Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          dP59H2Etds/Qiebc9LwOTuupUKoxDfIwKSMg0cy3KjE=
Subject key identifier:   CC:B5:5C:E4:4D:D2:34:35:94:10:A1:15:D4:FF:7F:F4:C5:A8:85:2C
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       01D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          01D5
Signing time:             Wed 13 May 2026 04:48:55 +0000
Manifest this update:     Wed 13 May 2026 04:48:54 +0000
Manifest next update:     Fri 15 May 2026 04:48:54 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: hWRK81YxWDlVU2VqhSm7vCBp75SVYw/wFvoQYFB1kZ4=)
                          2: 6A185994FCEB11F0A5BF2AA7DAE4EC9C.roa (hash: HbhtB0uC4Bt3yw5ALLFqBczkyPmNpkmfX/VyCDRCkCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 04:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: May 13 04:48:54 2026 GMT
            Not After : May 15 04:48:54 2026 GMT
        Subject: CN=6a0402b6-646f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:f7:1f:e6:e9:82:22:78:1b:d1:eb:3b:fa:
                    c8:e6:23:a1:a1:24:78:ca:a3:db:1d:1b:13:b3:47:
                    b5:c0:18:b2:ef:f0:1e:ab:eb:dd:7a:a8:48:98:0e:
                    f1:76:7c:d2:7b:0c:a6:6a:99:62:d2:ee:96:f3:56:
                    5d:98:9d:15:0d:39:6b:d9:22:ae:b1:9a:45:25:b9:
                    fb:4c:6c:5a:f0:1c:d7:83:5f:4b:9f:23:11:d1:93:
                    d3:f0:26:f4:53:a2:86:a8:8e:49:89:43:97:ed:b6:
                    92:7d:96:90:ad:a8:9e:63:02:5a:18:23:6a:1e:e5:
                    78:0f:cf:73:0c:0b:1c:d7:c1:85:8f:d2:43:4c:93:
                    50:49:cb:1a:6e:6f:d6:6a:4b:7b:19:45:e0:74:84:
                    b0:ec:92:b3:16:ae:85:df:36:22:76:bf:ba:ca:c2:
                    f7:00:f2:d1:ac:43:83:4f:36:50:b7:37:06:6e:10:
                    ee:26:f0:80:be:dc:74:e3:de:ff:ba:92:08:12:a7:
                    d8:50:78:95:1d:25:1b:43:95:01:0a:17:94:1e:88:
                    74:93:b7:00:d9:92:be:92:1d:17:3f:7f:f7:2e:47:
                    27:e8:84:9c:06:26:fb:a1:37:45:26:cf:3d:74:75:
                    c2:84:87:25:a0:5b:33:f5:b0:a6:a8:bb:ec:c9:3b:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B5:5C:E4:4D:D2:34:35:94:10:A1:15:D4:FF:7F:F4:C5:A8:85:2C
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:07:4f:11:8d:6a:a2:f7:c3:3c:ee:5c:0c:b9:3e:bc:6a:
         44:d4:ad:c0:fd:47:0b:2d:f5:6e:b2:6f:0d:7a:7e:fc:0d:85:
         52:88:14:fb:80:3f:3a:a0:fd:aa:17:eb:7e:61:f1:88:d8:ad:
         e4:57:35:0e:39:26:02:4b:00:54:bb:02:9e:dc:b1:1c:bd:d3:
         de:f0:f3:74:53:b9:f8:61:61:b4:63:2f:65:1b:5d:c4:c1:d2:
         c2:c7:20:63:7d:fc:1f:3e:28:b0:f5:bc:98:20:97:7a:e8:bd:
         d4:42:f5:31:e7:b0:21:7c:50:7e:66:82:38:82:50:f2:9c:e4:
         c7:59:66:23:b7:23:ac:05:d3:45:e9:7a:6d:93:10:9f:ce:59:
         92:e4:ad:69:d2:81:ab:ff:1c:9c:cb:5d:83:16:f1:e8:d9:0a:
         1a:d2:c0:68:40:be:53:fc:6a:6a:ec:41:3f:77:ae:d6:f9:d7:
         00:19:80:2d:74:96:2e:a2:a2:a5:e1:6f:a9:9c:41:02:e7:2a:
         1c:13:16:3f:19:40:38:fd:b0:63:ad:c1:92:88:1c:a5:53:ec:
         7b:8c:fa:26:ec:ae:78:78:91:6f:3b:e6:f2:bc:d7:f1:a4:90:
         3d:e5:c8:90:22:f1:aa:43:e2:60:f0:58:f1:fd:d7:5d:59:65:
         1d:21:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:51:23 2026 by rpki-client