Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          OIC9MusDdAp1r2V0ke9drN78QLPn1Hsj1vgIHZrkUBs=
Subject key identifier:   60:07:C6:B3:38:2B:CC:71:5D:34:50:BD:B5:38:EE:2D:A8:9B:DB:56
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       05FD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          05FC
Signing time:             Wed 05 Nov 2025 02:35:01 +0000
Manifest this update:     Wed 05 Nov 2025 02:35:00 +0000
Manifest next update:     Fri 07 Nov 2025 02:35:00 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: kCPDvSWK8CmV7y+13O7GOFx7ZO7TGVv0IgsZxnfNejM=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Nov  5 02:35:00 2025 GMT
            Not After : Nov  7 02:35:00 2025 GMT
        Subject: CN=690ab7d5-3d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:c9:e7:3b:a9:58:9d:0b:7c:df:86:6a:97:
                    b5:27:32:24:cb:84:df:b6:30:68:3f:34:5f:4e:f0:
                    d5:b9:88:0d:2d:f2:26:90:20:43:ad:28:a2:33:a5:
                    1c:fa:3f:54:21:64:9a:b9:fa:4c:ca:70:3b:78:e2:
                    d2:a2:9c:4f:74:c1:73:da:72:17:6a:f0:7c:c7:c5:
                    37:e3:08:1d:de:4d:ad:32:a7:23:bc:b9:a2:99:50:
                    08:da:01:8a:cc:be:90:1d:d4:a0:4c:63:0d:4c:75:
                    5a:d8:c8:ee:9e:c7:e6:be:60:a9:d9:85:92:64:ea:
                    63:44:c9:a2:85:72:43:61:4c:b4:2d:65:72:f9:21:
                    b8:f8:ab:32:d4:f0:18:33:60:e2:43:f9:3f:6b:cb:
                    ef:76:8c:e6:5b:fd:ec:ef:e1:85:3d:6b:09:f8:5c:
                    b1:1b:2f:b5:29:2e:7e:e9:d6:38:ff:55:20:98:09:
                    57:22:5c:79:09:ad:8b:60:e9:14:05:1a:b7:ea:79:
                    ee:08:f2:30:76:4b:05:10:d9:c3:4b:81:4b:4c:c8:
                    3f:38:b3:3d:db:a3:0d:73:70:26:b0:7d:c3:b8:fe:
                    4a:a7:fc:5b:5b:b1:d2:ef:80:0f:da:85:4b:15:b5:
                    77:db:b6:4a:6c:af:25:29:c6:43:4c:6d:0d:7b:0a:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:07:C6:B3:38:2B:CC:71:5D:34:50:BD:B5:38:EE:2D:A8:9B:DB:56
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:19:8e:39:fc:90:e8:e1:48:d8:3b:f6:a4:60:94:66:c6:11:
         84:c9:31:a6:48:b6:ff:3f:37:75:ae:d0:61:69:5d:d8:e3:ff:
         7d:81:f3:3a:0d:af:35:19:a8:88:db:b0:bb:b3:31:5e:61:f0:
         23:85:b4:59:8c:1f:2c:87:b4:6c:7f:15:5f:9f:16:5e:de:5c:
         79:95:de:2d:3c:b9:ed:19:a5:6d:5c:6f:ad:bd:7e:32:bd:bc:
         cb:04:6c:bd:26:0b:93:c8:4d:7e:f5:ed:26:ff:67:0c:9b:09:
         1e:15:e6:cd:e3:02:49:11:ff:78:7a:b9:8d:8c:77:c0:65:46:
         9a:c1:3f:9d:03:87:b9:68:99:7e:64:8f:14:66:6c:e9:f2:6f:
         83:b1:29:da:05:c9:17:65:75:7f:a8:fb:76:fd:92:60:00:9c:
         78:06:7f:ce:5c:61:96:5b:18:f7:2a:f8:56:23:df:b0:3a:a0:
         77:57:57:9c:8b:30:8e:d7:7c:0c:84:95:82:3c:12:60:54:6f:
         f7:53:46:20:bd:9b:f1:c2:67:d9:d5:b3:93:af:b0:d2:af:04:
         41:9e:47:fd:dc:86:8a:c7:09:50:0f:09:d2:1d:72:60:c6:9e:
         e2:09:07:7f:eb:c0:de:fc:24:18:dc:4b:73:17:65:de:48:ec:
         c7:39:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:06 2025 by rpki-client