Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft (raw, json)
Hash identifier:          au9KNdXghZ4b2avm/R2b8eD+P5msyLfqW2mp0MwAG+U=
Subject key identifier:   76:76:72:B9:A7:11:A1:C0:ED:BB:2B:55:5B:4A:EF:20:36:A2:BA:3D
Authority key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Certificate issuer:       /CN=F3674908AR/serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
Certificate serial:       01B6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
Manifest number:          01B5
Signing time:             Sat 05 Sep 2026 05:03:11 +0000
Manifest this update:     Sat 05 Sep 2026 05:03:11 +0000
Manifest next update:     Mon 07 Sep 2026 05:03:11 +0000
Files and hashes:         1: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl (hash: sPSJCilFWq4xSCUt2LF+KKTaawlnsJ3ZhCEk2gr5yxg=)
                          2: 1944E674564511F0983236F2DAE4EC9C.roa (hash: Y7C2EDuJLg0UUohvGlHcA8fBY7urPGjjAraukXhUClw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                          rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Validity
            Not Before: Sep  5 05:03:11 2026 GMT
            Not After : Sep  7 05:03:11 2026 GMT
        Subject: CN=6a9ba28f-d0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:25:f7:93:7c:7d:a5:45:f7:33:d1:5c:a1:
                    42:89:8e:cf:88:a7:c7:f5:74:f0:3c:e0:7b:cc:1d:
                    f2:22:aa:3d:f0:b2:0c:fe:a3:d9:13:a2:11:2f:8e:
                    a0:b5:5c:e6:a7:f9:5a:e1:00:95:8a:e7:db:af:ce:
                    de:1d:8e:01:d9:ad:64:1a:0b:54:ca:77:71:60:40:
                    ed:63:ff:73:cc:bf:2d:b1:f7:d9:63:6e:f9:a3:4c:
                    ce:bf:16:72:79:40:6f:ca:15:98:2a:cb:93:0a:c7:
                    da:7e:ff:47:50:30:dc:2b:a4:03:e4:a2:dc:94:18:
                    62:30:b1:40:c4:2f:0f:40:9f:12:aa:df:1a:91:b1:
                    e5:64:42:eb:48:87:1e:23:bc:b1:e4:0b:4e:53:71:
                    48:00:ab:ae:1d:35:5b:bd:9e:4c:44:9c:20:ce:e1:
                    96:94:70:63:b7:b1:31:31:38:6c:70:77:a4:ca:29:
                    e1:74:02:cd:0d:ac:27:5e:e4:da:c8:24:16:81:85:
                    3e:3e:62:d9:a1:44:e9:34:36:e2:c1:ef:d7:7e:59:
                    d9:00:e1:18:ac:19:70:21:c6:63:4e:aa:e7:69:c7:
                    66:f0:a5:f9:f3:73:2c:d6:f0:ff:d2:02:fc:cb:e1:
                    85:c8:33:d8:b1:1f:9c:3f:3c:47:90:93:23:44:1e:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:76:72:B9:A7:11:A1:C0:ED:BB:2B:55:5B:4A:EF:20:36:A2:BA:3D
            X509v3 Authority Key Identifier:
                keyid:60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6e:9c:74:9c:49:cc:73:5f:28:52:09:9b:ed:3f:9c:4d:bf:
         61:74:73:28:42:70:7b:e2:cf:56:71:14:06:26:60:b9:d0:07:
         94:df:76:80:69:f8:51:e3:bb:e3:51:92:f8:3a:a9:d8:07:f2:
         a8:c1:d3:7d:90:f9:f1:c1:5f:a0:f6:33:2d:02:d8:1c:b8:3a:
         e5:58:96:5f:77:08:2e:e2:d8:ba:e3:9a:bc:49:5e:5d:93:60:
         c7:3a:a9:71:08:b9:97:b1:85:67:fc:c5:2f:df:06:32:46:e4:
         c5:67:22:ba:c7:ce:c5:a2:08:7b:3b:52:f8:6f:64:0b:3d:b2:
         df:11:2d:b6:1b:1d:4c:1b:5a:30:dc:4d:3a:aa:7b:b8:59:66:
         30:2d:2e:83:08:c5:a4:49:f5:d2:fa:fb:d5:43:40:a8:68:55:
         9e:d5:5d:87:6c:d3:a7:85:48:77:49:dc:85:a4:31:2d:95:58:
         43:36:6a:7b:17:91:5c:4a:65:49:ef:eb:f2:4f:2f:c5:b5:cd:
         f7:24:cd:2f:1d:68:87:50:d3:90:bb:bc:69:2a:db:21:78:cc:
         05:6f:5f:a5:ce:23:e9:07:ce:4e:64:ac:0b:9f:0e:f3:5e:5e:
         aa:02:0b:1a:07:85:52:b4:ca:d8:54:65:61:f6:69:da:13:d8:
         72:9d:67:22
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ5MDhBUjExMC8GA1UEBRMoNjAyRjk4NkQ5REJFMzIyMTQxNzQ1NUQ1NEVGMjMz
NjFGNTQ3NkZFMjAeFw0yNjA5MDUwNTAzMTFaFw0yNjA5MDcwNTAzMTFaMBgxFjAU
BgNVBAMTDTZhOWJhMjhmLWQwYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsmSX3k3x9pUX3M9FcoUKJjs+Ip8f1dPA84HvMHfIiqj3wsgz+o9kTohEv
jqC1XOan+VrhAJWK59uvzt4djgHZrWQaC1TKd3FgQO1j/3PMvy2x99ljbvmjTM6/
FnJ5QG/KFZgqy5MKx9p+/0dQMNwrpAPkotyUGGIwsUDELw9AnxKq3xqRseVkQutI
hx4jvLHkC05TcUgAq64dNVu9nkxEnCDO4ZaUcGO3sTExOGxwd6TKKeF0As0NrCde
5NrIJBaBhT4+YtmhROk0NuLB79d+WdkA4RisGXAhxmNOqudpx2bwpfnzcyzW8P/S
AvzL4YXIM9ixH5w/PEeQkyNEHqY1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUdnZy
uacRocDtuytVW0rvIDaiuj0wHwYDVR0jBBgwFoAUYC+YbZ2+MiFBdFXVTvIzYfVH
b+IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0OTA4LzdFQjgxMkRFNTY0NDExRjBCQ0I0RDVFRERBRTRFQzlDL1lDLVli
WjItTWlGQmRGWFZUdkl6WWZWSGItSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lDLVliWjItTWlGQmRGWFZUdkl6WWZWSGItSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzQ5MDgvN0VCODEyREU1NjQ0MTFGMEJDQjRENUVEREFFNEVD
OUMvWUMtWWJaMi1NaUZCZEZYVlR2SXpZZlZIYi1JLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWbpx0nEnMc18oUgmb7T+cTb9hdHMoQnB7
4s9WcRQGJmC50AeU33aAafhR47vjUZL4OqnYB/KowdN9kPnxwV+g9jMtAtgcuDrl
WJZfdwgu4ti645q8SV5dk2DHOqlxCLmXsYVn/MUv3wYyRuTFZyK6x87Fogh7O1L4
b2QLPbLfES22Gx1MG1ow3E06qnu4WWYwLS6DCMWkSfXS+vvVQ0CoaFWe1V2HbNOn
hUh3SdyFpDEtlVhDNmp7F5FcSmVJ7+vyTy/Ftc33JM0vHWiHUNOQu7xpKtsheMwF
b1+lziPpB85OZKwLnw7zXl6qAgsaB4VStMrYVGVh9mnaE9hynWci
-----END CERTIFICATE-----