Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File:                     ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier:          +azX1ZSzLLtH5TFe+Hcg9xnT0s8JKm7Juw3wbTrtaZM=
Subject key identifier:   2B:F7:B5:83:27:08:3A:A7:9F:E9:59:AF:71:6A:DE:61:7A:9A:30:AC
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer:       /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial:       098E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number:          098C
Signing time:             Wed 13 May 2026 01:36:12 +0000
Manifest this update:     Wed 13 May 2026 01:36:11 +0000
Manifest next update:     Fri 15 May 2026 01:36:11 +0000
Files and hashes:         1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: r1JGOUYch1xhF14chw7Jqtd/WbIFFCjB6P3xkODTXao=)
                          2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
                          3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
        Validity
            Not Before: May 13 01:36:11 2026 GMT
            Not After : May 15 01:36:11 2026 GMT
        Subject: CN=6a03d58c-b781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:ae:89:9a:b7:49:79:c1:bb:4e:cf:ee:13:
                    5b:f8:49:99:03:2f:14:ab:27:8a:45:aa:0e:ef:d2:
                    80:2d:bf:de:e4:11:db:0f:7a:4f:e6:7c:16:d4:90:
                    73:fb:3e:fb:0c:b7:9e:16:4c:ba:74:59:cd:fc:eb:
                    e6:3e:4d:a8:58:af:bb:e8:f2:d3:87:12:8d:e5:cb:
                    89:4a:c1:32:bf:b2:7c:97:e6:11:cb:42:05:4f:dc:
                    9e:4c:39:39:27:2d:2a:fe:0f:1b:5c:57:f7:b4:06:
                    41:07:c6:75:29:48:48:1f:76:7d:52:9c:76:91:09:
                    e4:01:19:fb:8f:28:89:e3:b7:24:c8:13:74:00:35:
                    91:9f:58:42:fd:84:9d:32:bc:14:d4:90:cc:e1:c6:
                    5a:4f:d2:73:ef:da:f7:c6:f3:f4:ca:a2:93:60:14:
                    de:af:f6:fe:5c:32:07:9f:a3:da:2a:15:74:a2:ec:
                    62:63:62:f4:1b:2d:4a:bd:7d:c1:20:2e:e0:d4:65:
                    38:0c:6c:c2:83:b1:e1:8d:32:b6:1d:a4:c7:41:b7:
                    cd:e1:32:83:e1:23:08:85:fb:20:78:aa:08:a0:6e:
                    a2:08:c9:dc:63:d3:94:06:1d:d7:01:35:1b:c4:a7:
                    f5:20:58:ea:ae:75:01:dd:cb:93:47:54:47:35:3b:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F7:B5:83:27:08:3A:A7:9F:E9:59:AF:71:6A:DE:61:7A:9A:30:AC
            X509v3 Authority Key Identifier:
                keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0f:7c:0c:7a:f0:c2:68:34:c3:62:49:fe:30:31:9a:2e:fe:
         11:d5:f8:ed:d7:17:07:43:e0:81:93:6a:78:83:0f:97:af:11:
         0a:ec:ce:11:88:fc:ca:ba:4b:e0:e3:12:ed:1d:5d:f1:d5:6e:
         6a:db:29:06:ce:85:58:37:a3:3b:50:71:3a:21:8d:e2:56:53:
         0c:9d:0d:dd:5d:86:23:9f:e1:b1:e7:53:3b:61:5c:37:27:c5:
         fd:3c:cf:00:b2:f3:64:3d:e0:82:f3:27:89:f6:2f:9f:26:79:
         97:6b:d0:37:f2:8b:73:24:43:10:22:91:47:52:22:88:f4:38:
         cc:04:b1:35:92:26:65:d8:64:50:22:6d:9a:96:5b:87:72:5c:
         dc:0e:f8:ee:7a:fb:93:ce:f0:21:8c:b8:91:e7:bb:ee:d3:8b:
         3c:7d:9c:29:47:f8:db:a7:cf:96:b9:7e:39:d4:89:b8:6f:2b:
         63:93:66:60:59:c5:0e:a6:8f:7b:19:0a:9a:a8:7d:e1:04:32:
         3e:ee:39:6e:6e:fc:3e:6f:ae:ad:6a:b7:9f:eb:5d:af:f6:19:
         d4:e0:45:27:a9:48:a3:79:51:0b:dc:bf:15:7a:01:76:16:68:
         74:3c:bb:4a:3a:83:a1:6d:e1:42:57:48:7b:1a:02:61:ab:8a:
         62:c8:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:09:40 2026 by rpki-client