Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
File:                     vM6G1hLUP4QasEFuxaiEBw9c5dY.mft (raw, json)
Hash identifier:          19lueHnz7PHVW62VZ6jT7L1DUeOxLdOgyWvpkfS1BjE=
Subject key identifier:   8F:6F:9C:18:9A:42:8D:1A:FF:21:1A:6D:4A:08:BA:6E:D4:6B:F3:2E
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Certificate issuer:       /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial:       0A3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
Manifest number:          0A34
Signing time:             Wed 13 May 2026 01:26:33 +0000
Manifest this update:     Wed 13 May 2026 01:26:32 +0000
Manifest next update:     Fri 15 May 2026 01:26:32 +0000
Files and hashes:         1: vM6G1hLUP4QasEFuxaiEBw9c5dY.crl (hash: MiJwRZlgaLkGUmaAIaefTyReiRcKkUKeu29Em7Wo/Os=)
                          2: 02F61C8EED4611EF9EE0C559762E951A.roa (hash: a0VBoAhb+w/AiTpkwDup0ND635i4uEH4NIMUxN2UJ2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2621 (0xa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAF, serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
        Validity
            Not Before: May 13 01:26:32 2026 GMT
            Not After : May 15 01:26:32 2026 GMT
        Subject: CN=6a03d348-0b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:1d:a0:b3:bf:52:72:7e:88:95:d1:36:9f:
                    d2:2a:68:c5:a4:9e:4d:4b:4d:20:7f:fb:bb:d5:82:
                    b3:1e:1f:58:3f:f3:a6:59:36:d4:32:df:a2:c9:31:
                    f7:82:e1:a1:24:e2:de:a4:86:77:ad:40:dc:5f:fb:
                    9b:4e:f4:47:f9:79:bb:df:c2:25:96:c4:e0:3a:2c:
                    75:c3:31:b9:e0:91:95:8a:61:87:07:03:70:02:da:
                    af:a9:3a:e9:89:df:b2:53:be:5f:f2:2f:3f:1e:69:
                    f1:97:a1:ee:75:d4:69:23:55:f4:99:28:56:cf:5f:
                    96:90:14:f7:11:26:9b:2d:05:ab:ba:57:06:70:fe:
                    fb:9a:68:22:17:8e:9e:ed:87:9f:cc:16:66:07:43:
                    ba:82:28:ba:73:f1:66:57:ea:78:60:5b:50:85:76:
                    31:ea:43:f9:ce:21:41:62:5f:da:07:7c:81:80:82:
                    96:a8:f6:6c:20:f1:61:36:90:3c:6d:26:44:c4:00:
                    62:88:6d:fe:d9:5d:72:42:90:55:e9:57:8b:18:db:
                    93:56:d9:1b:6b:66:c7:78:e1:df:ea:d1:8c:f2:2d:
                    53:6b:77:13:e6:1f:46:a5:fd:c1:3d:4b:c0:9e:ec:
                    06:24:e0:90:71:62:95:af:c0:67:dd:a1:24:df:86:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:9C:18:9A:42:8D:1A:FF:21:1A:6D:4A:08:BA:6E:D4:6B:F3:2E
            X509v3 Authority Key Identifier:
                keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:47:cf:8c:77:90:ce:da:e9:77:6e:ad:d0:49:ec:1d:37:4d:
         c9:d0:53:15:72:67:ba:57:fe:c5:d2:c1:5c:34:c5:ac:f9:6a:
         32:21:9a:2e:35:a6:bf:88:b7:8c:11:8f:ab:5e:aa:48:74:cd:
         e3:a1:95:f4:91:8a:83:df:0e:67:5a:a5:23:b4:43:19:00:c7:
         b3:01:58:2b:32:d6:bd:8c:9d:aa:7f:f0:ee:19:15:d3:bd:f1:
         83:71:72:87:39:47:f5:74:80:6a:53:2f:2d:71:38:15:44:09:
         e0:b3:81:0e:3d:6e:43:b1:66:72:74:13:1e:2d:ae:45:5c:b2:
         cd:3a:0b:e3:ab:e5:49:d0:7d:65:60:69:34:8e:00:f5:ec:69:
         2b:ee:53:2d:24:1a:c8:48:c9:4c:7a:f9:01:28:20:0b:c9:a2:
         30:bc:32:f3:ad:bd:31:f4:5c:87:88:21:7a:97:da:de:72:65:
         d8:8a:59:c4:31:bd:80:74:78:b2:ff:6c:59:ea:f7:75:85:3f:
         8b:8d:26:17:35:59:24:41:d9:49:24:09:5c:d6:6d:83:82:20:
         b7:52:85:69:90:62:8e:3f:7c:cb:a1:ea:bf:26:3b:80:49:81:
         27:6e:62:b1:14:69:59:af:22:3c:a5:5d:38:b3:4e:b6:41:c3:
         33:57:3b:a2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEM4MURBRjExMC8GA1UEBRMoQkNDRTg2RDYxMkQ0M0Y4NDFBQjA0MTZFQzVBODg0
MDcwRjVDRTVENjAeFw0yNjA1MTMwMTI2MzJaFw0yNjA1MTUwMTI2MzJaMBgxFjAU
BgNVBAMTDTZhMDNkMzQ4LTBiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOmR2gs79Scn6IldE2n9IqaMWknk1LTSB/+7vVgrMeH1g/86ZZNtQy36LJ
MfeC4aEk4t6khnetQNxf+5tO9Ef5ebvfwiWWxOA6LHXDMbngkZWKYYcHA3AC2q+p
OumJ37JTvl/yLz8eafGXoe511GkjVfSZKFbPX5aQFPcRJpstBau6VwZw/vuaaCIX
jp7th5/MFmYHQ7qCKLpz8WZX6nhgW1CFdjHqQ/nOIUFiX9oHfIGAgpao9mwg8WE2
kDxtJkTEAGKIbf7ZXXJCkFXpV4sY25NW2RtrZsd44d/q0YzyLVNrdxPmH0al/cE9
S8Ce7AYk4JBxYpWvwGfdoSTfhmOLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUj2+c
GJpCjRr/IRptSgi6btRr8y4wHwYDVR0jBBgwFoAUvM6G1hLUP4QasEFuxaiEBw9c
5dYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRDODFELzMzNzk0RDJFODkwRTExRTk5QTcyRDE2MkY4QUVBMjI4L3ZNNkcx
aExVUDRRYXNFRnV4YWlFQnc5YzVkWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZNNkcxaExVUDRRYXNFRnV4YWlFQnc5YzVkWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEM4MUQvMzM3OTREMkU4OTBFMTFFOTlBNzJEMTYyRjhB
RUEyMjgvdk02RzFoTFVQNFFhc0VGdXhhaUVCdzljNWRZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJR8+Md5DO2ul3bq3QSewdN03J0FMV
cme6V/7F0sFcNMWs+WoyIZouNaa/iLeMEY+rXqpIdM3joZX0kYqD3w5nWqUjtEMZ
AMezAVgrMta9jJ2qf/DuGRXTvfGDcXKHOUf1dIBqUy8tcTgVRAngs4EOPW5DsWZy
dBMeLa5FXLLNOgvjq+VJ0H1lYGk0jgD17Gkr7lMtJBrISMlMevkBKCALyaIwvDLz
rb0x9FyHiCF6l9recmXYilnEMb2AdHiy/2xZ6vd1hT+LjSYXNVkkQdlJJAlc1m2D
giC3UoVpkGKOP3zLoeq/JjuASYEnbmKxFGlZryI8pV04s062QcMzVzui
-----END CERTIFICATE-----
Generated at Wed May 13 13:09:39 2026 by rpki-client