Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File:                     X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier:          jOkHB3Pn5Dig+stBicA/5MJgv84f7VcQRMNNPWJMkF8=
Subject key identifier:   C4:2A:07:03:37:FB:A7:3D:A3:AA:D1:5E:8E:B9:49:88:0B:5E:02:88
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       03CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number:          03C5
Signing time:             Tue 12 May 2026 03:45:24 +0000
Manifest this update:     Tue 12 May 2026 03:45:23 +0000
Manifest next update:     Thu 14 May 2026 03:45:23 +0000
Files and hashes:         1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: TNWIb35DOIkgTCgtu7ATV8CdKvkSgtiB0FtjAiG69is=)
                          2: BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa (hash: QgCzz1u02jAncdSqmMDgneUgSDpivS4kunm1jBqDAMg=)
                          3: AE083B9A221D11F1B6A7C7B1DAE4EC9C.roa (hash: BZz928+JG9DymUs/tfXn2o5xj9tzz1PFhKTIyjMNWuU=)
                          4: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
                          5: EEED23E0221E11F1929878B9DAE4EC9C.roa (hash: PIbvfw2+WuzsuifwkM5C+2Xq3LEZFo6ygJtOvVyzU5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 03:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: May 12 03:45:23 2026 GMT
            Not After : May 14 03:45:23 2026 GMT
        Subject: CN=6a02a254-b3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:84:f6:a6:17:75:6e:d7:34:df:b6:cc:14:
                    45:12:42:e7:67:33:73:c7:26:fa:1e:be:34:4f:54:
                    df:c4:29:45:74:9a:52:c5:52:59:0d:b8:1b:99:60:
                    41:ef:e0:a8:ae:61:e8:f4:2e:95:f0:b6:79:6c:cc:
                    13:80:88:a9:94:6b:b3:db:74:cc:8f:5f:a2:b5:d2:
                    8a:db:f3:77:60:be:ef:46:c3:ed:7f:72:52:ef:45:
                    89:4f:3c:75:6d:41:6d:bc:14:02:c9:24:e3:8e:ac:
                    6d:9c:2b:b1:d5:ab:7b:87:9c:08:77:fb:16:a9:b9:
                    30:71:05:76:5f:92:31:c2:be:72:fc:18:d1:fb:3e:
                    7a:b2:31:9c:0a:0c:6e:8b:bf:2c:f7:e5:4f:d1:46:
                    6f:14:e9:c8:c2:55:68:48:43:0d:36:cf:a8:0a:6c:
                    7d:a6:1a:b9:71:2c:3f:f2:d2:b7:14:e2:a3:eb:55:
                    c9:fc:b3:cd:fa:b8:b3:1b:fb:bd:00:cf:0d:94:6b:
                    a2:0c:a4:de:93:5b:5c:6b:a9:5b:8f:ac:72:24:35:
                    11:86:e9:eb:bf:dd:08:77:7d:da:91:ea:57:96:e5:
                    33:ea:12:58:81:fe:65:b7:14:f5:48:c6:c8:4d:60:
                    c7:37:cc:92:99:76:6f:61:b8:26:07:67:25:57:44:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2A:07:03:37:FB:A7:3D:A3:AA:D1:5E:8E:B9:49:88:0B:5E:02:88
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:f1:f3:7d:98:bd:39:2c:5c:60:d1:38:ea:0c:1a:16:a8:
         f7:95:91:d9:82:0d:e5:cd:b2:d2:a0:99:27:7d:ab:7d:82:db:
         7e:a2:30:29:6e:6d:36:ed:b3:df:07:8f:a4:0f:47:28:ca:96:
         a0:dc:51:a2:b2:c8:96:2b:e3:e3:e5:09:cb:08:91:bc:ec:63:
         5c:ce:d3:80:2a:73:26:79:ab:ff:c8:06:b1:64:47:32:3a:49:
         a5:92:92:cb:c4:8f:d8:db:7a:57:df:94:6c:71:61:4a:59:86:
         22:f0:91:b0:5d:6b:1f:67:c8:d0:b1:ff:7c:2c:97:93:e3:2a:
         3a:f2:b9:81:5a:eb:b0:5c:99:d0:d0:4f:37:ed:86:33:c8:50:
         62:b5:9d:00:81:a1:55:31:75:0d:22:04:dd:7c:c4:fd:e4:52:
         63:fd:dc:a2:da:71:53:ff:9d:4c:57:83:2c:33:cf:9f:69:0b:
         a2:f9:16:3f:3c:df:42:45:73:02:7d:9a:fb:ee:c8:e8:a3:f0:
         bf:fd:60:29:4a:5c:66:9b:3f:e4:e1:7f:ef:95:c3:34:90:d5:
         71:05:e8:6c:ea:74:bf:56:d9:3f:6e:2a:25:c2:8b:d7:c2:06:
         ab:62:70:f5:95:86:62:c4:7b:6b:33:fa:9c:6f:24:fd:c1:26:
         f8:b7:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:13 2026 by rpki-client