Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
File:                     yfme5j28AsDEecoXeykoIBKCLro.mft (raw, json)
Hash identifier:          Vt5e/z4XUoywnrqD1REl3cqI2mfy6SfXHYw452zral4=
Subject key identifier:   D2:84:DF:30:DB:3C:6B:A1:F4:F9:57:2D:AB:3B:01:5C:FE:2A:A1:07
Authority key identifier: C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA
Certificate issuer:       /CN=F36DCA7DAF/serialNumber=C9F99EE63DBC02C0C479CA177B29282012822EBA
Certificate serial:       67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
Manifest number:          66
Signing time:             Tue 28 Jul 2026 05:35:28 +0000
Manifest this update:     Tue 28 Jul 2026 05:35:28 +0000
Manifest next update:     Thu 30 Jul 2026 05:35:28 +0000
Files and hashes:         1: yfme5j28AsDEecoXeykoIBKCLro.crl (hash: k+lmIw3DwCNUz6aIb23pDbladz8gShH+PhUpuptiEHk=)
                          2: 79A111D23CB811F1849554CECE1D38B0.roa (hash: W4ncgn/9qCTqVSqUrpr2GjFUMug92xQU3kiqxkivy8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DCA7DAF, serialNumber=C9F99EE63DBC02C0C479CA177B29282012822EBA
        Validity
            Not Before: Jul 28 05:35:28 2026 GMT
            Not After : Jul 30 05:35:28 2026 GMT
        Subject: CN=6a683fa0-e4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:49:49:8e:a4:66:51:f4:a3:5e:a0:c2:ec:
                    80:d4:29:17:95:8e:a6:14:f4:4b:e3:97:a4:30:9e:
                    3a:f6:4b:c1:7b:09:9a:41:2a:b5:bc:1f:d7:65:24:
                    5d:9b:e2:2d:47:9f:6d:17:83:76:39:e0:43:15:09:
                    e5:7b:72:f4:f4:3b:92:c1:3e:bd:a0:33:f3:3d:b0:
                    0c:62:dd:30:ef:f2:5f:a1:66:e9:5c:51:3c:b7:77:
                    b8:c1:cc:a0:51:09:34:56:7f:4c:b5:0d:30:82:34:
                    4a:6f:40:de:83:6d:74:51:6e:63:c8:fa:63:16:de:
                    e6:58:0f:a5:11:72:d0:ea:16:46:1b:45:06:1e:e5:
                    8a:18:1e:92:86:23:64:4b:7d:b1:92:af:42:f5:08:
                    4c:3a:a3:7c:fd:73:b6:e5:fd:95:48:68:4b:bb:17:
                    ab:f9:2a:2d:db:19:2a:a5:9a:0c:03:8f:4e:4a:66:
                    53:af:03:e9:3e:d5:4a:84:76:3d:89:30:e5:97:9d:
                    d6:53:c2:dd:e8:df:2e:4d:b9:5f:52:2f:a8:da:c1:
                    7a:9c:01:11:62:00:84:e4:50:d6:7b:0b:30:29:6e:
                    64:64:50:5b:10:a0:cb:84:d8:7a:80:66:e7:89:64:
                    58:28:e7:8f:04:0e:4e:3b:95:04:6f:8d:31:36:3d:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:84:DF:30:DB:3C:6B:A1:F4:F9:57:2D:AB:3B:01:5C:FE:2A:A1:07
            X509v3 Authority Key Identifier:
                keyid:C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:7a:d3:53:fe:b1:26:5f:56:ca:4f:2b:04:2c:08:00:8e:
         0d:2a:07:95:e8:96:4b:56:91:c6:4f:bd:28:38:ae:9c:c9:18:
         49:c5:7a:89:63:f0:67:d3:c8:e2:bb:8c:e1:ee:6e:ff:98:31:
         3b:38:b7:40:e8:45:23:d6:ce:ff:ce:81:bf:31:7a:e4:71:0e:
         a2:e0:10:63:ca:a7:ad:8e:b4:de:b6:48:e1:34:6e:06:2e:68:
         82:e5:03:c8:13:93:94:f2:17:f7:e6:a3:b3:0a:68:b0:94:bd:
         67:af:9e:35:a3:0a:89:2f:ef:4e:ea:9b:03:29:24:27:7c:6e:
         3a:8b:66:e1:53:e6:82:de:8f:b5:92:ec:e7:07:9b:c2:86:b3:
         de:60:12:37:ce:f0:a9:ba:2d:80:7e:db:05:25:a8:1e:f5:64:
         82:82:8e:fe:5d:26:9c:7c:f2:70:c0:62:b2:50:ce:27:e9:df:
         11:60:c5:6c:ec:44:ae:3d:2d:4d:70:c3:e9:2a:1d:89:04:68:
         63:fe:76:7d:46:7c:7f:2f:5f:01:31:65:7e:51:35:f6:5a:c6:
         df:e9:54:6f:b6:66:a1:58:ed:00:34:7e:fd:80:d5:3e:3c:16:
         a5:84:57:2d:fb:3c:de:e1:91:60:d5:fa:fb:4a:99:81:1f:ef:
         2e:f5:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:06 2026 by rpki-client