Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          j+SaFvSR0tsze5DR0lHlgekFXgRQm7iOXdDjVFWFHUY=
Subject key identifier:   02:80:89:40:E9:56:62:EB:BC:9A:C8:97:D0:D4:EE:AA:49:FF:00:FF
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       0892
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          088F
Signing time:             Wed 13 May 2026 01:50:23 +0000
Manifest this update:     Wed 13 May 2026 01:50:22 +0000
Manifest next update:     Fri 15 May 2026 01:50:22 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: Afjw0uEYnDWk4iRUlYIV0yFFNuNsUBGu2EiW/ImKo2s=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: May 13 01:50:22 2026 GMT
            Not After : May 15 01:50:22 2026 GMT
        Subject: CN=6a03d8df-13d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:70:38:49:4e:37:01:9a:1b:0f:e2:a6:df:
                    52:94:8c:f3:87:a8:d9:d8:d8:4f:7b:97:e2:f2:6f:
                    6d:17:31:1c:ab:21:69:33:fd:47:88:c3:06:27:76:
                    e9:e7:31:a8:2e:82:11:4e:42:35:c1:08:46:d8:c5:
                    7f:3c:36:be:27:61:4b:73:64:a4:aa:d4:ae:84:ec:
                    54:6c:a4:3e:ad:7d:fc:0a:8f:2e:be:c1:b7:f6:57:
                    82:09:e5:61:6e:5f:3d:0b:8d:e9:de:6e:b8:bc:01:
                    4c:dd:2f:cb:e0:d8:4c:d0:e0:c2:5f:ab:fe:82:cc:
                    dc:e5:bf:f0:16:97:3c:8a:4a:de:fa:2d:2e:83:f1:
                    50:e7:56:80:9b:df:e5:dc:e8:e7:1a:c4:55:1e:f0:
                    3d:6a:36:e7:f1:ef:68:cf:30:79:f0:d7:8a:70:bc:
                    64:d5:41:e2:f7:a4:6c:d7:28:c6:19:c5:2f:56:96:
                    ff:da:92:e0:77:aa:ea:5d:25:47:08:4c:7f:a4:7d:
                    78:94:ef:9f:8e:c6:91:3e:57:f0:1f:78:2c:8c:84:
                    94:79:5a:16:8b:ac:5e:bb:9f:d6:13:0e:88:ea:e7:
                    ee:88:b0:ed:f2:5d:a7:6e:50:c9:5f:c5:af:42:07:
                    60:48:10:6a:f1:c8:eb:4a:1f:f2:74:c2:48:20:62:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:89:40:E9:56:62:EB:BC:9A:C8:97:D0:D4:EE:AA:49:FF:00:FF
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:cf:ad:b3:2a:0b:44:e1:f5:a3:b3:65:be:da:74:8f:97:
         7f:c8:04:eb:77:b1:d4:85:8c:05:e5:08:2d:2a:d1:6e:b7:46:
         f4:b5:5f:92:db:f3:20:bb:e2:ca:2a:02:98:d4:4f:3a:cd:c6:
         35:fc:58:f4:09:a0:19:28:b6:2d:ed:53:7c:43:03:a9:f5:77:
         41:2b:39:b1:bd:5e:33:5a:f3:7d:08:af:4f:91:50:2b:31:d2:
         bc:13:91:bb:ef:d9:02:3c:19:c0:b9:c0:e8:f3:73:ba:d1:a9:
         d8:a5:17:8a:cd:10:66:f2:b2:e2:a4:bc:d0:77:f0:81:80:0e:
         ac:40:e9:fc:c4:27:69:f4:75:b4:84:a9:1f:7f:82:67:98:b0:
         08:cb:c0:bc:92:c7:d4:56:35:63:35:2e:2e:f1:00:83:58:99:
         5b:2f:19:7b:55:e3:7a:c3:4a:25:6c:fa:b3:49:cc:8f:bf:fb:
         08:c2:80:92:59:5b:ff:20:db:95:7e:ec:62:3a:38:06:c5:48:
         9f:75:09:3f:c1:6b:42:b7:a8:3b:81:24:73:6b:e2:14:90:bd:
         23:7c:fc:e8:bd:ca:d3:37:7a:af:9e:08:a5:3d:68:04:6a:8c:
         fb:1e:57:dd:44:ca:ed:e7:97:ae:38:83:25:e7:ac:8b:f0:24:
         35:23:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:53 2026 by rpki-client