Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          9orpC4/3ufbbwiPiOSwcvEhH8mcgMz4Ch7g/2Kpvjog=
Subject key identifier:   CD:DC:D4:5B:7B:50:43:36:CE:33:49:95:BA:C0:9C:AB:B7:2A:C8:3D
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0A51
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0A4C
Signing time:             Wed 13 May 2026 01:18:33 +0000
Manifest this update:     Wed 13 May 2026 01:18:32 +0000
Manifest next update:     Fri 15 May 2026 01:18:32 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: nJKF+dGYdDphS25SGaz4WGtCqluzTu0d0PXUQdqt3Tg=)
                          2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: May 13 01:18:32 2026 GMT
            Not After : May 15 01:18:32 2026 GMT
        Subject: CN=6a03d169-6cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:39:5d:88:c9:6f:98:b0:34:3f:03:cc:5e:f5:
                    11:38:d3:d5:50:aa:c1:e3:ad:b1:71:85:d8:31:e3:
                    19:ee:e4:4b:89:f6:5f:9a:39:2f:54:f8:df:df:68:
                    c3:72:cb:a8:12:7e:b6:bc:70:26:53:a2:f9:5f:0a:
                    37:63:62:48:ea:04:da:46:ed:0a:9b:09:cc:43:1f:
                    90:af:34:d4:51:1b:cf:ff:0e:0b:92:bc:2d:5a:34:
                    5b:15:e6:01:37:52:3b:ac:52:43:6e:b3:60:1b:1a:
                    a6:00:b0:2f:67:f1:1d:7b:df:3e:e0:97:a3:6c:7c:
                    b5:48:d1:c6:ba:be:70:b7:29:df:5f:b9:73:4b:01:
                    4a:57:9e:58:29:7e:99:d6:dd:39:fc:59:9f:5b:a9:
                    fa:38:d9:e9:40:93:da:a7:92:98:96:6d:f6:e6:37:
                    77:35:43:68:98:fd:36:2b:bc:ae:34:fd:8c:ce:8a:
                    cf:f2:b4:b0:19:aa:b3:6a:53:e2:4a:98:45:00:a8:
                    04:2e:5b:af:c5:2c:0f:04:68:0e:de:4e:f5:fd:3b:
                    dd:8c:53:61:30:a7:17:db:c1:0e:b9:4a:37:df:15:
                    81:81:f8:c8:c1:df:53:69:fe:f6:69:c7:4c:ae:db:
                    45:7c:10:5e:47:4d:95:e6:bb:ed:61:36:c7:a8:7b:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:D4:5B:7B:50:43:36:CE:33:49:95:BA:C0:9C:AB:B7:2A:C8:3D
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:44:b8:ea:91:9f:2a:3f:26:d2:f8:26:4f:7f:e2:fa:77:dd:
         81:4e:3a:23:75:c0:75:f1:ce:57:e5:af:93:eb:58:76:f2:a1:
         e9:3c:72:88:b7:54:06:eb:db:f8:d6:38:22:74:4c:4f:87:bb:
         df:fa:a6:8d:bc:d0:69:7d:76:c3:af:72:fa:b4:41:08:09:7b:
         f7:02:ab:70:21:d2:aa:bc:c9:27:99:42:09:54:f8:f7:8f:61:
         67:5b:70:03:3a:42:b2:55:b8:e5:9f:fb:53:1d:e2:6e:b8:7a:
         36:e1:ba:07:93:00:1a:56:69:78:d0:8d:43:ea:35:49:ca:f1:
         7d:0f:d3:f1:6b:78:08:44:70:ce:7b:a7:e9:7f:8b:77:5d:61:
         7c:ed:0e:24:3c:b1:1a:d9:4e:e4:57:3e:78:81:e3:4f:a5:e6:
         8b:ff:0e:84:5d:e6:e2:79:9a:11:68:97:29:74:fc:07:1c:eb:
         ee:f2:0b:d2:d9:f3:53:44:6d:a7:64:34:ca:9d:fe:ff:b7:86:
         a1:26:9c:a5:57:71:fc:d5:6f:6c:2b:f6:df:20:2e:64:9b:b4:
         de:6c:af:c5:a2:84:30:de:e8:c9:6f:17:a1:59:e4:fc:7d:b6:
         e6:24:00:1f:e1:2e:33:6d:bf:a1:af:de:e6:79:00:fb:4a:92:
         29:3b:e8:06
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICClEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YyNkRSSTExMC8GA1UEBRMoOUQ4N0IzMTE3QUExQkQ3ODI4QjdERDQ2NEQ3MzA3
NkJBRThEQ0M5NjAeFw0yNjA1MTMwMTE4MzJaFw0yNjA1MTUwMTE4MzJaMBgxFjAU
BgNVBAMTDTZhMDNkMTY5LTZjZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD3OV2IyW+YsDQ/A8xe9RE409VQqsHjrbFxhdgx4xnu5EuJ9l+aOS9U+N/f
aMNyy6gSfra8cCZTovlfCjdjYkjqBNpG7QqbCcxDH5CvNNRRG8//DguSvC1aNFsV
5gE3UjusUkNus2AbGqYAsC9n8R173z7gl6NsfLVI0ca6vnC3Kd9fuXNLAUpXnlgp
fpnW3Tn8WZ9bqfo42elAk9qnkpiWbfbmN3c1Q2iY/TYrvK40/YzOis/ytLAZqrNq
U+JKmEUAqAQuW6/FLA8EaA7eTvX9O92MU2EwpxfbwQ65SjffFYGB+MjB31Np/vZp
x0yu20V8EF5HTZXmu+1hNseoe6VpAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUzdzU
W3tQQzbOM0mVusCcq7cqyD0wHwYDVR0jBBgwFoAUnYezEXqhvXgot91GTXMHa66N
zJYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzNGNDA0MUZDNzBCOTExRTlBN0YyNUQzRkY4QUVBMjI4L25ZZXpF
WHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZZXpFWHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0YyNkQvM0Y0MDQxRkM3MEI5MTFFOUE3RjI1RDNGRjhBRUEy
MjgvblllekVYcWh2WGdvdDkxR1RYTUhhNjZOekpZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFRLjqkZ8qPybS+CZPf+L6d92BTjojdcB1
8c5X5a+T61h28qHpPHKIt1QG69v41jgidExPh7vf+qaNvNBpfXbDr3L6tEEICXv3
AqtwIdKqvMknmUIJVPj3j2FnW3ADOkKyVbjln/tTHeJuuHo24boHkwAaVml40I1D
6jVJyvF9D9Pxa3gIRHDOe6fpf4t3XWF87Q4kPLEa2U7kVz54geNPpeaL/w6EXebi
eZoRaJcpdPwHHOvu8gvS2fNTRG2nZDTKnf7/t4ahJpylV3H81W9sK/bfIC5km7Te
bK/FooQw3ujJbxehWeT8fbbmJAAf4S4zbb+hr97meQD7SpIpO+gG
-----END CERTIFICATE-----
Generated at Wed May 13 06:13:04 2026 by rpki-client