Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
File:                     I5ojlaIixGtom4OhTUvZ5CL40XE.mft (raw, json)
Hash identifier:          7PALI9Im9Pa//GVzQm1Z9+XqE3xQqEhhn6xwSQco064=
Subject key identifier:   A6:87:04:3E:E2:69:C4:B7:23:7B:E9:7A:AD:90:E3:51:14:BE:56:3E
Authority key identifier: 23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71
Certificate issuer:       /CN=F361033EAF/serialNumber=239A2395A222C46B689B83A14D4BD9E422F8D171
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
Manifest number:          18
Signing time:             Tue 12 May 2026 05:34:05 +0000
Manifest this update:     Tue 12 May 2026 05:34:04 +0000
Manifest next update:     Thu 14 May 2026 05:34:04 +0000
Files and hashes:         1: I5ojlaIixGtom4OhTUvZ5CL40XE.crl (hash: dlvZTAzEjF+txSBPJo/9gMTNdckDGYmT7bfV5r8BpFw=)
                          2: 6EB3E9463D8211F1BFB367BBCE1D38B0.roa (hash: JDQw1SItmn8dJ5vJZ59409x/u+m2Azdm6fUPsmf8m6Y=)
                          3: BA0E425E3E3311F196C104F8CE1D38B0.roa (hash: u7+fqqHQnG+ld2TX7zf+J5qSkRtZWaLPDkz+BXSHa58=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361033EAF, serialNumber=239A2395A222C46B689B83A14D4BD9E422F8D171
        Validity
            Not Before: May 12 05:34:04 2026 GMT
            Not After : May 14 05:34:04 2026 GMT
        Subject: CN=6a02bbcd-97f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:0a:3b:01:fa:a3:6f:d5:d4:d3:73:0d:cf:
                    cc:04:41:8e:e5:28:8b:ec:71:18:44:d3:7e:83:45:
                    6e:41:c8:7e:13:f7:77:6a:ca:82:13:03:76:2d:aa:
                    4b:5d:9e:c0:5a:be:f1:a4:8a:90:98:60:4f:36:53:
                    cf:4d:cb:af:a5:2c:07:cd:bb:79:b9:b3:12:35:7c:
                    7e:cd:78:d3:e4:71:2c:d3:71:c6:f7:b9:98:76:5f:
                    63:9f:8a:6f:c3:2c:d7:8a:57:b1:68:2e:ad:12:9e:
                    e2:4e:e2:d8:fb:ce:82:7e:dc:4a:6f:4f:5a:90:ec:
                    31:aa:bf:3b:74:63:f4:9e:5d:23:ce:2c:6f:43:bf:
                    b9:a1:61:83:b5:90:bb:49:dd:18:ab:0f:a4:2b:24:
                    14:e3:e2:e0:a4:90:87:a2:e2:de:aa:35:71:4b:ee:
                    ff:c3:2e:7d:64:51:3e:32:21:7b:3d:12:62:85:c7:
                    5b:97:4b:e3:54:60:2d:48:9e:8d:36:45:24:79:ae:
                    aa:ce:39:1f:01:7b:4d:15:0f:ad:ce:c1:c2:1c:3a:
                    67:96:35:7a:ec:c4:cc:fd:e2:98:27:33:a1:e4:1c:
                    57:23:48:3c:e3:23:02:10:2b:87:32:29:b4:b4:0a:
                    15:8b:34:c7:00:ed:2e:ae:de:5f:91:60:b5:95:1c:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:87:04:3E:E2:69:C4:B7:23:7B:E9:7A:AD:90:E3:51:14:BE:56:3E
            X509v3 Authority Key Identifier:
                keyid:23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:cb:97:51:70:b2:00:8d:c4:e6:d9:05:28:7a:7a:6b:f3:
         24:a3:65:31:05:80:c0:f7:d3:af:4f:96:e8:e3:cb:98:8f:98:
         5f:2e:5b:fd:75:87:d4:18:e5:e2:f3:24:2d:a9:7e:d0:9c:6b:
         a9:d6:76:b0:89:08:a9:98:d3:6c:e7:f0:47:98:02:dd:1d:c8:
         bf:39:5c:26:db:28:4f:fd:62:a8:ea:e6:1b:1b:c9:81:f7:c2:
         d2:e2:b1:c2:41:93:f9:03:0f:38:ab:cd:8e:14:13:6e:64:29:
         5b:4c:b0:d1:7a:23:a1:1e:fc:a5:10:9e:e4:97:df:f6:1b:b6:
         65:64:ff:13:e6:88:05:b4:8d:72:f2:50:88:44:8a:fe:11:bc:
         99:66:88:2d:74:f6:81:bd:b9:6b:2a:d3:b9:be:b3:0d:a9:93:
         3f:68:7b:f6:ac:eb:df:68:cd:38:d8:e3:ea:00:33:8a:de:70:
         cb:6c:1a:9e:4c:32:8c:2e:77:87:af:bc:0b:71:77:a4:bd:3c:
         24:4f:f9:a4:f5:fc:f9:77:8d:cd:d8:0a:a5:e6:cb:4f:15:fb:
         1f:3e:f7:e9:e8:af:8d:10:bb:32:1c:db:72:0f:bd:6c:be:29:
         0b:1f:0d:3f:18:0f:19:66:a6:a7:6d:d4:85:1f:86:a4:ce:5a:
         e1:32:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:54 2026 by rpki-client