Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
File:                     yfme5j28AsDEecoXeykoIBKCLro.mft (raw, json)
Hash identifier:          h0AiK2ZzjNaaVY5FFH7VGhX6wH5WBEdUJSPitDRAE/I=
Subject key identifier:   81:5B:52:3B:3E:3D:70:1E:F9:33:47:78:BD:4F:52:30:6E:D1:33:52
Authority key identifier: C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA
Certificate issuer:       /CN=F36DCA7DAF/serialNumber=C9F99EE63DBC02C0C479CA177B29282012822EBA
Certificate serial:       D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
Manifest number:          D5
Signing time:             Sun 15 Nov 2026 05:33:08 +0000
Manifest this update:     Sun 15 Nov 2026 05:33:08 +0000
Manifest next update:     Tue 17 Nov 2026 05:33:08 +0000
Files and hashes:         1: yfme5j28AsDEecoXeykoIBKCLro.crl (hash: wWnVBvATQtahJuoU1DwEtWUBpOfKNwzLKJGJXJst+JQ=)
                          2: 79A111D23CB811F1849554CECE1D38B0.roa (hash: W4ncgn/9qCTqVSqUrpr2GjFUMug92xQU3kiqxkivy8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DCA7DAF, serialNumber=C9F99EE63DBC02C0C479CA177B29282012822EBA
        Validity
            Not Before: Nov 15 05:33:08 2026 GMT
            Not After : Nov 17 05:33:08 2026 GMT
        Subject: CN=6af94414-7e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:02:fa:d6:1a:6c:be:2f:73:a6:f0:bc:77:
                    0a:4d:18:1b:fe:c6:9c:a1:0c:e8:44:1a:5b:e7:68:
                    12:eb:9b:ee:9f:f0:16:d2:e6:8f:bf:a5:9e:d6:cf:
                    3e:86:7c:08:0d:48:20:c0:a0:7d:87:2c:26:32:e8:
                    bd:ef:b5:63:c4:72:51:b6:47:73:ac:02:c6:d9:4f:
                    30:48:d6:7a:2d:ae:4b:07:16:bc:97:37:d1:1c:24:
                    5d:0d:3e:93:0e:50:f2:1b:53:da:8f:15:57:c2:41:
                    b1:b7:47:a1:af:a1:bc:59:c4:cb:49:d6:02:da:7b:
                    fe:84:11:fc:52:74:cc:f4:f6:c2:b7:f9:a7:bf:0e:
                    1e:99:55:22:9b:42:69:65:93:81:24:7e:74:71:b6:
                    f5:b6:5e:5b:0f:05:c6:a1:be:34:df:aa:6d:64:bd:
                    83:12:4b:c6:59:5b:66:1b:92:32:47:b6:d1:4a:ea:
                    d9:94:b8:69:bd:e4:64:5a:e9:9d:e9:7d:2d:e8:a1:
                    c6:43:80:44:fe:ff:36:26:f5:d3:3b:4f:76:fb:3f:
                    fc:92:48:10:d5:9f:d5:7e:88:5a:0b:eb:8f:62:59:
                    a7:f1:b0:af:7c:23:12:2b:5a:f9:1b:28:4e:4c:eb:
                    9d:c7:98:cb:32:de:1d:75:78:c9:5f:49:ec:38:16:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5B:52:3B:3E:3D:70:1E:F9:33:47:78:BD:4F:52:30:6E:D1:33:52
            X509v3 Authority Key Identifier:
                keyid:C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:42:35:42:31:fe:c0:93:e1:fa:d2:36:18:f8:b5:80:e6:5a:
         d7:e1:2e:18:32:df:2c:48:09:07:a0:86:69:67:81:69:bf:fa:
         5b:01:a7:2f:3b:c0:58:6f:85:79:c0:89:fd:30:69:6c:7c:07:
         17:23:39:7c:7a:a1:1a:e8:7f:7a:b2:2f:85:bd:76:4f:00:70:
         bb:80:12:90:3e:91:b0:be:c6:01:a8:cd:60:b0:2c:44:fb:1e:
         6e:7c:31:7a:db:ae:35:b6:86:69:cf:11:9d:9b:95:24:91:19:
         3a:df:63:af:8a:8c:20:ff:25:17:a8:14:70:43:2e:d9:3e:8a:
         ba:24:c9:1b:3f:48:58:0b:4e:bb:af:57:eb:7b:1f:a8:69:4c:
         24:34:13:e8:4e:85:54:14:d5:bb:8b:b3:26:4a:91:2d:f6:f7:
         3b:15:58:68:98:46:80:f4:dc:07:17:07:24:2b:f9:fd:ab:64:
         b8:07:27:57:cd:d5:b0:38:b5:de:2d:1c:59:c6:5a:bd:39:cb:
         90:4a:e2:ca:9a:e1:46:c2:90:d0:ad:a0:00:ee:29:bb:ff:e3:
         00:de:9f:85:52:16:61:7d:66:b3:8a:dc:72:97:a1:dc:7a:d2:
         58:a3:70:26:5e:16:6f:0a:05:a4:dd:75:ed:66:ba:e4:8e:29:
         7a:b0:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----