Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          yNhZjMGi7fKUoYaJYniM3hm/3aV92/BUyen3q1OEj4U=
Subject key identifier:   E9:93:7E:42:B1:6C:10:DB:6B:6E:EF:35:F7:59:3C:B3:F9:F2:07:39
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       044E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          044D
Signing time:             Wed 13 May 2026 03:26:15 +0000
Manifest this update:     Wed 13 May 2026 03:26:14 +0000
Manifest next update:     Fri 15 May 2026 03:26:14 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: eGGDQtyGdb7ySIcHYDCV272Al/I3Ez+ZkA1qUBnAPLA=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: May 13 03:26:14 2026 GMT
            Not After : May 15 03:26:14 2026 GMT
        Subject: CN=6a03ef56-c62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:ac:82:11:53:a1:2e:03:0f:22:09:d0:fb:
                    72:11:6c:37:af:0c:94:8b:72:19:cb:e9:40:68:58:
                    0a:88:11:90:9a:bd:76:16:0c:90:83:b9:63:ca:13:
                    09:b9:01:c8:1a:b0:92:89:69:99:ce:a5:d7:c8:d3:
                    8e:ab:3d:1c:d4:1c:db:6e:d9:49:bf:e7:30:1b:81:
                    c0:5c:12:36:26:51:06:79:4e:75:d8:d7:5f:7f:51:
                    5a:d0:74:26:db:c7:47:53:61:b3:28:b2:57:7a:9b:
                    8b:0a:af:9e:94:a2:73:79:6e:ee:17:2a:8e:0f:05:
                    d5:34:83:e1:ac:cd:09:87:d4:36:8f:80:24:8a:36:
                    52:0b:d1:f1:04:10:8f:d5:19:55:dd:5b:1d:ca:d3:
                    98:d8:19:82:73:cc:92:b0:b2:3b:94:12:39:8f:bf:
                    d0:1a:7c:58:18:72:d1:e4:60:f8:15:a0:de:3f:55:
                    72:7d:97:1d:cd:ac:85:f2:f6:26:07:81:df:7a:67:
                    48:75:60:e5:cb:42:f0:ad:af:da:8b:70:01:36:c6:
                    34:cd:3f:12:f4:f0:23:c6:bc:a3:c9:2e:f3:60:30:
                    66:f3:d7:ef:07:ca:12:05:9b:a1:5c:fc:8b:bc:13:
                    eb:97:c7:0d:9b:40:28:72:14:93:95:f0:78:82:31:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:93:7E:42:B1:6C:10:DB:6B:6E:EF:35:F7:59:3C:B3:F9:F2:07:39
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:83:ae:ab:43:75:c1:3e:59:db:16:dd:4f:93:bd:f8:c0:
         c4:a1:05:a9:64:05:7b:ae:d7:62:50:8b:2c:0f:1a:b8:07:26:
         30:4b:29:a2:6e:12:81:be:e4:81:75:7e:2e:d1:f7:a8:bd:7b:
         93:e7:79:f8:50:4a:ba:ec:f1:bc:f8:6b:53:21:29:15:52:5a:
         0f:1b:be:4c:eb:b5:14:e3:5a:71:13:31:92:1a:1a:59:84:04:
         1d:18:c8:10:cb:9c:76:55:5f:ee:25:38:49:02:33:ab:76:dc:
         d0:02:43:51:9b:59:93:fb:ca:49:ba:88:83:df:32:0f:3d:21:
         7c:2c:fa:9c:ca:77:a2:16:d1:46:af:72:ef:bd:c5:2e:3d:df:
         a2:89:94:c4:e3:1c:ff:8a:62:06:72:46:cb:c1:1f:2d:8d:e3:
         b7:8b:06:1e:fc:f1:ee:32:df:66:5d:1b:7b:ef:32:61:75:ce:
         5d:01:d7:93:5e:0a:0a:ab:b5:d3:78:85:64:1c:e2:81:29:c2:
         cb:ad:ed:70:16:f5:50:cb:5d:ec:4c:04:4e:77:e0:54:01:4c:
         69:ba:ae:d1:d6:c0:bc:f0:e5:62:2e:de:fc:9f:14:4f:13:2f:
         c0:47:c7:e9:9d:fe:32:87:86:88:fd:26:3e:d0:9f:58:2a:9c:
         ee:08:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:13 2026 by rpki-client