Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          01PeoFPfkA8w7oS0IUfiT0aCLdopRiUUgAqMTilZ860=
Subject key identifier:   B1:F4:16:C1:BC:60:11:75:BB:BC:6D:F4:FB:10:5D:C0:38:60:B2:43
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       021D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          021B
Signing time:             Wed 13 May 2026 04:42:41 +0000
Manifest this update:     Wed 13 May 2026 04:42:40 +0000
Manifest next update:     Fri 15 May 2026 04:42:40 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: 7RfwXNZxy62wyVWHy7fnvbLceRvnYXRP27VedIwXapE=)
                          2: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 04:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: May 13 04:42:40 2026 GMT
            Not After : May 15 04:42:40 2026 GMT
        Subject: CN=6a040140-153b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:40:0b:4a:e5:b8:fa:3d:60:56:54:6e:80:
                    f5:d2:2f:f3:39:9f:89:e5:9c:c8:30:9c:c3:04:a7:
                    34:76:1a:3d:9a:63:db:22:73:1b:e2:d4:c6:a7:55:
                    19:47:ab:84:ae:e9:5a:c5:b1:be:af:c7:a4:05:1d:
                    50:94:85:c7:0c:5e:02:cd:56:fa:8c:56:2d:af:e2:
                    48:48:a7:1c:cb:c0:e0:1a:d1:0f:04:27:d5:6e:16:
                    ff:ee:e9:8e:1c:9b:92:29:b6:53:31:12:e8:ff:7e:
                    00:b7:e9:41:6c:e3:59:42:8c:c8:ee:b0:8b:7a:1d:
                    af:a8:a4:f9:e0:0e:6f:87:49:ef:ec:d2:67:4e:e9:
                    6d:df:c6:67:8c:8d:c5:60:4a:e2:9d:f7:6e:59:4a:
                    cf:08:90:63:16:81:6e:39:0f:66:b6:82:2b:89:aa:
                    8e:ee:e7:06:8b:77:ab:49:b3:eb:35:2b:52:3f:cf:
                    c8:d4:0b:20:4f:10:6e:21:70:5b:e2:c8:04:26:c3:
                    76:e2:3e:c2:2f:e4:4e:8a:07:3b:77:75:1b:54:90:
                    d1:04:83:08:4b:50:08:06:2c:49:0b:09:5c:11:78:
                    be:75:65:75:ba:82:22:3b:b1:3c:b9:04:ac:f5:5a:
                    5e:e1:a8:f4:9a:6a:09:a6:22:36:6d:3c:76:66:b4:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:16:C1:BC:60:11:75:BB:BC:6D:F4:FB:10:5D:C0:38:60:B2:43
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:76:b5:7e:c6:b0:f1:9a:c4:c0:52:e3:78:c4:d5:a3:d3:6d:
         38:65:ac:17:bb:d2:eb:21:1a:50:fe:c0:16:8c:8b:6f:da:0e:
         8b:56:cd:b1:ee:a0:18:61:6d:f9:d0:2d:4d:14:f1:68:38:dc:
         dc:14:44:99:e3:cb:83:9a:7a:90:e4:e1:dc:69:2a:cf:99:96:
         06:ac:16:b6:74:64:29:b5:27:78:e9:b0:72:d2:e1:2e:e6:2e:
         69:9e:76:c0:1e:b9:0a:9a:3f:72:e0:ae:69:d2:f4:e0:63:e9:
         9b:0a:e9:e4:1a:2a:30:c6:87:45:ca:0c:68:d0:34:b4:7e:f9:
         94:9f:4f:77:ae:ff:9f:d2:0e:76:cb:25:f9:86:93:0f:e2:83:
         a4:c2:a9:4f:47:13:d1:6d:23:03:ea:8f:46:7a:6b:47:f8:07:
         5c:3a:11:b2:97:ac:10:92:19:b0:c8:4b:4b:10:95:92:f7:43:
         96:11:49:f2:30:c5:38:13:54:91:d1:c1:76:5f:46:2b:2a:74:
         2c:09:54:fa:3a:7f:6b:39:6e:fd:35:ed:28:e4:79:d8:f6:18:
         1a:ed:15:13:d1:ba:ed:74:3b:05:ad:40:07:af:3c:a8:a8:a4:
         37:69:af:e3:04:f3:d0:dc:18:ef:9d:21:6c:b7:0f:9d:96:07:
         90:af:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:24 2026 by rpki-client