Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          b4bzmcHotEW6jGUSeuMIRXltCWM+MhIfjL2zgh+ndRc=
Subject key identifier:   83:37:0D:B4:59:15:D1:6F:66:84:3B:65:34:0F:36:A0:55:6B:B7:F3
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       0699
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          0698
Signing time:             Wed 08 Apr 2026 02:26:26 +0000
Manifest this update:     Wed 08 Apr 2026 02:26:25 +0000
Manifest next update:     Fri 10 Apr 2026 02:26:25 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: nVvuv07o52v0ehss03+rOFULPePQ8WarI3QMgh8Loak=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 10 Apr 2026 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Apr  8 02:26:25 2026 GMT
            Not After : Apr 10 02:26:25 2026 GMT
        Subject: CN=69d5bcd2-f25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:2d:5e:39:81:01:6a:4f:94:64:13:b3:f4:
                    96:b6:37:c3:e2:f3:6a:f3:f7:5b:7f:d3:b2:37:6d:
                    db:1f:71:4c:30:8b:32:27:3f:1c:bf:00:4d:ee:8b:
                    c3:1f:3a:54:20:79:4b:fc:67:5d:9d:87:6b:b3:73:
                    5b:89:1c:09:f6:e2:e5:5b:50:ad:7b:57:d2:2f:55:
                    1f:56:cc:f0:ee:d0:30:4a:d0:b8:eb:a6:df:d8:2f:
                    f9:e9:21:17:03:55:fa:17:63:ce:d0:73:33:1b:00:
                    a1:17:24:d8:6e:3a:bc:cb:a9:ad:4e:cf:3b:c1:5b:
                    45:b1:64:4e:e6:20:83:dd:89:6f:db:8a:b9:e8:56:
                    2f:0b:ab:23:8d:d9:18:52:22:31:46:f3:70:27:f1:
                    ce:4c:54:5c:b7:6f:42:fd:da:39:68:46:85:f4:60:
                    92:b5:0c:42:4e:48:25:d9:3e:46:5d:02:bf:32:f9:
                    9f:42:71:7b:b4:cc:ea:d5:e3:36:0d:57:b8:3d:98:
                    13:c1:8c:60:bb:e7:4d:16:73:eb:cb:b7:11:4f:49:
                    48:f2:5d:85:a4:da:5a:89:fb:e6:ef:ee:37:0c:97:
                    85:5e:a6:2a:a6:0d:e9:1b:a1:3d:93:7a:4c:db:39:
                    ba:09:35:e8:bb:b6:f6:4e:47:a8:6d:ff:d5:e5:e7:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:0D:B4:59:15:D1:6F:66:84:3B:65:34:0F:36:A0:55:6B:B7:F3
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b0:1f:07:6f:ed:6f:2d:97:5f:d9:6d:6a:7f:c8:48:e8:9f:
         0d:9a:06:6f:ef:ab:03:d7:7b:7b:3b:d2:3f:08:2d:74:a2:6a:
         4f:e9:72:dd:86:bb:a0:5c:12:aa:ba:cc:11:0a:5d:52:43:e7:
         eb:06:ed:9f:8c:49:f9:be:70:9c:7e:1a:f1:11:42:7c:3b:30:
         b2:bc:4a:75:9e:0e:67:59:a3:7e:d2:9f:6a:8f:52:aa:c1:cf:
         c5:39:88:c0:02:de:d1:0b:34:c1:8b:e2:26:5e:1d:af:7a:dd:
         7c:8e:6d:21:9f:05:dd:b1:08:44:00:dd:89:58:7c:f5:21:5b:
         42:e9:29:49:e1:0f:74:37:8f:b4:5e:dd:51:4d:35:52:8e:4f:
         cb:e8:91:b4:36:b9:b9:6f:36:3c:fb:cf:32:ef:f9:bf:48:09:
         9d:62:4d:cd:b8:78:67:01:fb:67:07:d6:fb:e0:3f:a3:f0:a1:
         5f:49:10:28:92:c0:45:c0:c4:68:a6:f5:40:51:86:a6:cc:c4:
         6d:da:cd:c4:ff:9f:c8:b4:8f:09:a8:0b:bc:bd:5a:5c:86:16:
         54:c2:7e:c4:73:8a:e4:6f:d8:70:e6:23:8b:f3:f4:66:e3:4b:
         0d:b7:54:b7:47:08:0c:3f:62:70:34:52:5e:66:41:b5:8f:b7:
         a6:d9:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:31:55 2026 by rpki-client