Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft (raw, json)
Hash identifier:          L45Cv7r0xTEki6f6Rywxwu4Fsrq8A6iGR/N8q15y2+Y=
Subject key identifier:   70:48:39:82:AB:04:15:78:04:EB:2A:4D:88:C1:91:6F:D7:7B:82:AB
Authority key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Certificate issuer:       /CN=F3674908AR/serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
Certificate serial:       01C9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
Manifest number:          01C8
Signing time:             Thu 24 Sep 2026 04:57:49 +0000
Manifest this update:     Thu 24 Sep 2026 04:57:48 +0000
Manifest next update:     Sat 26 Sep 2026 04:57:48 +0000
Files and hashes:         1: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl (hash: 2rGyAK4qnfedDzRNEJ8EW+43Q9OChHseTTlmgcoUAjU=)
                          2: 1944E674564511F0983236F2DAE4EC9C.roa (hash: Y7C2EDuJLg0UUohvGlHcA8fBY7urPGjjAraukXhUClw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                          rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Validity
            Not Before: Sep 24 04:57:48 2026 GMT
            Not After : Sep 26 04:57:48 2026 GMT
        Subject: CN=6ab4adcd-8ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:8a:98:97:df:5c:91:48:4b:66:e4:35:8e:
                    da:d8:f4:fc:55:59:04:6b:c6:66:69:36:f4:f4:b1:
                    cb:52:60:3a:4b:10:17:95:01:de:6d:8d:e8:d7:71:
                    a0:d6:d0:52:3d:d9:53:14:da:8e:56:b5:42:ff:64:
                    b6:a2:2a:e8:d9:61:72:22:37:ad:5a:3a:da:9a:e0:
                    f8:b2:81:65:30:e8:21:fc:53:2e:f5:bd:0e:e3:a9:
                    bd:57:65:be:1b:8a:9c:58:75:23:a5:ec:d0:25:e5:
                    f1:f9:11:7a:43:4e:fe:a6:97:c8:4f:9b:23:2f:49:
                    24:33:6a:0f:d3:50:34:67:ec:60:15:e0:fb:9a:a2:
                    e1:31:c3:4d:2a:45:33:88:60:ef:6e:a4:13:96:8f:
                    d3:89:26:22:f6:a5:10:0a:57:f8:a5:aa:3f:9d:22:
                    e0:24:6b:47:81:a2:19:bb:e1:de:1f:93:a1:cd:79:
                    33:95:6b:c6:ed:14:2a:a5:70:d9:51:16:69:71:c9:
                    bd:e0:b3:dc:f8:b1:17:5b:ff:30:d3:33:66:e1:29:
                    60:ff:f7:d6:67:be:da:41:48:83:f5:6e:de:96:e0:
                    89:63:28:7f:89:82:0f:6d:79:01:7f:4a:8e:d7:fc:
                    6a:75:31:46:c8:58:e6:bd:32:c6:e4:63:f4:1e:88:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:39:82:AB:04:15:78:04:EB:2A:4D:88:C1:91:6F:D7:7B:82:AB
            X509v3 Authority Key Identifier:
                keyid:60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:37:96:6c:2c:e2:08:ff:dc:7f:75:6d:fc:15:9d:e3:dd:
         c8:8f:40:b9:4a:1f:d0:3a:51:10:f8:d2:b7:a2:f9:b4:97:e3:
         61:db:c0:87:b4:18:5f:87:9c:b0:40:24:17:d0:49:b5:c1:ac:
         81:a2:41:04:d5:a4:d8:12:7a:ef:08:95:93:e0:29:6b:a2:af:
         e4:bb:e8:e1:f3:9e:b7:67:df:81:e9:fb:d6:72:a1:32:29:75:
         29:d2:60:78:08:c1:b3:c3:9d:06:32:7d:68:e4:36:8b:52:6f:
         db:07:5e:c4:e2:8f:33:d3:87:cc:bd:b8:58:de:09:68:1a:a8:
         54:ae:00:bd:a9:24:b6:22:b5:f9:e0:46:d9:6c:05:05:4f:7d:
         e3:f3:77:61:c1:29:28:9e:8f:7f:e7:4b:2a:df:37:4c:d6:bc:
         39:8e:e2:e1:52:9b:4a:2e:9f:2a:2d:22:d5:1d:54:77:33:ba:
         3f:15:48:0e:f1:da:30:80:ee:72:7d:8e:b8:b9:af:85:ad:25:
         0f:cd:6b:57:f4:3e:0b:4c:81:b5:2e:48:ef:af:fe:ae:60:c7:
         52:93:41:f5:a6:80:24:61:6f:49:5c:ce:cf:df:d2:f6:62:22:
         45:32:84:0e:2d:6a:02:68:8b:7c:0f:02:a5:2f:44:e3:69:91:
         fb:0e:f6:44
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAckwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ5MDhBUjExMC8GA1UEBRMoNjAyRjk4NkQ5REJFMzIyMTQxNzQ1NUQ1NEVGMjMz
NjFGNTQ3NkZFMjAeFw0yNjA5MjQwNDU3NDhaFw0yNjA5MjYwNDU3NDhaMBgxFjAU
BgNVBAMTDTZhYjRhZGNkLThlZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSnoqYl99ckUhLZuQ1jtrY9PxVWQRrxmZpNvT0sctSYDpLEBeVAd5tjejX
caDW0FI92VMU2o5WtUL/ZLaiKujZYXIiN61aOtqa4PiygWUw6CH8Uy71vQ7jqb1X
Zb4bipxYdSOl7NAl5fH5EXpDTv6ml8hPmyMvSSQzag/TUDRn7GAV4PuaouExw00q
RTOIYO9upBOWj9OJJiL2pRAKV/ilqj+dIuAka0eBohm74d4fk6HNeTOVa8btFCql
cNlRFmlxyb3gs9z4sRdb/zDTM2bhKWD/99ZnvtpBSIP1bt6W4IljKH+Jgg9teQF/
So7X/Gp1MUbIWOa9MsbkY/QeiE7XAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUcEg5
gqsEFXgE6ypNiMGRb9d7gqswHwYDVR0jBBgwFoAUYC+YbZ2+MiFBdFXVTvIzYfVH
b+IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0OTA4LzdFQjgxMkRFNTY0NDExRjBCQ0I0RDVFRERBRTRFQzlDL1lDLVli
WjItTWlGQmRGWFZUdkl6WWZWSGItSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lDLVliWjItTWlGQmRGWFZUdkl6WWZWSGItSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzQ5MDgvN0VCODEyREU1NjQ0MTFGMEJDQjRENUVEREFFNEVD
OUMvWUMtWWJaMi1NaUZCZEZYVlR2SXpZZlZIYi1JLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7fDeWbCziCP/cf3Vt/BWd493Ij0C5Sh/Q
OlEQ+NK3ovm0l+Nh28CHtBhfh5ywQCQX0Em1wayBokEE1aTYEnrvCJWT4Clroq/k
u+jh8563Z9+B6fvWcqEyKXUp0mB4CMGzw50GMn1o5DaLUm/bB17E4o8z04fMvbhY
3gloGqhUrgC9qSS2IrX54EbZbAUFT33j83dhwSkono9/50sq3zdM1rw5juLhUptK
Lp8qLSLVHVR3M7o/FUgO8dowgO5yfY64ua+FrSUPzWtX9D4LTIG1Lkjvr/6uYMdS
k0H1poAkYW9JXM7P39L2YiJFMoQOLWoCaIt8DwKlL0TjaZH7DvZE
-----END CERTIFICATE-----