Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
File:                     _lkJnrBGBmU3CfmlmpxGdQcb7L0.mft (raw, json)
Hash identifier:          uW3ZAtshbYtJkd++4Fwj1IeJQ3OzkowyBFLOVFZ0CAk=
Subject key identifier:   52:62:9C:7E:E0:CC:B6:3E:97:DE:4F:60:A4:E3:47:81:7B:6B:41:EB
Authority key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD
Certificate issuer:       /CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
Certificate serial:       03FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
Manifest number:          03FE
Signing time:             Wed 13 May 2026 03:39:33 +0000
Manifest this update:     Wed 13 May 2026 03:39:32 +0000
Manifest next update:     Fri 15 May 2026 03:39:32 +0000
Files and hashes:         1: _lkJnrBGBmU3CfmlmpxGdQcb7L0.crl (hash: WUnl2TERAS57rzmeerczQd/ikQ0d+3AeQCAgNnnHsLA=)
                          2: A6CB045440CD11EEA84BD2644AD9E6FC.roa (hash: k2NQBaUwb1pqhxKitutyFUj84i7cH4npO1gBOUjSKLM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A141DAF, serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
        Validity
            Not Before: May 13 03:39:32 2026 GMT
            Not After : May 15 03:39:32 2026 GMT
        Subject: CN=6a03f274-6ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:91:2e:59:02:0b:ca:b8:7e:83:fd:cf:f7:4d:
                    96:46:53:8a:f2:4f:36:7f:c6:40:05:5f:3c:2a:cf:
                    04:48:e8:14:e0:80:99:ae:ea:e6:53:b0:92:cd:fd:
                    65:df:72:63:a5:df:35:cc:14:8e:a3:e7:95:99:20:
                    2f:2e:70:30:38:53:a5:a6:d7:ca:c4:f6:e9:79:d6:
                    9f:3a:c1:e4:73:99:9b:1b:1d:11:2e:8d:9d:89:50:
                    27:85:fe:01:ef:4e:ff:9b:d8:d0:9a:f6:18:1a:e7:
                    b8:f7:44:e5:c6:5c:7b:d0:91:90:23:ad:33:52:34:
                    33:33:dc:45:fb:6b:59:f5:c3:d3:d5:1f:c2:93:1a:
                    a6:83:f4:5e:2b:40:08:37:6c:c8:8f:f5:bd:e5:08:
                    41:5f:70:1f:91:ac:0d:10:61:ce:36:45:01:d9:40:
                    ec:85:18:38:59:cc:57:46:78:36:0d:c5:2b:68:e3:
                    bc:71:80:d4:5e:3d:90:c0:eb:33:c6:05:fb:8b:cd:
                    bd:79:a7:2c:0a:0c:ce:9e:7c:8b:7a:10:b4:3e:04:
                    ad:3e:81:8b:91:0a:40:5f:f8:3c:36:9b:5b:83:92:
                    56:d2:b9:05:09:d8:17:32:6f:82:51:14:a0:bd:cc:
                    9e:0c:7d:00:e1:a5:23:79:14:13:60:f8:b7:44:b3:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:9C:7E:E0:CC:B6:3E:97:DE:4F:60:A4:E3:47:81:7B:6B:41:EB
            X509v3 Authority Key Identifier:
                keyid:FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:ad:49:e9:ab:df:0f:f1:32:9f:a5:bf:75:51:c1:11:dd:
         c9:e2:73:c8:29:35:84:15:40:1e:4e:ac:c7:41:66:3c:88:2b:
         19:f8:5e:f5:47:00:40:dc:a4:48:db:2e:5a:b0:40:7a:48:8c:
         87:41:f4:49:09:b1:47:c2:3c:c1:20:43:e7:f8:fc:e8:c6:2d:
         7f:c8:10:47:49:08:28:71:02:03:f3:4c:b7:d3:d3:a9:0e:9a:
         68:07:58:20:6f:67:5c:0a:2e:e9:1a:b5:d1:a9:47:ff:27:d2:
         fa:b6:c2:ce:c5:9a:12:e1:0f:e5:a7:03:d6:a9:ae:56:f2:3d:
         64:d0:a2:fb:14:da:aa:8d:a4:6d:0e:fd:1c:fd:e9:11:e4:20:
         b0:13:c2:c3:71:c9:3e:a7:cf:a3:d5:67:23:87:57:d6:71:eb:
         64:2a:bb:75:77:70:be:c1:39:c1:12:4b:1b:d6:61:6d:4a:22:
         f1:e1:84:66:0c:a8:76:70:ca:f1:b2:99:6e:a5:fd:7b:14:0c:
         ae:92:54:08:e8:45:88:d5:ba:e1:b5:fc:98:a9:60:2d:c1:b5:
         b9:fb:74:de:31:35:ba:44:e8:ac:9a:7c:7e:9e:e7:67:8a:e1:
         b5:66:71:85:e2:f4:44:b3:6c:b1:c6:3e:41:63:f8:b4:41:34:
         52:78:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:21 2026 by rpki-client