Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          Q8gO13g7WUoog1B3myAPCPj0agsDyOvc9IWGEdNs9qE=
Subject key identifier:   DF:90:49:AD:3E:CA:DD:87:D5:78:12:7D:D9:31:06:86:99:88:63:C9
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       05EC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          05EB
Signing time:             Mon 20 Oct 2025 02:30:45 +0000
Manifest this update:     Mon 20 Oct 2025 02:30:44 +0000
Manifest next update:     Wed 22 Oct 2025 02:30:44 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: kEtEjGTwO7zUZFPd/4T5NDUhJFEtULXGUBu+6MgaMXg=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Oct 20 02:30:44 2025 GMT
            Not After : Oct 22 02:30:44 2025 GMT
        Subject: CN=68f59ed5-40b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:cc:7b:47:45:b8:78:5c:34:8a:3b:e1:fa:
                    b5:88:42:24:bf:da:a7:9f:a0:18:4d:35:d0:f2:69:
                    0f:ab:6a:1d:98:bb:c9:00:79:75:9f:5b:f6:b0:8c:
                    f9:6f:ef:41:76:76:e2:70:22:c3:66:4c:60:97:85:
                    ec:2f:b8:5a:69:5c:5b:b2:71:81:79:65:fa:31:32:
                    f5:ec:8b:d3:54:ff:e7:fd:8c:4d:c7:f7:79:9a:70:
                    f1:e6:4a:ea:06:b2:be:85:2e:77:a1:be:c6:8d:3e:
                    63:51:7b:f8:ca:70:7a:ca:df:91:fa:59:e5:3a:f1:
                    8e:ab:ad:57:36:76:03:ca:12:c9:2a:c3:bf:c1:d9:
                    f9:dd:7b:98:58:64:cf:6a:e2:c2:e8:51:00:4b:04:
                    b0:1f:04:8b:5b:ef:78:0a:32:58:5b:af:9f:d3:70:
                    89:b5:5d:52:0f:17:27:bc:5b:34:8d:93:3b:c3:33:
                    61:1d:fb:ec:2a:fb:3e:0a:e2:4d:2f:97:9c:d5:2e:
                    f1:d3:f3:17:c9:45:3e:bf:7f:36:ca:e8:4a:d8:c2:
                    3e:0e:9b:1b:fc:65:6d:b4:b2:ca:e4:aa:1b:9d:8c:
                    a3:19:ab:72:2f:d9:37:16:e4:ed:86:68:f4:c4:33:
                    15:86:bd:09:d6:84:d2:e5:19:9c:be:38:d8:3a:99:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:90:49:AD:3E:CA:DD:87:D5:78:12:7D:D9:31:06:86:99:88:63:C9
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:d2:82:ee:00:48:8e:4f:19:6c:9c:d5:f9:6c:1a:bc:5c:
         0d:fd:db:42:9a:f0:10:e5:97:4a:bc:06:72:f9:5e:9f:0d:07:
         57:0a:4c:63:2a:67:1b:d7:5c:6f:ab:0c:69:48:8a:b1:8b:ca:
         dd:fd:28:c4:5e:e0:eb:0f:87:d7:5d:d5:21:98:d2:f5:9c:26:
         04:8b:a3:9c:7a:fb:fa:90:e1:54:1f:29:d2:18:b6:e9:c8:b5:
         64:df:e0:03:15:d9:52:e6:e6:a2:09:23:fe:91:c9:e7:ef:79:
         fb:f9:ea:4a:82:28:3e:87:c1:ec:e8:70:62:aa:fa:bb:68:75:
         73:ad:5b:20:16:32:8a:f3:75:6f:61:27:aa:94:1a:94:89:2d:
         33:10:5a:43:60:13:ab:b3:90:11:62:c4:d6:ce:63:07:03:fe:
         c0:61:57:ab:9e:5d:69:c7:78:27:b5:26:ae:86:38:bb:55:c1:
         9b:2d:05:c0:74:69:24:3f:13:e4:dd:22:49:90:0b:21:6c:26:
         8b:cc:0d:ec:5c:11:1c:1d:3c:cf:eb:34:9b:40:9b:5b:ba:a9:
         35:23:b8:b8:c1:13:a8:5e:ed:6d:ed:d5:56:40:56:05:d6:e9:
         13:eb:07:51:cc:3a:f1:78:dd:0b:14:92:12:58:aa:dd:3b:c2:
         ec:c0:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:53 2025 by rpki-client