:EE:B5:01:EC:EF:11:86:54:BF:AA:B7:F4:7C
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer:       /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial:       0EAB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number:          0EAB
Signing time:             Sun 25 Oct 2026 01:05:52 +0000
Manifest this update:     Sun 25 Oct 2026 01:05:51 +0000
Manifest next update:     Tue 27 Oct 2026 01:05:51 +0000
Files and hashes:         1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: Dfb2PGbNxaug3mqWQ6U0FmJ3pT9+l5kKxKsImv2FAHE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3755 (0xeab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
        Validity
            Not Before: Oct 25 01:05:51 2026 GMT
            Not After : Oct 27 01:05:51 2026 GMT
        Subject: CN=6add55f0-9369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:de:a0:93:d5:f1:a2:35:4a:e9:40:25:70:
                    37:28:66:20:0b:3b:b2:a0:88:b2:fd:31:cb:a0:db:
                    74:61:ec:ef:d7:54:c2:94:93:96:14:c4:b7:df:a1:
                    00:ac:b7:69:a0:3e:26:8d:e5:ea:b5:64:b4:b0:a5:
                    c4:50:8f:41:b4:2c:65:9f:91:96:bb:c5:95:f3:57:
                    4d:c9:93:55:f7:a5:1a:dd:81:b7:de:2f:4e:a2:6c:
                    a6:05:fa:84:c5:07:77:8c:84:c4:ef:11:8b:0e:96:
                    90:7e:5c:7c:8e:46:15:94:78:99:b2:7c:60:7a:f7:
                    3d:c4:3d:4a:e7:10:d2:d4:54:df:1d:08:4e:b6:63:
                    de:84:a9:fd:45:ff:e9:91:03:92:8e:1d:66:50:a1:
                    be:69:10:e8:e7:27:bd:4b:ad:f7:89:da:f9:b8:b0:
                    a5:d7:0a:29:69:cb:9f:f2:36:7b:bd:35:93:20:e8:
                    a3:b1:f2:87:92:c7:a3:17:80:19:b8:de:b4:bc:cb:
                    b3:20:91:06:10:ef:a7:11:7f:a2:54:99:73:75:86:
                    4d:2c:2b:cb:2d:60:32:ab:b4:da:a0:90:ed:0e:5c:
                    38:6a:c5:58:54:34:eb:9f:9b:dd:f4:5c:0e:9c:e4:
                    8a:db:56:06:30:68:e9:99:f0:69:fa:04:c4:58:ec:
                    64:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4C:3A:73:F5:D7:BB:EE:B5:01:EC:EF:11:86:54:BF:AA:B7:F4:7C
            X509v3 Authority Key Identifier:
                keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:e9:39:c6:2a:9d:d7:25:ea:c5:70:c6:4c:be:95:e7:63:
         4a:1e:a7:98:ee:43:f3:ed:29:28:ba:f6:be:bb:50:65:0a:e6:
         83:74:b6:01:e3:0e:6c:41:48:4b:b3:d5:8b:8c:eb:f8:37:6b:
         1f:bd:cb:d9:c7:f5:ac:28:ce:7e:86:50:46:35:ef:d2:44:f8:
         c5:f6:b4:36:7e:7c:eb:df:cd:1e:c0:a0:49:cb:5b:09:52:cc:
         1e:d2:8e:ab:e3:26:6e:4b:6f:42:e0:40:0b:af:45:0c:65:c1:
         b2:e7:a4:9b:bd:cc:4b:21:9c:76:3e:50:6c:05:d6:54:f4:39:
         1d:83:c2:5b:b5:22:f1:45:81:d5:10:2c:4c:55:59:7e:c9:74:
         c4:9b:1a:2e:79:99:06:c8:0a:c7:a6:6f:e3:23:29:02:76:0f:
         cd:f9:80:a0:18:3d:78:92:79:63:94:87:be:34:19:30:9d:ee:
         6c:e1:49:08:a2:36:f1:cf:ee:33:49:ef:94:24:a9:5c:11:84:
         26:c5:7e:35:34:91:f8:37:05:53:db:79:68:fd:c4:c8:62:ff:
         d3:25:02:cb:86:c2:b4:5d:64:c0:14:49:7a:2c:02:6a:f3:29:
         f1:0b:29:58:6c:9b:90:eb:fe:62:f1:2c:26:5f:66:3c:16:a5:
         42:36:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----