Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          ALPUNgUYHmFvHAVWIbsnJkwN5YmS0z0Vpd8scem7FlE=
Subject key identifier:   6D:31:8F:AA:FD:57:AC:3F:3A:7E:C9:E7:A9:61:0A:B4:09:21:18:18
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       0544
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          0543
Signing time:             Wed 13 May 2026 03:01:51 +0000
Manifest this update:     Wed 13 May 2026 03:01:50 +0000
Manifest next update:     Fri 15 May 2026 03:01:50 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: h8dRHyaqDg0I/1gtTIldZsM5+3MnytYZe0J74uk7iiQ=)
                          2: 1B35856C195C11F1A4BE1BE6DAE4EC9C.roa (hash: CHaNrBOXzFgVGFou41x3nuG9Yh9iFT+XuvLJW7NRZ94=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 03:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: May 13 03:01:50 2026 GMT
            Not After : May 15 03:01:50 2026 GMT
        Subject: CN=6a03e99f-bfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:8a:81:4b:3a:65:4e:3f:5f:ba:89:52:68:
                    f7:99:3c:fe:ed:d3:be:73:67:5c:04:a1:88:e2:08:
                    d0:49:9d:ac:16:33:8a:97:43:0c:e6:11:cd:4d:c7:
                    57:04:ff:19:1d:44:ad:f9:a9:9b:67:8c:47:7c:ed:
                    c4:ce:52:91:c6:aa:f9:b9:81:32:43:25:6f:b8:76:
                    27:bc:4e:ea:96:20:46:e3:03:69:30:51:53:83:5b:
                    ae:af:17:df:73:08:e5:72:60:e8:06:5a:3b:8c:ab:
                    e8:58:df:37:d0:13:45:2c:62:71:2e:b0:74:f0:31:
                    f6:1e:28:e2:7d:93:8c:e7:74:66:89:2f:00:e3:4b:
                    fc:e7:84:eb:02:09:5b:97:d4:89:48:a8:73:ee:e8:
                    da:c2:0c:ad:d7:2a:60:c3:27:a3:24:04:18:5e:03:
                    b4:e0:1b:c8:5c:14:f7:dc:2b:d3:15:6c:84:b9:9d:
                    72:dc:69:f7:0e:de:7a:66:86:4e:7a:66:e3:87:fe:
                    c1:22:08:d6:c1:63:50:d8:d2:c7:75:2f:cc:89:1e:
                    96:7f:09:3b:f7:ee:eb:da:ed:5f:a5:3a:1d:cc:09:
                    4e:b7:80:71:3f:fc:55:7c:42:31:e4:a8:92:9e:a0:
                    b3:e0:2a:45:a6:be:28:37:7f:2e:b5:93:94:e2:64:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:31:8F:AA:FD:57:AC:3F:3A:7E:C9:E7:A9:61:0A:B4:09:21:18:18
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:15:61:fd:62:75:9c:8e:62:ec:37:cc:7d:32:3d:72:c5:
         cf:b6:53:59:29:cf:09:ef:46:c8:8a:c5:8a:eb:e6:6a:68:32:
         08:e0:de:18:fe:69:11:0f:fd:08:ec:98:3e:df:dd:ba:33:06:
         ee:58:9d:aa:7d:16:5f:44:2d:f2:9c:8b:b4:5f:5b:87:f1:78:
         48:af:23:09:00:88:40:53:81:8f:c4:8b:57:84:d7:b0:8c:02:
         09:74:1f:19:fa:da:3c:62:48:8c:84:9e:36:87:2b:2c:77:21:
         1e:e6:c3:eb:42:d3:83:05:ef:d0:25:c8:08:12:e4:e8:22:27:
         8c:12:14:3c:a9:fe:1e:4f:08:23:69:43:b0:b7:d3:bf:83:05:
         e5:d3:1b:54:e1:61:42:31:73:cc:fb:c4:25:dd:a2:97:78:9f:
         0b:17:69:74:ff:fc:f2:ec:44:f2:6b:ba:66:e9:e4:e7:62:ba:
         2b:3b:1f:6c:ed:3f:bf:e5:25:55:63:5a:e5:a2:da:e3:d6:fa:
         39:a8:2f:ed:39:b1:71:b5:cd:5a:73:f3:26:58:85:43:63:00:
         dc:d0:b7:16:c4:c0:a5:8d:a3:aa:d1:ae:e0:b0:04:6b:3a:6b:
         e6:f5:19:a5:f1:c7:60:c2:a4:ba:a0:4a:d8:0c:b5:f0:7c:de:
         be:7c:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:47:16 2026 by rpki-client