Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File:                     62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier:          hDLj2H2MN1Y6Z3wGDzd5T1oA0CYZsNqsqoUII1igemg=
Subject key identifier:   64:62:0E:74:1F:D1:A8:05:29:D6:D6:A6:10:4D:6E:2F:75:60:B4:0B
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer:       /CN=AfriNIC-Root-Certificate
Certificate serial:       64
Authority info access:    rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access:      rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number:          CC
Signing time:             Tue 21 Apr 2026 06:45:21 +0000
Manifest this update:     Tue 21 Apr 2026 06:45:20 +0000
Manifest next update:     Thu 28 May 2026 06:45:20 +0000
Files and hashes:         1: arin-to-afrinic.cer (hash: 7ywJdiGXPLJMSZvNRQ3yFVV0+aQ2FZemMJ1jTkjUT3A=)
                          2: apnic-to-afrinic.cer (hash: ehsJkwyh5BZcjOBlbTxJyzFO0jQ5mGCU9DqdwmnAMVI=)
                          3: ripe-to-afrinic.cer (hash: qOOK6v0nyMVV1lv+XGJWWWNM1su1zDx80MOlipErK7Y=)
                          4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: qGWtdgV0Kw+OZyM2ENnsKTB81jS5ZEIob5oAJyHU9yE=)
                          5: afrinic-ca.cer (hash: lva7C1FkpZQulRIq75k7ODHBF9I8xk6nPrZ3+hfc0m4=)
                          6: lacnic-to-afrinic.cer (hash: MKScee8ssVr51K/OTtyyeiSDwz3svtf9jpqq6/x8uvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 28 May 2026 06:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Apr 21 06:45:20 2026 GMT
            Not After : May 28 06:45:20 2026 GMT
        Subject: CN=69e71d00-b944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:14:f9:77:22:7b:c4:06:0e:62:3c:5c:56:
                    0b:6f:9e:1b:15:52:e0:63:97:f8:62:77:e2:05:ce:
                    0f:be:be:3e:dc:5c:64:00:f3:93:16:e6:c8:76:02:
                    c2:d7:08:79:86:e0:ea:8c:44:6c:6a:a5:e9:71:26:
                    57:9f:a6:08:79:d8:48:6b:79:07:37:14:53:0a:62:
                    b2:c4:b8:4f:fd:a8:ec:24:83:8a:c9:b1:4e:f4:af:
                    30:1b:46:a4:8c:61:25:bb:8c:89:40:6b:33:74:ad:
                    1a:b4:95:04:9e:53:74:c0:b2:5a:b2:95:4d:cb:9a:
                    94:1b:9d:ba:c7:25:b3:4b:6f:0d:35:77:1c:e0:4a:
                    aa:6a:9d:77:b5:06:f9:38:3c:01:d7:5e:6c:27:2d:
                    c4:19:2f:27:6e:68:57:42:c0:79:83:c5:04:dc:b9:
                    18:a3:d7:de:ce:be:06:a2:30:70:67:bb:5b:58:bc:
                    92:73:4d:85:8b:5b:32:54:36:78:00:ab:8b:ff:aa:
                    b0:26:90:5e:0e:7f:af:01:39:a8:31:bd:43:11:ca:
                    aa:e9:ea:85:30:fe:a4:26:92:36:6e:ff:b5:1c:c6:
                    ff:a8:b3:84:b3:58:3d:92:ed:5f:06:3e:b8:b7:c6:
                    63:ee:a5:b2:e8:15:7a:96:fa:a2:66:d6:d2:67:0e:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:0E:74:1F:D1:A8:05:29:D6:D6:A6:10:4D:6E:2F:75:60:B4:0B
