Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
File:                     fHsh1E3T3s6a76jRvdnhrs9LUY0.mft (raw, json)
Hash identifier:          aOdqvllL5o114BSfsEXmsCXSDveUZdn8c35uMyq/aHw=
Subject key identifier:   51:79:5F:B1:FC:69:D5:F0:D4:18:E0:D4:24:AF:03:B1:A1:11:05:24
Authority key identifier: 7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D
Certificate issuer:       /CN=F362DE23AF/serialNumber=7C7B21D44DD3DECE9AEFA8D1BDD9E1AECF4B518D
Certificate serial:       014B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
Manifest number:          0148
Signing time:             Tue 12 May 2026 04:56:42 +0000
Manifest this update:     Tue 12 May 2026 04:56:41 +0000
Manifest next update:     Thu 14 May 2026 04:56:41 +0000
Files and hashes:         1: fHsh1E3T3s6a76jRvdnhrs9LUY0.crl (hash: ZpdIn0FUJ2pO8EWKnOqWeMi9FGBJAuShPCSYVIPwvUQ=)
                          2: 61A3E35055B111F0BEABAEADDAE4EC9C.roa (hash: 5RZ+g8PtYtB8DddiaGipYGbE8zOMK03uWK9ehUr/Igs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 04:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362DE23AF, serialNumber=7C7B21D44DD3DECE9AEFA8D1BDD9E1AECF4B518D
        Validity
            Not Before: May 12 04:56:41 2026 GMT
            Not After : May 14 04:56:41 2026 GMT
        Subject: CN=6a02b30a-5cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:ce:eb:5e:0e:d1:b2:db:9e:a7:41:36:0d:
                    e9:eb:0a:26:7d:f9:88:07:ce:83:79:55:9d:dd:0e:
                    65:4e:d5:33:ae:f2:d6:9d:d6:7b:43:bd:86:79:ed:
                    a1:8c:01:61:54:8b:46:a9:d9:bc:0f:b5:39:02:00:
                    a0:ac:50:79:fa:d4:9c:bc:30:f5:78:22:cb:d3:c7:
                    4d:57:12:fb:37:00:62:45:67:cb:40:d0:cd:63:be:
                    51:06:b0:90:01:d6:df:c3:74:7c:8f:2b:c9:a5:66:
                    b0:15:13:89:99:7c:c8:d8:e6:1b:d4:3b:8f:ca:20:
                    08:1a:bf:58:dc:fa:30:10:1a:a6:0e:99:00:17:b5:
                    15:5c:2d:e2:69:f1:40:6d:48:d0:bf:47:e8:25:6f:
                    a5:5d:4c:e9:e5:ba:ca:bf:d2:f1:46:d2:b1:1d:5d:
                    64:0e:15:c8:cb:f2:fe:d0:5d:b8:e4:65:7a:c6:63:
                    b4:36:7f:0f:2d:38:01:bd:8b:56:5e:ed:0c:76:7e:
                    db:d9:66:ea:21:9e:2d:c4:4d:6c:90:9e:73:20:5c:
                    98:1a:ea:a6:cc:ec:e9:5c:13:3f:0e:1c:89:fb:0c:
                    c8:4c:b8:d1:d9:f3:d4:e4:06:35:72:b2:ba:6d:f5:
                    74:72:07:20:45:c1:eb:7b:68:77:14:58:b6:38:95:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:79:5F:B1:FC:69:D5:F0:D4:18:E0:D4:24:AF:03:B1:A1:11:05:24
            X509v3 Authority Key Identifier:
