Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          xkH9lbAnbMsO657marJg/+/QbmgFlZ8mpG1v1Xtx4m8=
Subject key identifier:   8F:0D:61:B0:28:38:5F:DB:FE:23:A4:3E:24:13:AE:33:0C:CD:19:CA
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       06A2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          06A1
Signing time:             Fri 17 Apr 2026 02:25:51 +0000
Manifest this update:     Fri 17 Apr 2026 02:25:50 +0000
Manifest next update:     Sun 19 Apr 2026 02:25:50 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: lYqIJuKsXtC7rFnec2AybsxT76VoRN12fRlJ222ujrE=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Apr 17 02:25:50 2026 GMT
            Not After : Apr 19 02:25:50 2026 GMT
        Subject: CN=69e19a2f-f725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:34:77:b2:a7:67:e6:f3:71:ad:ca:4a:be:
                    f3:73:f6:a5:04:aa:41:1d:11:ed:11:ec:8b:f6:68:
                    83:39:48:45:3d:c9:08:f1:26:14:92:cb:29:dd:5d:
                    39:e8:30:e6:d1:7b:e7:fd:cf:41:f0:5e:a6:63:a1:
                    fb:f1:55:ce:0e:ec:44:ec:16:80:1e:9c:b3:ed:04:
                    c4:c7:12:6f:33:01:4f:c5:19:fa:14:67:81:fc:b2:
                    59:1f:b3:c0:a1:92:cf:85:ee:97:2e:b4:32:c4:34:
                    a9:7c:7b:f0:ec:24:9f:dd:ca:03:c7:2c:73:41:46:
                    aa:d0:1c:b8:d3:61:44:dc:91:3d:b6:51:88:2f:21:
                    a7:e7:c8:9d:8d:e5:7c:2b:08:8a:9e:29:3b:95:49:
                    9d:a4:4a:50:48:48:84:8e:30:1c:f3:6f:92:1e:3d:
                    ff:f7:78:37:98:57:c6:42:97:f2:e6:3b:5f:ca:6f:
                    a7:10:1e:5d:4d:bd:dc:fa:75:ec:eb:fd:d7:51:fb:
                    2b:4b:7f:86:b2:9c:95:19:ca:45:6b:a5:ee:f6:6d:
                    79:d5:e3:d5:33:bc:51:c2:c7:93:4f:44:32:00:b5:
                    d9:b7:fe:96:ae:65:8f:b2:80:52:da:98:b9:7e:7f:
                    f3:aa:bf:4b:01:fe:c9:08:88:b8:3f:50:1c:2c:d7:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0D:61:B0:28:38:5F:DB:FE:23:A4:3E:24:13:AE:33:0C:CD:19:CA
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:ec:11:57:6b:85:be:ea:f2:ed:e7:27:7c:af:00:cb:69:
         f7:fc:4c:60:cc:df:d1:f3:e0:b6:95:46:bd:f2:36:51:71:83:
         44:a3:0e:a9:bf:50:9e:62:54:c4:77:37:77:71:11:08:40:f8:
         6f:bf:ee:87:c4:a2:bd:38:05:68:ed:7b:9c:8f:63:6a:cc:49:
         bc:f4:04:d5:5f:58:26:ae:fd:b0:7e:e5:09:1b:f0:c1:3b:db:
         10:cc:0c:5a:e2:68:c9:73:e0:7a:ea:8e:f7:2e:30:2f:0e:0f:
         13:58:33:30:fe:1b:b3:3b:63:a1:fe:04:a8:d8:68:c9:45:95:
         98:be:92:e0:88:f6:3b:24:2d:d2:f3:3d:ca:61:3b:45:19:a9:
         4f:ba:ff:bb:05:37:cf:c9:4e:26:7a:7a:6c:09:e3:9a:99:3a:
         86:91:6b:ac:1a:08:2b:e7:3b:92:53:ca:91:e0:26:93:ba:c7:
         91:f4:bf:72:1b:68:2a:0f:7b:36:1f:9d:c1:26:ae:90:4a:c6:
         ff:15:b0:69:c2:ba:d8:a5:20:4d:91:b8:67:c3:1c:2f:f3:dc:
         21:d8:4a:fd:c8:cc:9c:93:48:9f:f3:a3:71:a4:ef:19:94:60:
         ab:27:1d:e2:ed:97:6a:09:57:e3:55:90:b7:87:8c:40:f7:be:
         c4:d5:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:49 2026 by rpki-client