Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
File:                     2FLZY43gNj3YSH_gDch1vI-a080.mft (raw, json)
Hash identifier:          vz29FgQ6Tyjm2uZZW+FqSdLgMhdojgN6VWUQtR/KMOk=
Subject key identifier:   2B:B8:1F:F8:96:62:5E:87:34:D2:0C:C3:E6:A1:C7:84:BE:B3:CD:E1
Authority key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Certificate issuer:       /CN=F3636791AF/serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Certificate serial:       29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
Manifest number:          26
Signing time:             Tue 12 May 2026 05:31:53 +0000
Manifest this update:     Tue 12 May 2026 05:31:53 +0000
Manifest next update:     Thu 14 May 2026 05:31:53 +0000
Files and hashes:         1: 2FLZY43gNj3YSH_gDch1vI-a080.crl (hash: Hl2LeoD39rTqcYW5G2i0FphiFspx44ODUvm/Wz24/VE=)
                          2: 3CC30608340711F1AFB184CFCE1D38B0.roa (hash: I53gWi2CJOwoPI79Xfi6bjQo4aU2ORPkeD1ir1Rh7cI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
        Validity
            Not Before: May 12 05:31:53 2026 GMT
            Not After : May 14 05:31:53 2026 GMT
        Subject: CN=6a02bb49-b26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:79:51:58:6f:1f:6a:aa:7c:81:6a:0c:b9:
                    b8:ba:0f:13:07:ee:06:1c:2f:4a:2c:69:34:38:68:
                    9d:55:71:cf:fe:ec:8b:42:e0:1f:09:d0:95:a5:f8:
                    90:2e:ef:14:03:52:ce:51:de:da:17:48:65:f7:34:
                    95:0f:8c:24:69:58:b8:18:b4:f8:6b:d3:44:5a:79:
                    64:0c:09:53:35:c6:a3:44:ed:01:3f:50:6b:76:fd:
                    1b:b4:a7:b8:65:37:bf:2d:40:d0:88:45:87:47:71:
                    c1:42:f1:62:f4:fc:3c:ef:42:18:4a:11:27:af:8f:
                    82:7e:23:24:5c:b3:2b:d6:58:05:9c:c9:2f:67:d3:
                    b3:c5:e3:29:17:62:e4:c1:aa:d2:3b:df:ba:b9:b4:
                    ce:16:05:91:18:f8:9b:28:50:f1:f4:59:71:a8:34:
                    31:07:b7:d5:05:80:88:2a:7c:75:7c:d1:bd:a2:24:
                    a2:3a:5a:13:61:d7:93:c6:5c:08:19:69:cb:df:65:
                    03:37:1b:1d:ba:11:cf:d5:e8:6e:03:eb:d7:f3:48:
                    8f:2c:d4:8b:88:6e:2e:68:36:8a:75:a1:94:05:99:
                    07:4a:9b:f6:a2:85:a2:11:b0:40:d8:c5:d6:d4:58:
                    fa:31:f3:aa:55:a0:e6:88:fe:95:87:6a:de:c0:b7:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:1F:F8:96:62:5E:87:34:D2:0C:C3:E6:A1:C7:84:BE:B3:CD:E1
            X509v3 Authority Key Identifier:
                keyid:D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:a4:db:d4:e8:cf:2d:ad:aa:f9:d1:80:7c:2a:b8:a9:37:
         17:d2:79:83:2f:da:1d:23:d3:8a:33:bd:4e:8a:e2:b2:07:5a:
         00:56:2a:38:71:05:dc:dd:7d:00:f0:cc:9e:fe:30:bf:37:53:
         76:ef:f0:27:fe:58:60:48:8e:7c:24:0f:de:89:e9:19:8c:02:
         27:1b:2a:a7:1e:92:73:eb:84:d3:ae:7d:eb:ad:14:43:17:22:
         54:28:44:a3:d4:d2:d0:8b:8f:52:05:55:cb:a0:d9:77:f7:bf:
         9f:2a:26:ec:07:62:66:2f:4e:cb:1e:a2:62:29:c6:5b:82:f2:
         4c:dc:f2:99:a1:e8:1d:60:5a:59:89:ad:c0:2e:29:9d:ed:4b:
         a6:e5:5f:77:8e:d8:cc:ac:a0:9e:a9:34:64:2e:63:fc:4e:95:
         f4:8c:13:86:b0:e7:f9:95:49:24:ff:fd:10:40:61:26:f5:5e:
         ca:e5:e3:cb:f8:d7:c8:f1:18:31:43:a1:43:2d:92:3c:7b:0f:
         51:0c:06:f2:ef:2b:b6:27:ba:2a:ce:e8:84:31:0c:87:02:cf:
         20:4c:f7:08:30:d6:3a:69:f5:a3:da:5f:22:02:d8:5b:19:db:
         22:3e:0b:fd:fb:e4:4b:64:02:a6:6a:15:70:cf:28:ae:d0:1d:
         68:a4:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:33 2026 by rpki-client