                keyid:7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:db:34:dd:da:4f:92:10:07:67:1c:31:86:97:7f:0a:86:86:
         59:29:1a:e5:6a:8a:7a:33:b9:f2:d9:da:e2:7f:cb:39:08:4e:
         87:31:69:01:8e:b9:04:3d:9f:4f:2d:74:23:11:d8:38:25:21:
         98:16:ad:64:0c:35:43:e8:10:3b:22:c5:b9:2e:d4:f3:73:5d:
         fc:a8:7c:b3:ca:df:bb:e5:30:dd:d5:cc:7d:60:d2:5f:5f:64:
         87:9d:07:c5:e3:41:b0:42:75:d9:c4:c0:b7:24:29:6f:fb:e7:
         ba:50:06:c6:07:a8:87:30:3f:a0:bc:eb:3b:95:a0:8a:a3:3b:
         92:4d:d7:88:9c:ef:ec:74:15:d1:f2:66:1b:5e:51:69:e2:1b:
         fe:c3:79:d5:94:dd:d0:b5:be:74:bd:cb:f4:6e:b8:0e:0b:02:
         4a:5e:02:13:85:82:a9:39:53:77:ec:3d:98:db:9f:ab:6e:1b:
         14:4d:6a:c7:7c:1e:88:f2:af:10:f5:a5:fd:bd:86:9b:57:73:
         20:22:1a:ad:65:43:45:86:65:c3:f1:fc:b9:18:01:0a:13:35:
         da:32:ae:3e:04:53:99:4e:df:ef:fd:0e:4e:29:26:a4:5c:f7:
         68:0e:4c:fe:17:4f:7e:48:dd:be:04:28:9a:6b:bc:66:be:e3:
         e6:ef:e4:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkRFMjNBRjExMC8GA1UEBRMoN0M3QjIxRDQ0REQzREVDRTlBRUZBOEQxQkREOUUx
QUVDRjRCNTE4RDAeFw0yNjA1MTIwNDU2NDFaFw0yNjA1MTQwNDU2NDFaMBgxFjAU
BgNVBAMTDTZhMDJiMzBhLTVjZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7xs7rXg7Rstuep0E2DenrCiZ9+YgHzoN5VZ3dDmVO1TOu8tad1ntDvYZ5
7aGMAWFUi0ap2bwPtTkCAKCsUHn61Jy8MPV4IsvTx01XEvs3AGJFZ8tA0M1jvlEG
sJAB1t/DdHyPK8mlZrAVE4mZfMjY5hvUO4/KIAgav1jc+jAQGqYOmQAXtRVcLeJp
8UBtSNC/R+glb6VdTOnlusq/0vFG0rEdXWQOFcjL8v7QXbjkZXrGY7Q2fw8tOAG9
i1Ze7Qx2ftvZZuohni3ETWyQnnMgXJga6qbM7OlcEz8OHIn7DMhMuNHZ89TkBjVy
srpt9XRyByBFwet7aHcUWLY4la3nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUXlf
sfxp1fDUGODUJK8DsaERBSQwHwYDVR0jBBgwFoAUfHsh1E3T3s6a76jRvdnhrs9L
UY0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJERTIzLzg5QTZDMjY0NTVBNzExRjBBMDU5QkFFRERBRTRFQzlDL2ZIc2gx
RTNUM3M2YTc2alJ2ZG5ocnM5TFVZMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZIc2gxRTNUM3M2YTc2alJ2ZG5ocnM5TFVZMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkRFMjMvODlBNkMyNjQ1NUE3MTFGMEEwNTlCQUVEREFF
NEVDOUMvZkhzaDFFM1QzczZhNzZqUnZkbmhyczlMVVkwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAm2zTd2k+SEAdnHDGGl38KhoZZKRrl
aop6M7ny2drif8s5CE6HMWkBjrkEPZ9PLXQjEdg4JSGYFq1kDDVD6BA7IsW5LtTz
c138qHyzyt+75TDd1cx9YNJfX2SHnQfF40GwQnXZxMC3JClv++e6UAbGB6iHMD+g
vOs7laCKozuSTdeInO/sdBXR8mYbXlFp4hv+w3nVlN3Qtb50vcv0brgOCwJKXgIT
hYKpOVN37D2Y25+rbhsUTWrHfB6I8q8Q9aX9vYabV3MgIhqtZUNFhmXD8fy5GAEK
EzXaMq4+BFOZTt/v/Q5OKSakXPdoDkz+F09+SN2+BCiaa7xmvuPm7+SP
-----END CERTIFICATE-----
Generated at Wed May 13 04:38:37 2026 by rpki-client