Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft (raw, json)
Hash identifier:          xKmoHo7zEvKmmKENEIe8qYfl6Rwk2fwBBdBqhjWnqD4=
Subject key identifier:   55:D7:C4:D4:56:C3:BC:B5:1E:E4:50:DC:88:D5:59:D1:43:86:C9:CC
Authority key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Certificate issuer:       /CN=F3674908AR/serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
Certificate serial:       72
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
Manifest number:          71
Signing time:             Mon 20 Oct 2025 05:06:27 +0000
Manifest this update:     Mon 20 Oct 2025 05:06:26 +0000
Manifest next update:     Wed 22 Oct 2025 05:06:26 +0000
Files and hashes:         1: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl (hash: 2HJXpFEKp8J/B+VjNLYtSxv5W+QJhzQY2jX+bV2JTyc=)
                          2: 1944E674564511F0983236F2DAE4EC9C.roa (hash: Y7C2EDuJLg0UUohvGlHcA8fBY7urPGjjAraukXhUClw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                          rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Validity
            Not Before: Oct 20 05:06:26 2025 GMT
            Not After : Oct 22 05:06:26 2025 GMT
        Subject: CN=68f5c353-87c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:84:cd:be:b6:0d:97:9f:0f:73:dc:76:f6:
                    2f:fa:be:aa:b3:5c:5a:7d:41:d2:79:bf:b3:74:e0:
                    2c:71:32:08:fa:8c:b0:a0:c8:0f:05:08:73:07:7e:
                    7a:1e:e0:ac:7e:3f:58:5c:8a:a3:54:64:db:0d:a5:
                    2d:32:33:92:9e:42:5e:d0:87:5a:d8:09:61:cf:90:
                    e3:59:33:07:26:cd:6e:54:6c:d6:b0:63:6a:6f:57:
                    06:64:6d:1e:96:7b:ab:a7:fa:a8:88:7f:46:16:50:
                    e9:76:54:fe:78:8c:b0:33:47:b6:fd:68:26:2e:8d:
                    6d:98:e0:58:5d:cb:7e:8c:2b:09:29:2a:64:58:88:
                    4b:2d:0a:f8:14:7a:40:6f:ac:b1:8a:50:b0:d7:f9:
                    68:42:1f:e8:f1:b8:f7:af:4a:0f:92:f1:e8:dc:e1:
                    77:98:48:a7:9c:58:04:05:75:07:d2:a6:44:68:51:
                    a4:f0:0a:7f:e2:a1:0c:95:22:b4:23:04:71:81:3a:
                    ef:00:50:7a:aa:e7:38:94:33:6e:a3:87:9a:da:ce:
                    1a:91:3a:50:68:1e:0c:f4:09:47:85:27:20:bf:aa:
                    ad:48:43:3b:85:9d:62:f4:28:9f:bb:00:73:64:bc:
                    db:ee:d3:01:4e:bf:41:12:51:80:ab:be:4c:de:11:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D7:C4:D4:56:C3:BC:B5:1E:E4:50:DC:88:D5:59:D1:43:86:C9:CC
            X509v3 Authority Key Identifier:
                keyid:60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:98:7e:88:d4:ba:30:42:17:48:9b:12:d4:85:05:02:72:
         8d:d9:b2:23:d3:c0:81:0c:93:7f:42:7d:7d:6e:b3:24:62:fd:
         1d:a2:0f:a3:1a:4a:da:19:bb:7e:a2:d6:51:f4:57:90:6c:42:
         af:a2:30:a2:4e:f6:cb:56:93:a2:ca:91:4e:2a:1a:54:4e:5d:
         7f:bf:a7:38:8a:3d:d5:7b:c7:1f:c5:02:c0:e5:27:71:72:6a:
         ea:f4:dd:c0:f1:98:b5:a8:16:0c:27:94:b2:c8:8e:97:e3:61:
         4f:b5:e0:10:8c:83:b5:cb:c4:09:82:20:f8:49:d6:29:05:5f:
         0c:bc:78:cc:4e:53:4c:d8:2c:61:0a:b4:27:69:df:57:73:71:
         70:3f:28:9a:c6:f4:d9:79:3e:29:7d:8e:b5:aa:98:6d:4e:23:
         ce:54:02:c9:58:ba:78:ac:07:b1:6b:e9:c3:e9:22:4a:08:1a:
         71:d2:7e:88:98:65:39:45:73:5b:ff:39:77:c0:19:72:bf:3c:
         23:f4:fa:33:c0:79:b7:f0:3d:dd:cb:fe:41:e8:35:ae:79:1c:
         e9:80:63:67:05:c4:38:b6:5a:6d:7b:45:d1:47:08:77:ec:55:
         d9:32:c2:6f:bb:78:e9:12:65:28:fb:0e:fa:89:a0:b7:c8:f6:
         b1:34:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:09 2025 by rpki-client