Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File:                     B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier:          b4AZu5EMTDXJ+l3963Ag/HpJJCHKhOb8IKHl5Bd3YDA=
Subject key identifier:   2A:A3:4C:AC:20:BC:9E:8A:0A:1B:6C:66:7F:DD:10:3A:ED:8B:4C:A3
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer:       /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial:       01A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number:          01A4
Signing time:             Tue 12 May 2026 04:49:43 +0000
Manifest this update:     Tue 12 May 2026 04:49:42 +0000
Manifest next update:     Thu 14 May 2026 04:49:42 +0000
Files and hashes:         1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: 9vElRj7+onkGz+m7OKalxOSPlcvl8Ko+Mlg4b5a4kEQ=)
                          2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 04:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
        Validity
            Not Before: May 12 04:49:42 2026 GMT
            Not After : May 14 04:49:42 2026 GMT
        Subject: CN=6a02b167-8b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:64:5d:8f:d1:93:6a:28:36:a5:76:0f:d3:
                    c7:38:e3:32:78:8c:45:9b:b5:bf:b6:58:c7:4c:da:
                    b9:51:ec:39:f2:35:d1:7c:21:cb:25:17:6d:e2:0e:
                    9c:80:e0:f3:ad:c2:18:76:35:98:a3:6a:6a:81:b5:
                    92:f6:98:15:f5:b0:de:09:2d:dd:e7:0f:20:3f:ae:
                    fc:ba:c1:79:fb:0c:bb:01:06:fe:59:bd:37:98:9a:
                    d6:c9:ec:52:77:f0:f6:25:cc:5f:c6:48:5e:12:05:
                    ea:bc:ec:10:78:3d:f9:5c:f3:21:f8:47:04:cb:94:
                    20:7f:3f:42:d2:20:8a:b3:c0:b7:1b:a6:6a:a9:ec:
                    e2:57:dc:71:c3:e3:3f:89:ce:ed:de:42:e8:a3:c7:
                    8f:88:a9:ef:0f:48:9c:81:e0:2e:4f:d1:f9:db:54:
                    dc:86:27:7f:18:aa:85:29:bc:db:2f:89:cd:66:d8:
                    35:c4:b9:e1:a5:ab:93:d5:22:e9:6b:e7:8a:89:91:
                    cd:ea:b8:45:6d:17:dc:46:f6:62:e7:23:c7:1c:a1:
                    24:08:41:f1:ab:cf:8c:c7:46:d1:32:24:a8:d2:85:
                    5a:83:c7:a0:1a:ef:eb:40:99:db:85:12:dc:d2:70:
                    55:02:a9:fc:96:c7:42:5f:55:66:c3:95:b3:11:c0:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:4C:AC:20:BC:9E:8A:0A:1B:6C:66:7F:DD:10:3A:ED:8B:4C:A3
            X509v3 Authority Key Identifier:
                keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:23:f9:ab:aa:b2:49:3d:1e:fb:56:16:3b:84:ef:92:3e:
         13:52:e5:77:1e:ce:a6:c1:14:99:dd:bc:eb:4f:62:16:69:d6:
         8f:97:0e:0c:f2:cd:e2:25:7d:03:24:2a:d0:26:80:9b:14:51:
         c7:3a:1a:72:83:0c:64:7a:7a:77:56:2e:93:90:15:82:80:02:
         5d:da:da:42:6c:9c:fe:e9:47:92:76:20:f1:da:69:18:39:07:
         97:39:96:af:0a:ec:bf:c5:60:c7:c0:38:22:b9:d0:f3:8e:cb:
         b4:c7:a5:21:06:2c:18:a5:15:84:71:60:6d:17:b8:b2:bc:9d:
         cb:0e:c9:86:b5:52:87:0d:4b:db:57:9f:c0:7b:40:49:f7:0f:
         7c:9e:4b:3a:bd:ca:47:6a:01:22:ec:fa:ec:a8:25:7a:99:44:
         4f:5c:6b:a5:c1:e9:16:44:e4:6e:e1:18:79:3e:cf:18:e5:69:
         82:10:61:80:0d:cb:c1:54:f4:c2:82:dd:da:6e:06:76:38:34:
         d5:62:e8:07:bc:c1:26:93:19:c7:dd:cb:50:8d:f4:4d:4d:0a:
         94:c2:89:95:40:f1:5d:79:a0:ad:cf:0a:bb:24:35:b3:93:d5:
         e9:51:69:36:41:1d:0e:94:57:57:b5:0b:83:90:3c:47:d4:0e:
         e5:70:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:36:34 2026 by rpki-client