Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
File:                     YgYKORQeYf1_hIcoAdkqSoCYD2o.mft (raw, json)
Hash identifier:          6chXN5pP5iSOuvf0n+9+TK+d8sp2UtV3YytfWVINOiQ=
Subject key identifier:   76:46:1C:D8:61:A6:75:7C:E0:07:1B:E3:E5:F6:A2:F1:2C:D1:03:FD
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Certificate issuer:       /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial:       0576
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
Manifest number:          0575
Signing time:             Thu 26 Mar 2026 03:18:36 +0000
Manifest this update:     Thu 26 Mar 2026 03:18:35 +0000
Manifest next update:     Sat 28 Mar 2026 03:18:35 +0000
Files and hashes:         1: YgYKORQeYf1_hIcoAdkqSoCYD2o.crl (hash: m2HDT3Vda5ijP+vtVziiMdJvlNTC/D5WLOtDtXhetcw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                          rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
        Validity
            Not Before: Mar 26 03:18:35 2026 GMT
            Not After : Mar 28 03:18:35 2026 GMT
        Subject: CN=69c4a58c-9c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:08:4b:7e:02:79:0d:30:c2:82:70:77:1e:
                    bb:bb:1e:9d:d2:79:ae:a8:bc:f3:83:b6:12:4c:9c:
                    f2:c6:cb:72:b2:a8:9a:fe:33:d1:42:79:a3:6a:64:
                    89:91:a7:b8:04:58:fb:65:db:be:05:77:2a:4a:c9:
                    f2:06:5e:7b:a4:39:b1:7d:99:4e:11:9c:aa:f9:c7:
                    dd:86:26:3f:55:e3:a4:bc:0a:21:6c:98:68:98:9b:
                    4b:1f:4e:a7:50:1a:47:de:6f:5a:3e:f6:56:41:78:
                    84:7a:ca:59:42:1f:ab:7b:39:56:5a:4c:58:5c:8a:
                    17:94:1a:c9:e7:16:85:3a:60:44:65:26:40:f0:a3:
                    3d:2a:5d:ac:8a:55:c4:58:09:a2:c6:75:a0:5a:23:
                    25:41:26:b0:ee:73:ad:ce:4f:25:0e:2c:ee:48:03:
                    5c:87:cf:a5:81:d1:e7:29:ce:fe:d1:03:5b:0c:01:
                    2c:dc:20:86:e3:41:8d:ac:b5:9c:d1:a6:60:ba:da:
                    44:d4:0b:7d:06:51:d9:f7:c5:57:f6:55:8c:e6:fb:
                    93:61:d2:08:ff:27:bb:2f:43:90:bd:c9:aa:fd:42:
                    15:1a:42:3c:cd:20:0d:c9:73:a4:92:d1:b4:6b:31:
                    d0:8d:1f:6a:61:c4:8e:5e:b8:58:61:f7:08:2b:05:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:1C:D8:61:A6:75:7C:E0:07:1B:E3:E5:F6:A2:F1:2C:D1:03:FD
            X509v3 Authority Key Identifier:
                keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:60:49:fd:99:d6:ff:eb:9b:16:c4:c0:23:af:5c:1b:78:
         58:e6:68:5a:70:86:4c:a9:6c:1b:95:bd:ae:5e:bf:bd:4b:10:
         82:b4:15:2f:3d:24:37:5a:2c:20:8f:b8:87:5d:c8:2e:c8:e6:
         38:42:09:cf:7f:aa:00:33:ef:23:66:d4:3c:33:db:aa:ec:64:
         fa:0b:8c:4a:74:9e:65:4e:a2:72:51:03:27:eb:cd:8c:27:e9:
         8b:9e:8d:9e:2d:0f:27:f1:25:26:34:2b:2d:62:fb:26:49:8f:
         2b:83:18:a6:62:10:31:22:97:0d:ec:47:1b:eb:d9:3a:c9:fc:
         31:ce:d5:57:ef:e6:f2:c3:e2:14:05:8e:ed:4c:d2:c4:a9:bf:
         3e:4a:55:55:a9:f9:47:ad:80:e0:a6:74:98:af:ea:85:9b:42:
         38:09:9c:69:5c:b6:a2:69:eb:e9:f5:2e:a1:07:6b:4d:5e:cf:
         e4:43:27:ef:12:5c:5c:c8:8b:ec:3a:1d:5a:11:22:a5:89:99:
         fb:b8:c9:20:14:bf:33:d2:a8:33:07:73:89:75:e7:e7:72:1b:
         11:c4:98:f6:74:8f:81:84:ac:cf:83:63:36:30:aa:d2:60:33:
         41:ce:24:de:68:a6:64:37:3a:2d:a8:27:bc:35:11:f3:f4:91:
         62:f5:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:52 2026 by rpki-client