Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
File:                     2cDlwkl6yIv_-87Z9V1goiiYkn8.mft (raw, json)
Hash identifier:          6P0tA+mrh83lbBtjiqg/klxw/X2hSeVeIB5PZYwkOcM=
Subject key identifier:   3A:AF:28:16:1E:3C:C9:4F:F8:E2:59:9A:93:B0:C5:FD:84:BC:48:03
Authority key identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
Certificate issuer:       /CN=F3644EA8AF/serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
Manifest number:          0135
Signing time:             Wed 13 May 2026 05:01:21 +0000
Manifest this update:     Wed 13 May 2026 05:01:21 +0000
Manifest next update:     Fri 15 May 2026 05:01:21 +0000
Files and hashes:         1: 2cDlwkl6yIv_-87Z9V1goiiYkn8.crl (hash: 99sPRA42JvX+zeyncBvO38Ib4P/7N1YGxmcwbCbvPRc=)
                          2: 696CD0C060B411F0907E96B2DAE4EC9C.roa (hash: 5bAy/PZpHx90ghvP8O3g7YznUOeX+iyLW+PI1ddCQfo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
        Validity
            Not Before: May 13 05:01:21 2026 GMT
            Not After : May 15 05:01:21 2026 GMT
        Subject: CN=6a0405a1-e43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:52:4a:df:d1:07:53:a7:9f:e0:a7:8f:8f:
                    03:2b:73:61:f9:25:ef:fe:93:cd:3a:9a:3a:25:68:
                    21:31:b6:a2:39:a3:51:1e:7d:d2:88:d2:43:de:47:
                    2f:ad:7b:88:88:f2:e4:8b:a8:06:34:39:33:05:61:
                    81:d9:c3:61:17:a0:3e:f5:fe:b8:d1:dc:48:bc:91:
                    df:0c:fb:fa:98:19:ef:5b:31:8b:8d:5d:9d:68:44:
                    f4:6e:36:5f:52:fa:0a:03:69:49:5c:ee:47:63:c1:
                    bc:84:a2:ae:68:91:e1:56:32:5c:b5:16:3b:55:e1:
                    b0:2a:6c:8f:93:2a:75:9d:a5:53:f9:c9:1b:ae:08:
                    65:f3:38:cd:4a:89:b7:9d:b7:4e:5c:d8:61:bf:01:
                    b2:90:10:a3:af:aa:22:2f:c1:fb:24:0f:9f:71:32:
                    b7:e0:71:f1:91:8d:b0:a5:a7:8a:41:93:f5:3e:6d:
                    5f:f2:56:dd:5b:ef:65:ce:ab:e5:03:06:58:e3:d5:
                    42:da:38:26:2e:d9:46:d5:60:df:31:20:39:5d:9d:
                    6b:16:bc:d2:7c:b7:c2:8e:1f:22:9b:23:63:02:6e:
                    bc:00:9e:aa:38:9e:03:cc:e5:6e:0f:b7:95:4f:de:
                    06:e0:fd:fa:10:02:4c:92:10:69:ab:4a:3a:29:e6:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:28:16:1E:3C:C9:4F:F8:E2:59:9A:93:B0:C5:FD:84:BC:48:03
            X509v3 Authority Key Identifier:
                keyid:D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:06:36:ce:a4:ec:17:4f:69:c8:01:55:2f:e0:10:01:72:98:
         99:0d:3d:98:fb:8d:03:2b:dd:b2:c3:3a:66:cd:9a:ea:12:8a:
         b7:af:e7:2b:be:c8:c7:02:8c:15:e8:f3:31:cd:96:5b:e7:7b:
         e7:7f:c3:f7:ff:3e:ee:a3:51:c4:8d:8a:a9:ec:36:40:b2:83:
         df:c3:4a:ac:9d:a8:e3:fd:9e:17:d5:8a:0d:2b:ea:c2:f8:16:
         6b:14:d5:ab:ba:b9:a3:4c:9b:6c:67:22:0b:d3:7e:8d:0b:e3:
         a8:bc:71:99:1f:28:a8:ef:53:0d:5f:38:51:b4:c6:43:55:de:
         f8:35:c6:13:67:44:3a:a0:de:ba:90:cd:53:40:1c:36:94:cf:
         12:86:f9:ce:20:76:90:63:3c:af:d6:55:a1:f8:a1:16:66:a6:
         b6:9c:64:46:d2:ff:c9:a5:52:95:24:92:73:1e:ba:e7:fa:cb:
         0e:c3:ab:49:80:7d:6a:5a:5d:d5:8c:94:b1:28:7b:75:e4:93:
         43:30:61:b0:c7:63:cc:a8:98:a3:72:c1:7a:fd:86:9f:b6:82:
         4f:6e:33:09:75:9f:e6:ff:d1:74:f8:9d:fc:75:a9:ea:ef:53:
         f6:26:27:ca:22:c8:0c:23:b9:f4:25:f1:8e:8d:eb:b1:b5:23:
         2d:9b:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:23 2026 by rpki-client