Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          y7XO0zXcB0GqCZEYJChkvg4IQA18IvpHq4IU6m5oEB8=
Subject key identifier:   87:D3:E4:FC:43:8B:94:19:C7:74:41:90:DC:0F:44:99:38:E4:5A:90
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       06AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          06AA
Signing time:             Wed 13 May 2026 02:29:01 +0000
Manifest this update:     Wed 13 May 2026 02:29:00 +0000
Manifest next update:     Fri 15 May 2026 02:29:00 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: 9YhQBO+dZTvUhgDiVoTAvQson/iJc4xxa2agZN+3STQ=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 02:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: May 13 02:29:00 2026 GMT
            Not After : May 15 02:29:00 2026 GMT
        Subject: CN=6a03e1ed-0027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:e8:0a:3a:de:64:0f:71:64:e4:62:60:f2:
                    57:4b:19:7b:14:2a:87:9d:1d:3c:71:ec:39:12:e7:
                    da:b1:91:ec:dc:42:9c:9e:0a:06:5d:07:53:f6:c7:
                    95:85:6c:c4:e4:b5:d8:40:ea:cb:3d:4a:d6:83:2a:
                    5c:d7:32:dc:01:a0:43:73:42:1f:68:0d:60:89:12:
                    98:69:ad:61:31:2d:2b:23:0f:51:c6:b2:ba:d5:bd:
                    1b:0c:b3:c2:b6:2a:01:15:41:5d:e6:5a:2e:b2:da:
                    bb:13:8f:e1:62:20:20:d5:ec:39:08:91:9e:eb:f3:
                    f5:82:33:2b:20:ab:39:9a:99:0c:75:47:e0:50:81:
                    d9:fb:7e:70:86:9c:2e:08:99:3d:9e:2c:01:e1:ee:
                    c6:f2:31:b5:9f:1f:0f:42:b1:08:e5:ff:54:18:be:
                    1d:0f:07:dc:1c:ff:50:f9:2a:8d:d7:ad:6b:ca:03:
                    80:41:70:83:23:fb:5d:a5:24:0b:10:79:da:a6:af:
                    21:63:59:04:ad:18:ac:5d:15:f1:28:7b:be:fa:2d:
                    36:1f:22:da:d7:86:37:96:3c:e0:39:01:1c:0d:9f:
                    11:d7:ff:73:ee:f5:c7:a4:91:ab:b3:95:48:ef:97:
                    51:be:d8:ea:dd:67:a6:7e:39:a5:73:34:e9:f3:06:
                    56:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D3:E4:FC:43:8B:94:19:C7:74:41:90:DC:0F:44:99:38:E4:5A:90
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e8:db:86:0a:b5:e6:d3:78:58:ea:cd:a8:ce:f8:28:5c:08:
         34:90:75:84:7b:a1:0a:36:99:83:25:d6:54:50:b8:3a:95:64:
         75:5f:8c:20:1d:0e:e8:99:ed:9f:7f:26:bd:7d:79:5d:23:ee:
         50:fe:88:51:84:02:f0:9d:18:7d:a3:ef:6f:bb:61:d4:db:18:
         c3:aa:dc:a7:cc:ff:cb:86:03:12:3c:e9:e3:26:af:e8:7e:52:
         58:8c:c3:1d:b3:af:d3:92:da:11:07:92:7d:a5:e4:68:6b:00:
         97:87:8a:26:9f:71:89:07:44:6a:5f:61:02:a3:7d:8d:db:aa:
         19:bd:ef:1a:89:2b:0d:9b:b2:2b:fe:5b:98:7e:15:a9:dc:f2:
         5c:80:fd:ff:48:ba:81:10:12:d3:c2:a3:75:83:7c:7a:e2:fc:
         5a:77:c6:96:71:d2:79:df:c2:4b:c3:08:66:59:db:b4:d8:7a:
         28:0b:4b:1e:48:f0:c6:f2:85:02:f4:fe:8c:88:13:f7:07:6d:
         d5:8f:fe:12:db:e0:b5:a4:23:cc:75:70:d2:49:9f:a6:23:09:
         08:67:8d:8b:b0:92:f0:10:a2:91:46:c2:57:d5:c2:9a:86:b1:
         39:2e:cd:42:4a:4b:e0:28:39:0e:66:7e:55:63:a6:3a:d3:6c:
         46:a6:3e:86
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUQ0OEFBRjExMC8GA1UEBRMoQkJGRjI1MjQwQjIwN0Y5QkFDQzVDQjk1NEE2MjMw
OUFCQkE1MzY1RDAeFw0yNjA1MTMwMjI5MDBaFw0yNjA1MTUwMjI5MDBaMBgxFjAU
BgNVBAMTDTZhMDNlMWVkLTAwMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGx+gKOt5kD3Fk5GJg8ldLGXsUKoedHTxx7DkS59qxkezcQpyeCgZdB1P2
x5WFbMTktdhA6ss9StaDKlzXMtwBoENzQh9oDWCJEphprWExLSsjD1HGsrrVvRsM
s8K2KgEVQV3mWi6y2rsTj+FiICDV7DkIkZ7r8/WCMysgqzmamQx1R+BQgdn7fnCG
nC4ImT2eLAHh7sbyMbWfHw9CsQjl/1QYvh0PB9wc/1D5Ko3XrWvKA4BBcIMj+12l
JAsQedqmryFjWQStGKxdFfEoe776LTYfItrXhjeWPOA5ARwNnxHX/3Pu9cekkauz
lUjvl1G+2OrdZ6Z+OaVzNOnzBlZnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUh9Pk
/EOLlBnHdEGQ3A9EmTjkWpAwHwYDVR0jBBgwFoAUu/8lJAsgf5usxcuVSmIwmrul
Nl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlENDhBL0M0MDk3REQwMzhENjExRUNBNTAxMjQ3REQ4QTAxNENFL3VfOGxK
QXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VfOGxKQXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUQ0OEEvQzQwOTdERDAzOEQ2MTFFQ0E1MDEyNDdERDhB
MDE0Q0UvdV84bEpBc2dmNXVzeGN1VlNtSXdtcnVsTmwwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCz6NuGCrXm03hY6s2ozvgoXAg0kHWE
e6EKNpmDJdZUULg6lWR1X4wgHQ7ome2ffya9fXldI+5Q/ohRhALwnRh9o+9vu2HU
2xjDqtynzP/LhgMSPOnjJq/oflJYjMMds6/TktoRB5J9peRoawCXh4omn3GJB0Rq
X2ECo32N26oZve8aiSsNm7Ir/luYfhWp3PJcgP3/SLqBEBLTwqN1g3x64vxad8aW
cdJ538JLwwhmWdu02HooC0seSPDG8oUC9P6MiBP3B23Vj/4S2+C1pCPMdXDSSZ+m
IwkIZ42LsJLwEKKRRsJX1cKahrE5Ls1CSkvgKDkOZn5VY6Y602xGpj6G
-----END CERTIFICATE-----
Generated at Wed May 13 12:56:53 2026 by rpki-client