Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
File:                     ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft (raw, json)
Hash identifier:          dYR04cpEYmdDtiLQ7hAV+Jr5M/mZuHOtL+9olX80FKI=
Subject key identifier:   60:9D:77:E2:B2:1A:C6:4D:48:45:CA:6A:FF:93:77:0A:93:F9:AC:E0
Authority key identifier: 64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52
Certificate issuer:       /CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
Certificate serial:       0291
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
Manifest number:          028F
Signing time:             Wed 13 May 2026 04:24:58 +0000
Manifest this update:     Wed 13 May 2026 04:24:58 +0000
Manifest next update:     Fri 15 May 2026 04:24:58 +0000
Files and hashes:         1: ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl (hash: nrWMjkK/UpmQK/3ANHWUvXark+dgJ5rAdIk3nv+xIjg=)
                          2: 17AC05D05BD811EF91C62F65762E951A.roa (hash: pGO0PAidVvZBgK+RWqWHGbvgRG1IKwi6oTcbF8OQHYY=)
                          3: B721857E274011F1B7B4A1AADAE4EC9C.roa (hash: M0E9A+YM5acTInIiLhaKFro4wGaQNKUlchNWtwILkCU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 04:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36185D8AF, serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
        Validity
            Not Before: May 13 04:24:58 2026 GMT
            Not After : May 15 04:24:58 2026 GMT
        Subject: CN=6a03fd1a-0aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:ce:7d:d0:59:dc:d8:51:56:e0:88:ff:bb:
                    4e:3f:f1:b3:10:d5:26:81:6a:dd:dd:70:be:c4:41:
                    c1:a2:d3:7f:b6:17:53:54:a4:88:31:45:9d:4c:f0:
                    30:06:65:7b:bc:11:df:27:21:2d:9d:1d:a2:08:81:
                    4b:07:a1:27:0b:d4:b2:f6:ad:5c:c3:8d:c9:85:7e:
                    0b:bc:98:61:a5:af:91:5b:27:70:70:5f:89:7f:4b:
                    17:f6:63:f6:05:e8:d1:1f:cb:1c:32:b0:3f:74:dc:
                    ab:bf:23:ea:b5:6a:57:fa:35:bd:6f:f2:37:1f:91:
                    ea:0f:64:83:c9:34:3a:a0:40:55:f0:3f:6b:65:8d:
                    dc:6d:7b:bf:df:13:fa:83:c6:ed:7b:d6:6c:97:3d:
                    3b:67:2b:78:86:5a:01:6d:b7:36:00:32:7b:d9:6a:
                    6c:28:d3:a7:f7:3d:50:5b:cc:25:e5:53:26:47:46:
                    a6:af:40:f5:c2:a5:d4:48:de:26:6b:99:7b:79:a9:
                    04:4e:41:e4:e8:ea:d5:e3:77:4f:41:f5:37:95:4d:
                    6d:72:97:45:da:b0:c4:22:7b:f8:59:d4:e5:cc:a7:
                    a3:57:68:3d:05:23:d0:83:2b:01:2a:7d:ed:ea:af:
                    97:98:1f:bc:f6:f1:f1:dd:8d:64:28:9d:e4:b4:c9:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9D:77:E2:B2:1A:C6:4D:48:45:CA:6A:FF:93:77:0A:93:F9:AC:E0
            X509v3 Authority Key Identifier:
                keyid:64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:88:5a:a1:9c:19:55:08:59:a8:c2:31:df:62:f5:c1:ff:31:
         46:3d:a1:a8:64:91:ca:18:c4:e0:e2:af:46:b9:a8:50:ef:11:
         18:97:2d:b6:d2:53:8a:d9:97:7e:fa:db:92:d1:3c:2b:48:93:
         a7:58:8b:4a:25:a3:09:27:df:8a:b2:0b:39:cb:d7:04:4a:5c:
         c3:00:2f:76:3b:66:38:52:43:cc:f8:43:84:6e:eb:65:35:3d:
         d9:1e:01:72:8a:e3:20:00:9e:c7:96:8e:b6:db:66:5e:94:3f:
         41:48:df:72:82:e0:0e:39:1a:62:23:8d:e7:05:d0:52:3a:bb:
         40:d3:33:89:4f:18:8e:e2:3e:80:92:87:18:47:47:e3:34:a2:
         f8:08:cb:77:d8:c1:7f:8d:b0:f1:7b:bd:67:f1:dc:04:66:d7:
         86:0a:56:22:6d:c7:c7:d3:db:bf:a3:24:dc:6a:5c:41:7f:1e:
         60:2f:b6:9d:d4:05:d4:1c:e0:34:9f:e0:ee:31:c4:01:b7:60:
         0d:66:f1:e0:5f:d9:d3:6f:30:cd:22:d1:a5:c1:4b:dd:cc:a1:
         01:f0:bb:0d:44:59:56:7c:bd:6b:df:e4:cd:5d:5a:11:cc:06:
         ef:11:d3:af:7c:58:f1:c6:57:2a:8e:9e:e5:3f:b6:80:f5:a8:
         e6:26:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:04:37 2026 by rpki-client