Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          G2UnEC5GXVyByS+DJkG9FhYWmL0ms3a2+1iWGKeCRPE=
Subject key identifier:   95:C2:CA:5A:1F:B6:85:A8:B2:86:7A:5C:F0:F6:00:02:01:5A:74:B8
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       0220
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          021F
Signing time:             Sun 15 Nov 2026 04:52:31 +0000
Manifest this update:     Sun 15 Nov 2026 04:52:31 +0000
Manifest next update:     Tue 17 Nov 2026 04:52:31 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: fNA6UCS9caJ2eiyRv5cw6AYl8WWzt3hWkBeH7I2mT8Q=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Nov 15 04:52:31 2026 GMT
            Not After : Nov 17 04:52:31 2026 GMT
        Subject: CN=6af93a8f-bd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:52:6b:3e:21:0c:d2:fc:c9:b4:a8:2e:3a:
                    12:9a:73:ed:9c:0c:6a:c4:fa:09:b3:38:9e:4f:ce:
                    b1:d1:87:8b:df:c3:26:af:92:ea:73:53:10:79:4a:
                    7a:7e:31:25:89:0f:76:cd:5d:c0:51:bb:c5:07:da:
                    63:7a:f5:c5:ca:6b:d4:d5:22:c9:82:7c:99:d6:d7:
                    0b:b7:21:f1:aa:ce:d9:e7:d3:a1:c4:3c:99:06:59:
                    d5:d3:a5:86:94:30:3d:81:e5:c9:09:ea:7a:eb:8f:
                    5a:8b:74:b3:91:ab:1d:8b:b3:51:46:46:e0:87:31:
                    47:77:8c:f4:50:88:44:4c:32:e9:8c:81:43:17:cf:
                    44:00:44:51:35:2f:e6:c2:0f:e4:1e:92:16:76:5d:
                    c3:ab:27:36:a9:fc:b1:66:30:f8:ac:a9:48:cc:a3:
                    d2:57:fe:13:01:02:e1:db:c2:6f:7e:a3:44:9a:6a:
                    80:40:b4:91:28:61:a4:ab:74:50:57:5c:3d:e9:20:
                    b9:eb:7c:05:a6:d4:70:c7:36:64:b2:32:04:76:db:
                    e5:55:fd:00:2d:af:be:9a:05:16:12:d6:f9:67:77:
                    61:42:e5:ce:ad:31:03:4a:64:a1:ab:5b:5d:d0:db:
                    82:04:52:d5:87:5b:c4:55:24:2b:23:7c:2e:53:73:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C2:CA:5A:1F:B6:85:A8:B2:86:7A:5C:F0:F6:00:02:01:5A:74:B8
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:3a:a1:fe:f9:79:7d:46:e4:1e:e6:03:e7:a4:b8:0c:bf:
         7b:f7:f1:25:fc:6f:be:3c:78:9f:46:3e:32:7a:47:65:2a:ed:
         a7:dd:5b:3a:0e:22:8d:04:de:fa:63:e9:6d:9e:f3:25:ea:f5:
         26:c9:b1:19:a6:a6:3a:dc:0a:4a:b1:91:c5:57:a4:cc:db:23:
         4c:4d:77:de:09:0f:26:a0:69:97:40:54:b2:58:48:8d:c2:6a:
         b4:b7:26:3d:a9:8b:1c:2a:9d:d4:71:0e:f9:7c:09:23:7f:32:
         91:d9:71:43:bf:ec:d5:27:4c:6a:ba:a1:06:f5:1c:aa:59:56:
         23:f7:95:5f:24:d5:57:56:f4:c7:b6:23:a4:d8:26:26:cd:a7:
         9b:45:61:d9:ef:a8:1f:13:8a:01:a4:58:e3:d9:63:84:e5:d8:
         41:89:0f:1c:59:99:7b:fa:92:d2:dd:0f:5b:f3:c9:81:18:39:
         8f:74:98:63:c1:b3:b5:19:09:39:a8:dd:33:aa:3f:f4:da:44:
         65:21:8f:c3:05:d9:0a:31:77:51:94:08:c2:52:a4:5b:28:a4:
         3a:93:af:09:ac:ec:6a:f5:0b:ba:a7:e2:77:ff:fd:28:c8:2d:
         ec:5f:62:96:f8:6d:c1:61:cc:4a:f6:fb:d9:2e:42:02:46:6e:
         b3:18:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----