Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft (raw, json)
Hash identifier:          mlSbKQlFhWS1xxMOsScvGHDtQoq9iNcHK0H5qOJc9VI=
Subject key identifier:   2C:79:EA:CF:64:44:C0:6B:23:A8:26:C4:1F:CF:F6:EA:F1:3B:3A:0E
Authority key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Certificate issuer:       /CN=F3674908AR/serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
Certificate serial:       F9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
Manifest number:          F8
Signing time:             Sun 01 Mar 2026 03:23:40 +0000
Manifest this update:     Sun 01 Mar 2026 03:23:39 +0000
Manifest next update:     Tue 03 Mar 2026 03:23:39 +0000
Files and hashes:         1: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl (hash: FC/qiMxlV5IqeQNUkJZK34DzM8tv/K6oavprytQULNg=)
                          2: 1944E674564511F0983236F2DAE4EC9C.roa (hash: Y7C2EDuJLg0UUohvGlHcA8fBY7urPGjjAraukXhUClw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                          rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 03:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Validity
            Not Before: Mar  1 03:23:39 2026 GMT
            Not After : Mar  3 03:23:39 2026 GMT
        Subject: CN=69a3b13c-a3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:71:e5:b7:b4:0a:88:ae:89:d2:e3:ad:ec:
                    89:5e:3b:91:08:81:4a:50:cf:9f:df:85:0a:7a:c2:
                    d7:33:91:a6:ff:25:aa:33:08:84:6b:72:d4:ae:0c:
                    cc:60:e2:61:ab:f1:69:11:a8:70:8e:20:6f:bc:1a:
                    d3:08:d2:8a:56:02:a9:33:b5:b8:1d:79:e2:f9:e9:
                    e8:4e:2c:50:e4:aa:fe:1a:2d:e9:9f:aa:aa:eb:ee:
                    60:89:2b:d5:3f:5d:bc:2c:21:b8:1f:25:5f:95:6f:
                    f7:d6:29:b3:ed:c2:36:6c:f0:44:08:07:8f:65:cb:
                    78:fd:f7:f3:de:1f:51:cd:18:3f:41:11:3c:b3:5a:
                    a9:ab:7e:f5:1f:8b:ad:35:99:2f:86:72:5c:dd:24:
                    ba:df:44:5c:b3:2f:07:72:11:c5:60:4c:f0:05:54:
                    e8:21:1d:64:65:5d:72:8f:bf:5c:c2:fe:12:ca:18:
                    c9:fe:49:79:5e:6a:8c:b1:f5:9d:ef:df:04:68:bf:
                    8a:90:6d:c6:b5:10:7c:cf:7d:59:79:f0:2f:cd:55:
                    0f:c0:df:86:b7:1b:22:c0:b3:52:28:05:27:c4:4e:
                    49:db:82:ae:63:e5:44:d1:39:ab:11:f0:a1:b3:17:
                    db:23:9e:d0:2c:ab:3f:f1:cb:cb:b2:30:56:08:37:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:EA:CF:64:44:C0:6B:23:A8:26:C4:1F:CF:F6:EA:F1:3B:3A:0E
            X509v3 Authority Key Identifier:
                keyid:60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:09:3e:bf:02:f6:3d:22:99:c0:18:74:f3:2c:29:4d:47:75:
         f3:87:f4:37:29:86:40:53:bc:52:9b:a5:8e:19:7b:1d:3f:e1:
         af:ef:72:db:28:23:3c:46:85:04:17:50:f3:c6:6e:46:49:91:
         93:2f:98:cf:ee:07:93:cd:e0:2a:9b:4c:0f:cc:d0:6d:2f:d0:
         3e:8f:78:a3:d4:69:83:43:0e:35:62:d8:a6:13:d7:18:74:cd:
         7a:74:26:1d:dd:be:a6:46:44:76:f8:16:f8:8c:6f:12:2f:59:
         d6:ae:67:f0:d9:09:06:5d:53:71:56:8e:ae:2d:fb:cb:e5:41:
         f7:24:f6:c5:a5:13:c9:bb:1c:d8:6a:92:b9:05:a5:fd:d5:38:
         f2:b2:d5:71:b7:4f:1a:65:ed:cb:40:e7:a2:af:9e:6d:f4:2d:
         34:12:30:ef:c9:e7:00:cd:1c:95:1c:cf:fe:1d:16:59:fe:e0:
         d1:93:62:00:67:75:4b:1c:1b:20:d4:8e:cb:d8:ed:5d:de:c3:
         53:2c:2f:e6:d6:c5:30:88:3e:37:88:99:8c:80:1b:5b:56:c8:
         5d:fa:b2:2b:bf:0b:f7:25:2c:8c:08:ed:f8:3d:a3:75:e2:8b:
         9c:e0:a1:ef:9d:f2:34:ff:13:03:0a:75:53:36:b2:a7:ab:83:
         60:ca:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:32 2026 by rpki-client