Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
File:                     yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft (raw, json)
Hash identifier:          Dj6jj2Gm3iHoaR5KJImUOQZlnEELRK0uAZ3oFbL1/BA=
Subject key identifier:   1C:E7:82:C1:2D:82:04:A6:58:3A:CD:F7:1B:54:85:BA:6D:F1:AF:76
Authority key identifier: CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F
Certificate issuer:       /CN=F36B905AAF/serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
Certificate serial:       013F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
Manifest number:          013F
Signing time:             Thu 26 Mar 2026 05:52:06 +0000
Manifest this update:     Thu 26 Mar 2026 05:52:05 +0000
Manifest next update:     Sat 28 Mar 2026 05:52:05 +0000
Files and hashes:         1: yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl (hash: FVJlH3N3CcOliGDw5XS0P9Z/YzqKwyzb3Cte1NS0Mtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B905AAF, serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
        Validity
            Not Before: Mar 26 05:52:05 2026 GMT
            Not After : Mar 28 05:52:05 2026 GMT
        Subject: CN=69c4c986-06bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:3e:fe:b8:bd:1a:62:46:4c:fa:66:ee:d5:
                    6e:dc:a6:d4:1c:0e:3d:76:9b:f8:21:5f:7a:18:51:
                    4b:49:6b:d3:87:38:c4:3d:f0:fa:07:47:10:0a:26:
                    5e:4a:bc:14:3e:42:dc:f3:35:06:0e:d5:38:53:76:
                    ab:73:66:52:95:c8:33:e5:e9:00:df:d9:25:e1:7c:
                    04:84:5f:3d:34:ce:e0:db:9a:81:bd:eb:94:e5:7d:
                    78:97:c1:66:6f:6f:53:3a:13:06:e7:8c:5d:d1:3e:
                    0c:00:9b:97:91:62:63:55:47:aa:3e:0a:1b:a3:e3:
                    bb:49:ae:54:ec:95:4c:2a:1e:8f:c2:59:9d:cd:68:
                    68:37:21:28:fc:05:cf:39:af:4f:36:94:e3:36:cb:
                    74:cd:03:d4:64:c6:de:cb:12:b4:9a:e8:27:b8:c1:
                    53:ce:8b:5c:db:74:4a:71:bd:94:bc:c2:7d:61:cf:
                    3a:60:b6:b0:96:31:a0:45:f9:65:0d:63:c2:36:77:
                    06:40:b3:7c:72:f4:59:fd:ec:d9:56:f0:15:55:19:
                    ff:b9:3b:af:12:1a:6c:bc:ab:17:e1:b4:17:39:cd:
                    fa:df:8b:bc:bc:f0:63:16:3f:ba:53:79:ba:2a:c1:
                    0d:ce:b2:49:f0:76:94:e5:e4:48:ee:f4:a7:42:87:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E7:82:C1:2D:82:04:A6:58:3A:CD:F7:1B:54:85:BA:6D:F1:AF:76
            X509v3 Authority Key Identifier:
                keyid:CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bc:0e:b8:57:f6:bb:a8:e4:06:54:0e:60:f9:01:03:8a:9e:
         d9:0d:2a:8e:09:df:a1:ed:0e:ea:8f:f8:d4:1c:31:be:7e:97:
         ef:22:8d:f3:59:7f:9c:b3:b8:d3:a5:fa:63:44:05:58:e9:cd:
         be:02:57:06:ad:4f:60:d8:d2:25:e0:42:91:b4:e6:7b:44:89:
         fe:f5:38:18:1c:f3:ee:ee:fe:f2:9f:4c:fa:6e:14:d1:16:e6:
         4f:a6:f3:50:50:24:3f:35:4e:4c:f2:87:f5:05:39:52:ea:aa:
         22:51:74:b0:f7:9c:6c:ae:66:2e:cb:76:e2:ea:2f:a8:a0:28:
         66:63:b5:66:a3:36:d6:68:c9:9e:86:ef:f7:72:5a:1b:e3:3a:
         79:81:84:77:e5:e2:1f:08:39:3b:32:b0:ce:2e:df:c9:8a:d0:
         24:e8:06:92:2a:da:e3:e4:a0:0f:8c:8d:51:b6:83:67:4a:62:
         4a:d7:1c:a3:d4:13:11:6b:5e:5c:f4:0e:4a:c6:7f:94:42:9b:
         8e:fb:93:43:39:92:ab:4d:a7:63:f1:85:f4:68:22:74:6b:b1:
         07:2c:13:e3:2e:ab:b3:9c:79:0a:4a:0f:4f:b4:bb:d5:4f:81:
         1b:dd:41:e4:aa:70:cb:4b:90:da:8b:60:91:7d:15:73:5f:db:
         f2:f8:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:06 2026 by rpki-client