Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
File:                     YgYKORQeYf1_hIcoAdkqSoCYD2o.mft (raw, json)
Hash identifier:          Yui2ap3hSBtFMoYsOaOxMw52WkJ0J9Pl7zYH4TplisM=
Subject key identifier:   BD:6A:EF:23:F7:93:76:32:5E:12:9A:1D:12:A9:42:BF:3B:E6:1E:14
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Certificate issuer:       /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial:       04E5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
Manifest number:          04E4
Signing time:             Tue 04 Nov 2025 04:09:32 +0000
Manifest this update:     Tue 04 Nov 2025 04:09:31 +0000
Manifest next update:     Thu 06 Nov 2025 04:09:31 +0000
Files and hashes:         1: YgYKORQeYf1_hIcoAdkqSoCYD2o.crl (hash: nf55wlcWpXR/b9OVJPsm6oCaYMw65upV/TyhSHHc10s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                          rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
        Validity
            Not Before: Nov  4 04:09:31 2025 GMT
            Not After : Nov  6 04:09:31 2025 GMT
        Subject: CN=69097c7c-d149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:45:e6:40:38:37:f7:03:af:fc:67:30:13:
                    b8:ea:be:63:b3:a5:25:18:fc:a0:63:16:f0:19:43:
                    83:16:4c:b3:a7:97:46:5b:f9:c5:59:33:68:9b:14:
                    3d:5c:e2:f9:39:42:67:e1:5b:04:f0:f6:47:69:d3:
                    9f:bf:4b:ed:f7:99:77:7f:e1:cb:06:b1:14:ec:19:
                    f5:97:c7:22:e3:05:09:f5:8f:fb:c1:26:a1:5b:9f:
                    d4:8d:6d:69:8d:6a:8a:1b:26:4e:70:1b:30:82:1e:
                    30:48:1b:5c:40:ab:3d:10:3f:d4:0b:11:18:35:57:
                    fa:95:1c:9b:b5:e7:7b:11:d6:5b:5c:82:82:5d:db:
                    94:e7:e6:7b:12:c0:2a:19:cb:73:c8:50:d5:8c:9a:
                    21:d1:f0:a1:f3:01:6d:3d:b0:8a:21:c8:5a:db:57:
                    27:c0:68:b8:ff:4d:4e:f8:68:92:61:78:ea:96:fd:
                    b2:ff:d4:2a:2d:35:d0:fd:e2:17:23:f1:b4:7d:49:
                    a0:14:ab:b9:1d:7f:0c:b3:0f:a0:d4:18:38:33:e0:
                    9a:9e:3e:be:67:e7:be:b6:c5:50:ed:74:de:36:cb:
                    85:08:13:32:cc:a9:ff:0c:4c:69:d0:50:5e:b5:fd:
                    3c:69:22:b3:28:50:fc:f0:fc:0e:77:0d:ee:76:d4:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:EF:23:F7:93:76:32:5E:12:9A:1D:12:A9:42:BF:3B:E6:1E:14
            X509v3 Authority Key Identifier:
                keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:4c:27:32:b1:5b:c6:d5:f1:09:73:3d:ee:ab:3d:30:2c:
         ea:6e:a4:ed:ae:36:d1:55:56:29:86:5c:a5:ec:59:5d:1a:4e:
         93:c8:e9:ef:8d:9c:96:b7:7e:0e:2d:e9:68:53:30:4a:73:3c:
         1d:e5:5c:48:36:7f:1b:7c:9e:d8:d8:90:5d:71:38:da:03:4a:
         66:1a:b9:7b:2c:8d:8f:57:73:6a:93:d9:aa:f8:f2:bd:f8:db:
         b9:ca:f7:18:d2:5a:20:18:28:05:01:50:8d:30:08:b5:80:5e:
         30:c9:29:81:e6:ad:cc:3f:45:88:08:ca:60:73:8f:18:33:d2:
         fc:73:b9:2b:50:fc:13:59:83:89:f7:06:16:e0:52:2a:2b:e6:
         d1:90:b6:20:32:09:b7:24:d5:06:bf:01:c6:4d:f0:87:1d:a7:
         f0:e8:2a:04:79:fb:c6:9b:61:cc:d0:73:cd:a5:bc:73:a1:c8:
         34:28:ac:c0:6e:0d:00:9c:34:db:b6:48:a1:03:a8:4c:87:93:
         f1:a5:e3:1b:9e:a8:f8:4a:0b:aa:a9:61:5a:dc:bd:9f:fc:d0:
         0d:3b:5e:94:46:79:17:e0:d2:71:96:13:72:4e:61:2f:12:23:
         35:f8:e2:ee:43:11:f1:0d:7e:c8:98:9b:13:dc:47:de:5f:54:
         0d:73:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:45 2025 by rpki-client