            X509v3 Authority Key Identifier:
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:d2:a8:19:23:d1:23:d6:76:2e:8a:6a:d2:1b:74:ca:56:
         65:12:74:d5:83:55:db:6b:6d:67:57:06:f9:9f:29:00:8f:8f:
         06:5e:ad:1e:20:f6:4e:fd:a4:f1:1b:ef:6c:d4:ea:27:82:26:
         a3:c1:60:69:2b:17:59:2d:48:10:f4:e6:c8:4d:de:aa:9b:92:
         76:80:cd:d7:81:76:7f:f7:09:75:a2:80:6b:f5:71:7d:fa:2c:
         19:95:25:20:ed:aa:07:67:0e:5d:c4:ea:7a:fb:2f:67:16:eb:
         1a:43:db:57:33:f8:82:0a:93:8e:ca:f4:79:87:4b:77:25:59:
         4c:1d:95:84:44:09:88:3f:df:57:31:76:a9:37:1c:bb:c4:b5:
         16:4c:63:1e:91:a6:a7:71:2b:5f:33:0b:ad:df:64:d2:46:cf:
         f5:b6:ca:95:01:cf:ac:c4:7c:42:6e:69:88:47:e5:08:8e:8d:
         04:df:50:50:9f:e0:08:67:e3:79:38:82:76:7f:48:8f:85:bb:
         c6:4e:66:f5:e5:47:e8:da:31:be:5e:6e:b6:33:fb:e4:ca:28:
         c6:de:a6:11:19:60:84:73:8a:38:f6:da:ba:6b:cb:36:c7:8f:
         10:28:2f:f1:27:b5:21:b1:be:6c:9f:bf:9f:57:7c:e9:fd:d5:
         d9:a2:c1:52
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIBZDANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjYwNDIxMDY0NTIwWhcNMjYwNTI4MDY0
NTIwWjAYMRYwFAYDVQQDEw02OWU3MWQwMC1iOTQ0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxtkU+Xcie8QGDmI8XFYLb54bFVLgY5f4YnfiBc4Pvr4+
3FxkAPOTFubIdgLC1wh5huDqjERsaqXpcSZXn6YIedhIa3kHNxRTCmKyxLhP/ajs
JIOKybFO9K8wG0akjGElu4yJQGszdK0atJUEnlN0wLJaspVNy5qUG526xyWzS28N
NXcc4Eqqap13tQb5ODwB115sJy3EGS8nbmhXQsB5g8UE3LkYo9fezr4GojBwZ7tb
WLySc02Fi1syVDZ4AKuL/6qwJpBeDn+vATmoMb1DEcqq6eqFMP6kJpI2bv+1HMb/
qLOEs1g9ku1fBj64t8Zj7qWy6BV6lvqiZtbSZw5GOwIDAQABo4ICXzCCAlswHQYD
VR0OBBYEFGRiDnQf0agFKdbWphBNbi91YLQLMB8GA1UdIwQYMBaAFOtoDzj11scb
tLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIHgDB1BgNVHR8EbjBsMGqgaKBmhmRy
c3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBGNEQx
MUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFNYlku
Y3JsMEsGCCsGAQUFBwEBBD8wPTA7BggrBgEFBQcwAoYvcnN5bmM6Ly9ycGtpLmFm
cmluaWMubmV0L3JlcG9zaXRvcnkvQWZyaU5JQy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgbkGCCsGAQUFBwELBIGsMIGpMHAGCCsGAQUFBzAL
hmRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFN
YlkubWZ0MDUGCCsGAQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90
aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAJx30qgZ
I9Ej1nYuimrSG3TKVmUSdNWDVdtrbWdXBvmfKQCPjwZerR4g9k79pPEb72zU6ieC
JqPBYGkrF1ktSBD05shN3qqbknaAzdeBdn/3CXWigGv1cX36LBmVJSDtqgdnDl3E
6nr7L2cW6xpD21cz+IIKk47K9HmHS3clWUwdlYRECYg/31cxdqk3HLvEtRZMYx6R
pqdxK18zC63fZNJGz/W2ypUBz6zEfEJuaYhH5QiOjQTfUFCf4Ahn43k4gnZ/SI+F
u8ZOZvXlR+jaMb5ebrYz++TKKMbephEZYIRzijj22rpryzbHjxAoL/EntSGxvmyf
v59XfOn91dmiwVI=
-----END CERTIFICATE-----
Generated at Wed May 13 02:23:47 2026 by rpki-client