Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft (raw, json)
Hash identifier:          KKY05kw/+wPX995mPJ0xWZbMUPgIUxq6mAYuA14wGvA=
Subject key identifier:   5F:16:90:C0:C9:1C:48:71:21:5F:FE:7A:4B:54:80:24:10:A8:2C:FD
Authority key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Certificate issuer:       /CN=F3674908AR/serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
Certificate serial:       38
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
Manifest number:          37
Signing time:             Sat 23 Aug 2025 05:21:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:21:10 +0000
Manifest next update:     Mon 25 Aug 2025 05:21:10 +0000
Files and hashes:         1: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl (hash: D5gc/lIBtX8vuoo/RvO/oxDNbrmeN+HSw0m4KDCjjK0=)
                          2: 1944E674564511F0983236F2DAE4EC9C.roa (hash: Y7C2EDuJLg0UUohvGlHcA8fBY7urPGjjAraukXhUClw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                          rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Validity
            Not Before: Aug 23 05:21:10 2025 GMT
            Not After : Aug 25 05:21:10 2025 GMT
        Subject: CN=68a94fc6-4d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cc:f0:f8:43:89:78:44:4f:c9:25:b7:cd:30:
                    2d:be:5c:c5:cb:bf:9e:61:9e:99:8b:fa:46:72:1a:
                    e2:31:14:fe:2e:84:93:1b:6f:10:d3:d2:1b:d8:03:
                    53:46:e6:3a:85:71:35:bb:5d:c8:82:5e:43:29:6b:
                    9f:6c:d8:5a:02:38:02:be:df:66:f9:a5:15:d2:7f:
                    3b:ab:80:41:1a:93:cf:f3:7d:4f:6f:50:0a:b0:d4:
                    c6:6e:5d:d5:6e:d5:6d:34:8a:35:3e:b2:7b:0f:2c:
                    27:f6:ad:e1:13:96:53:be:58:db:c0:00:91:4f:46:
                    f0:84:da:5f:fe:8e:d7:7e:23:37:9d:80:25:df:ea:
                    38:68:e5:ca:d1:ce:89:73:4a:23:09:b2:d8:2d:41:
                    5b:e4:86:ea:42:2b:a5:94:f8:bf:44:f3:97:cf:fe:
                    c0:8c:0e:e5:21:da:33:cd:f9:42:16:2e:08:bd:14:
                    27:ed:15:a0:05:03:60:ec:f0:37:8a:10:97:72:c9:
                    9d:6c:63:95:bc:bf:8b:14:09:3e:12:31:1d:fd:8b:
                    f5:f4:9f:8e:03:d5:06:97:10:6e:9f:a2:de:26:8c:
                    3e:dc:73:7e:46:32:3c:75:e8:63:00:fc:d3:95:8b:
                    7a:c9:37:72:b8:1b:e7:1d:04:37:73:53:74:cf:04:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:90:C0:C9:1C:48:71:21:5F:FE:7A:4B:54:80:24:10:A8:2C:FD
            X509v3 Authority Key Identifier:
                keyid:60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4b:90:26:75:89:c0:fe:31:eb:6e:19:dd:37:66:d0:23:4d:
         11:4b:87:83:0c:30:e9:26:ef:08:ca:0a:77:3f:67:0b:b9:0c:
         49:95:37:58:4a:4e:ed:34:4d:6a:f6:e9:c0:bb:66:68:de:d2:
         2a:ad:12:5e:8a:d5:68:37:92:46:d5:81:a9:57:28:77:4c:64:
         e3:9f:fa:78:11:d6:80:18:6e:e2:c9:39:e5:8f:eb:92:1e:a5:
         af:2c:c8:ef:33:ca:06:7d:09:14:d7:fd:a7:2f:84:40:70:37:
         4f:84:d2:b4:f1:e4:ea:eb:ae:6d:e1:b7:52:18:5e:58:16:ba:
         f0:06:38:70:67:6d:ae:18:86:cd:b2:e2:a2:6a:b0:5d:61:90:
         a5:0a:05:af:4b:99:db:9e:15:c8:5c:a3:13:1e:41:a1:d6:f1:
         25:1d:c3:1f:dd:69:f3:62:00:34:e8:63:58:88:6d:b2:b8:fc:
         ba:f3:51:c2:1e:b3:22:3d:f8:07:31:6b:30:27:07:20:ce:43:
         4c:ba:83:bd:22:92:4f:40:2a:a4:e0:9e:3d:ff:3c:31:be:d5:
         76:25:16:3e:c1:f2:1f:e9:17:2e:c8:57:df:19:ec:28:59:cb:
         c5:ee:9b:6e:07:e7:e9:5a:da:ef:4c:41:a6:33:70:00:75:3f:
         28:0a:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:12 2025 by rpki-client