Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
File:                     9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft (raw, json)
Hash identifier:          cm6V3ij1zY5otVYc9GMMzLi/NVBBbyuL7p7ZZrSDQjQ=
Subject key identifier:   A5:14:9E:92:F5:E1:66:B6:07:ED:85:07:FE:D4:54:B9:EA:27:F8:E0
Authority key identifier: F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Certificate issuer:       /CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Certificate serial:       0650
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
Manifest number:          0645
Signing time:             Wed 13 May 2026 02:36:37 +0000
Manifest this update:     Wed 13 May 2026 02:36:36 +0000
Manifest next update:     Fri 15 May 2026 02:36:36 +0000
Files and hashes:         1: 9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl (hash: QiQ0cSyUOHu7GDiSbYRdoKunaxIqRnAzNogKjAWMyjQ=)
                          2: EA7C8B00A05C11F09DBAF186DAE4EC9C.roa (hash: nyTYwtfqRuxnUdul9eLFpyBMx56jYP4EyI39iQVEpwc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 02:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36797C7AF, serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
        Validity
            Not Before: May 13 02:36:36 2026 GMT
            Not After : May 15 02:36:36 2026 GMT
        Subject: CN=6a03e3b5-5a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:04:1b:87:ac:03:18:a3:96:8e:64:5c:0d:
                    66:be:e6:4b:d2:c8:a6:60:04:1c:5f:cf:98:2c:2d:
                    93:0d:8d:6b:44:42:1f:78:ab:49:c6:43:02:00:f0:
                    16:9e:b0:f3:ea:c2:0c:ac:5b:e3:6b:37:2b:f2:01:
                    50:1f:08:39:37:5b:2d:40:5e:b0:f5:34:2e:e2:be:
                    19:38:04:dd:a2:3f:91:a0:c6:90:5f:96:c9:39:3f:
                    4b:ab:39:ed:18:cc:b8:42:4f:39:06:32:f5:9e:6f:
                    3a:a3:92:61:81:c2:45:92:4b:af:8a:af:52:fb:09:
                    a1:34:72:52:ab:38:3c:29:f3:e1:66:c8:21:f1:c4:
                    e3:53:06:5a:b6:6e:fd:b3:ad:1d:67:7a:ec:bd:ba:
                    cd:bb:72:6f:00:64:a1:2e:02:4f:7a:7f:24:b0:af:
                    e9:bd:e6:b3:28:cd:76:c6:e0:8e:db:f9:61:a0:cf:
                    07:3a:7c:64:fa:14:a0:0a:68:e3:26:12:aa:8d:e2:
                    10:09:9e:c8:bb:e5:a7:83:3f:63:50:c5:f1:0b:8a:
                    e1:52:ed:d5:d0:4e:7f:9e:b6:2d:03:85:e1:1b:5d:
                    35:82:b4:2e:0a:9c:47:28:42:d6:ba:3a:d8:13:fd:
                    b7:a8:a4:99:3b:53:54:cf:2d:b1:24:00:d0:e1:2a:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:14:9E:92:F5:E1:66:B6:07:ED:85:07:FE:D4:54:B9:EA:27:F8:E0
            X509v3 Authority Key Identifier:
                keyid:F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:58:82:86:67:06:b6:c4:da:d1:2a:64:6a:e8:9c:69:27:
         51:5d:52:48:4f:8f:95:f6:93:53:d8:7f:24:7c:d2:f5:eb:a4:
         1b:9c:22:95:b6:96:2b:2f:c6:79:d5:ed:74:51:41:55:99:8e:
         f3:6e:6b:56:29:8e:99:db:98:43:7b:17:76:84:c3:71:12:e5:
         98:27:56:d7:c6:51:5b:e4:3b:4c:38:f6:63:db:cc:c1:5e:4d:
         64:82:1c:5e:32:3b:31:ac:a6:0e:ce:fd:d8:f0:0a:c2:cc:f8:
         e2:34:98:e9:09:24:27:d7:7c:bc:25:03:4e:47:fc:cf:99:1c:
         27:0d:7b:11:26:12:b7:20:f7:c5:25:f1:39:d2:3d:c7:8c:a5:
         c2:5a:57:d3:c5:ee:82:50:cd:37:d8:c2:ea:c7:74:7f:c4:3a:
         47:0b:cb:54:93:0f:9d:69:4b:0f:e8:ff:6e:eb:34:3b:f7:84:
         48:49:43:7d:81:44:f2:89:42:b9:a6:4a:81:36:65:8c:3e:eb:
         82:9e:72:6c:41:9a:40:36:9b:7c:dc:5f:a1:7b:4a:71:50:2d:
         92:50:ba:cd:f1:7e:97:c5:b9:fb:75:3c:81:64:0b:f0:49:6a:
         fc:76:af:7e:dc:e3:f6:2b:d2:88:34:91:2e:8c:17:7f:b2:6b:
         ff:99:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:49 2026 by rpki-client