Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          lsbaEcQM0VKSipDFHkC/k68anmjT5fEGF0Q1/ihuu/0=
Subject key identifier:   00:0A:92:42:B3:9B:0A:58:DC:94:7B:BA:F3:2E:FB:80:73:BF:5B:0D
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       09EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          09DE
Signing time:             Wed 13 May 2026 01:33:09 +0000
Manifest this update:     Wed 13 May 2026 01:33:08 +0000
Manifest next update:     Fri 15 May 2026 01:33:08 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: oNs7JehtEhXfcye+VV9ffxEH8aOr2nxborFubYvko3I=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: May 13 01:33:08 2026 GMT
            Not After : May 15 01:33:08 2026 GMT
        Subject: CN=6a03d4d5-105b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:51:3f:b3:b5:86:d3:7d:ca:58:0c:cf:ee:
                    31:2b:0a:b8:5b:c6:77:e3:ab:b1:44:cb:1a:a4:4a:
                    72:a6:37:96:5a:cc:c2:34:d5:85:03:e5:37:e7:68:
                    b9:47:77:bc:f2:59:08:fc:58:70:57:fe:87:52:6c:
                    78:c1:af:de:48:8e:0d:db:8b:6e:38:4f:88:9c:f2:
                    fb:1f:1a:85:97:f9:9f:06:c2:4b:f1:26:a2:6e:98:
                    8f:a8:03:36:f6:a5:5f:f0:a7:2a:a1:d9:fc:38:38:
                    19:42:c9:aa:78:52:fc:c1:d3:02:8d:43:fe:d6:cc:
                    f6:5a:59:a5:25:f8:9d:93:64:6c:e4:4f:26:6f:dd:
                    14:6e:16:45:27:b9:71:ba:c7:cd:b9:fb:7d:73:87:
                    df:d0:ea:de:dd:38:af:6a:44:ad:d2:36:da:8f:02:
                    6a:55:30:19:68:11:d1:50:73:81:83:a1:f0:7a:ef:
                    30:10:92:f2:1c:a8:7b:51:4a:50:82:7a:2a:0e:6e:
                    78:f2:71:f6:fd:14:a5:0e:86:e2:0e:1f:a4:cd:73:
                    f5:3c:76:a7:85:98:d7:08:5b:ca:1d:99:05:75:01:
                    62:56:cb:20:ac:e6:c9:09:c4:e5:75:c9:fa:15:a3:
                    51:a4:43:01:3f:99:53:21:04:43:e2:8d:c5:61:a7:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0A:92:42:B3:9B:0A:58:DC:94:7B:BA:F3:2E:FB:80:73:BF:5B:0D
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:20:56:c1:16:ce:a7:a2:49:f6:39:bf:ab:f6:32:cc:38:7e:
         29:35:9c:a6:ad:82:48:5a:e1:89:2f:d3:7c:85:15:49:4a:61:
         44:c6:de:5a:e7:97:8d:93:49:1c:c2:a2:97:ff:e6:c0:fc:3a:
         9d:60:44:3f:6a:32:5e:cc:42:7c:2f:4b:7f:e2:c6:a2:c6:3b:
         ca:f0:ab:37:1c:cc:69:bf:85:ab:72:30:1e:e3:d5:02:8d:b1:
         71:91:33:d2:d2:49:f6:ec:6f:58:53:38:30:c5:b0:7a:b9:90:
         cf:cd:1a:96:ee:a3:2c:19:75:50:b6:84:40:67:a0:31:94:60:
         b3:97:3a:d7:f2:ba:9d:c0:d7:49:8a:e4:df:a1:55:a4:7a:1f:
         7c:7f:1d:f1:3c:b0:90:11:68:26:de:1e:3b:08:fb:c6:0e:3e:
         4f:d0:96:6e:57:52:eb:fc:f9:3d:fc:bc:22:62:12:8e:2c:d8:
         01:6f:fa:b8:db:ec:ed:23:fd:d0:9c:6d:0b:91:89:2f:13:15:
         e8:d9:ce:fe:0b:a2:6f:36:91:4b:e5:c1:3b:b0:ed:2a:ad:8f:
         24:d9:17:77:dc:2d:ba:b0:66:fe:b7:7a:62:b3:2b:4b:87:79:
         24:6e:ed:4e:ca:4c:2e:1a:84:02:f7:f4:b5:68:06:6d:b1:74:
         97:c3:5e:64
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCeowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBRjExMC8GA1UEBRMoNUNBREEzMkNGQjAwMUFCQTZFNEM5RjUyMTNEOTI4
NzY1QjE1QTMzNzAeFw0yNjA1MTMwMTMzMDhaFw0yNjA1MTUwMTMzMDhaMBgxFjAU
BgNVBAMTDTZhMDNkNGQ1LTEwNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuU1E/s7WG033KWAzP7jErCrhbxnfjq7FEyxqkSnKmN5ZazMI01YUD5Tfn
aLlHd7zyWQj8WHBX/odSbHjBr95Ijg3bi244T4ic8vsfGoWX+Z8GwkvxJqJumI+o
Azb2pV/wpyqh2fw4OBlCyap4UvzB0wKNQ/7WzPZaWaUl+J2TZGzkTyZv3RRuFkUn
uXG6x825+31zh9/Q6t7dOK9qRK3SNtqPAmpVMBloEdFQc4GDofB67zAQkvIcqHtR
SlCCeioObnjycfb9FKUOhuIOH6TNc/U8dqeFmNcIW8odmQV1AWJWyyCs5skJxOV1
yfoVo1GkQwE/mVMhBEPijcVhp/6bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAAqS
QrObCljclHu68y77gHO/Ww0wHwYDVR0jBBgwFoAUXK2jLPsAGrpuTJ9SE9kodlsV
ozcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0EzODIzOTU2Q0IyRjExRTk4OTBEMUIyN0Y4QUVBMjI4L1hLMmpM
UHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLMmpMUHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODU4OEUvQTM4MjM5NTZDQjJGMTFFOTg5MEQxQjI3RjhB
RUEyMjgvWEsyakxQc0FHcnB1VEo5U0U5a29kbHNWb3pjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDbIFbBFs6nokn2Ob+r9jLMOH4pNZym
rYJIWuGJL9N8hRVJSmFExt5a55eNk0kcwqKX/+bA/DqdYEQ/ajJezEJ8L0t/4sai
xjvK8Ks3HMxpv4WrcjAe49UCjbFxkTPS0kn27G9YUzgwxbB6uZDPzRqW7qMsGXVQ
toRAZ6AxlGCzlzrX8rqdwNdJiuTfoVWkeh98fx3xPLCQEWgm3h47CPvGDj5P0JZu
V1Lr/Pk9/LwiYhKOLNgBb/q42+ztI/3QnG0LkYkvExXo2c7+C6JvNpFL5cE7sO0q
rY8k2Rd33C26sGb+t3pisytLh3kkbu1OykwuGoQC9/S1aAZtsXSXw15k
-----END CERTIFICATE-----
Generated at Wed May 13 13:59:47 2026 by rpki-client