Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
File:                     yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft (raw, json)
Hash identifier:          mItCzmgyZR1JeVxrsvOlubqSeKLSuYAsDwP4IYEJw5Y=
Subject key identifier:   C5:C6:EC:5D:53:29:44:2D:2B:C9:76:28:11:84:E3:D3:69:FD:90:E6
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Certificate issuer:       /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial:       047A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
Manifest number:          0477
Signing time:             Sat 24 Oct 2026 03:45:59 +0000
Manifest this update:     Sat 24 Oct 2026 03:45:58 +0000
Manifest next update:     Mon 26 Oct 2026 03:45:58 +0000
Files and hashes:         1: yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl (hash: dH/axrtb/yqEasG3awrF+y6vUG5PMMIF+rU1VLMO4QM=)
                          2: 04EB056A6ABE11EE9E4243804AD9E6FC.roa (hash: EyVlkSGybf5bnAy71sGPmJ47rqIPQfEXtljbaai4c88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 03:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C38D9AF, serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
        Validity
            Not Before: Oct 24 03:45:58 2026 GMT
            Not After : Oct 26 03:45:58 2026 GMT
        Subject: CN=6adc29f7-585c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:c4:c0:cc:6f:49:d4:c8:eb:72:df:5e:91:
                    82:1e:6a:99:e0:ca:a0:30:68:41:f4:7a:33:ec:ca:
                    fa:00:82:a4:94:99:84:86:77:42:fc:cc:54:67:d1:
                    86:e7:f4:c1:9c:57:57:f4:ff:35:86:9f:7d:84:d9:
                    57:aa:a8:95:f4:7f:0e:38:49:e8:ad:be:39:56:5a:
                    6d:64:07:dd:d8:09:ad:3d:b5:f2:37:c8:53:55:b9:
                    a1:3d:27:3f:2a:23:7f:4e:23:8c:14:22:84:51:09:
                    eb:cc:a7:7d:b9:bf:19:68:37:f9:af:47:27:67:e8:
                    fb:02:3f:a6:c6:b7:e1:09:dd:f2:5b:62:8a:84:57:
                    70:aa:69:a0:37:d1:7f:f7:5e:61:70:37:75:aa:41:
                    9b:db:0a:44:72:5c:db:17:c4:f5:53:23:0b:c0:75:
                    b3:de:bb:8b:18:a8:bc:26:a0:29:49:5c:0f:bc:42:
                    1e:b3:42:65:27:92:e8:9e:06:2a:5a:a1:d9:2d:bb:
                    40:7d:39:9d:e0:83:18:da:6b:5d:53:7a:5b:36:a4:
                    b6:94:f7:34:72:d0:88:46:7e:91:16:c3:af:54:19:
                    08:2e:c0:3f:f7:e4:69:b3:2e:1e:2c:b7:d8:24:54:
                    63:e0:72:56:a3:13:e0:b1:37:c9:17:cf:5a:25:4b:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C6:EC:5D:53:29:44:2D:2B:C9:76:28:11:84:E3:D3:69:FD:90:E6
            X509v3 Authority Key Identifier:
                keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:91:5e:ea:d4:9d:52:6b:6f:41:fa:30:91:19:2d:5e:9f:07:
         4d:f7:3f:8b:8c:0a:42:f0:ac:53:ac:1e:4b:9e:fa:ae:f5:5d:
         d5:5b:fc:f0:89:e7:b2:96:e7:e9:fb:1c:8d:87:be:27:c4:7a:
         0d:82:30:42:97:19:88:03:c5:e3:1e:ce:e8:92:ef:b0:97:6c:
         88:21:3c:dd:25:81:de:25:ed:8d:4d:b2:a9:d3:30:dc:53:f2:
         b9:74:84:14:2c:44:44:60:f7:16:cd:2c:d7:b3:6a:ae:8b:a3:
         b1:69:7e:29:4a:ad:e7:a6:dc:43:94:08:e5:27:8c:15:be:cf:
         6c:48:42:dc:71:0c:a6:d8:26:c8:67:7d:06:c4:3b:a0:75:c4:
         ec:b5:a5:9f:72:bd:67:ea:c6:74:30:01:c8:63:74:bf:bb:1e:
         c2:e9:4f:ca:eb:f3:fd:92:d1:29:57:40:ab:7f:2a:b3:51:26:
         4f:7b:fa:0d:df:43:ba:1d:99:06:32:68:84:8f:e0:64:e1:66:
         a6:58:3a:55:44:f7:e2:30:c6:b6:05:83:2d:d1:96:ae:59:4c:
         42:92:fc:f3:ec:7a:a0:77:69:15:aa:f7:7c:01:7c:7b:fc:35:
         49:d5:20:dd:c4:81:ed:44:25:69:de:03:7a:f1:34:6a:e8:9f:
         01:9f:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----