Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          S92RW3AdchfXeYBoFu07BWTvV3ZbgmbQojIJIw3gHs0=
Subject key identifier:   1F:EB:C8:31:20:BA:1B:BD:CA:8C:5E:CE:18:17:BA:95:72:9E:A5:37
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       0827
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          0821
Signing time:             Wed 13 May 2026 01:55:22 +0000
Manifest this update:     Wed 13 May 2026 01:55:21 +0000
Manifest next update:     Fri 15 May 2026 01:55:21 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: NazZFBR+oF5r8fwijOiLlSol7vbFvmfL0BPv6mrGf94=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: May 13 01:55:21 2026 GMT
            Not After : May 15 01:55:21 2026 GMT
        Subject: CN=6a03da0a-b13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:09:92:6f:27:18:dc:e5:64:19:19:00:99:
                    c4:27:43:d0:a2:74:08:dd:41:68:f8:5e:11:03:31:
                    0d:f2:a7:10:bf:0e:cd:b7:06:70:9f:1d:26:3c:9f:
                    cf:ef:1b:5c:bb:12:82:48:66:78:73:dd:95:b4:a6:
                    cf:19:8e:03:92:c7:71:a8:e6:c8:48:da:d9:39:44:
                    88:04:cb:c6:71:05:08:0e:fc:27:ca:8b:24:2a:ce:
                    61:9f:39:a6:33:e2:57:ea:8c:f8:c8:7f:8f:36:30:
                    29:50:17:df:8a:35:b6:53:78:1d:22:92:4e:a9:5b:
                    4c:da:d5:1a:6e:2f:ac:67:c8:79:f1:be:0e:5f:6d:
                    f0:87:d5:cd:7b:60:0a:ba:b0:96:3a:ae:79:32:56:
                    ff:ed:7a:c4:4e:28:40:f7:6e:ed:ca:79:e6:45:54:
                    c3:bb:13:e4:cd:c9:dc:e1:88:28:74:05:0a:23:fe:
                    40:00:dd:e4:ef:af:90:d0:42:61:0a:92:4c:30:e5:
                    a1:de:65:36:f0:5f:70:34:c8:08:06:9c:61:26:3a:
                    b6:d8:47:56:ae:f5:c7:87:fa:5f:05:19:28:07:71:
                    0e:ae:4f:46:bd:42:db:30:fd:f3:42:65:3c:e9:d3:
                    e4:0a:d3:98:55:27:24:41:27:7b:0f:3a:c8:1c:97:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:C8:31:20:BA:1B:BD:CA:8C:5E:CE:18:17:BA:95:72:9E:A5:37
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:4c:f1:cb:79:53:0a:9b:f2:d8:50:9a:a8:04:0a:69:b4:
         ab:dc:42:8e:ca:81:69:8d:cf:47:5d:5f:62:a6:9b:68:c4:55:
         45:4a:e5:aa:ea:10:90:39:40:12:51:6c:bf:26:1f:7e:54:17:
         79:45:ef:bc:9d:f4:70:41:f5:74:e0:30:3e:2d:55:dc:01:fc:
         4e:5b:a4:6e:b6:8a:a8:b5:99:15:36:86:95:85:5d:86:64:e9:
         f5:9c:0b:63:84:91:6e:77:c2:8f:fe:87:5f:74:4b:d1:fe:b3:
         41:0d:f9:6b:13:28:e4:8d:fe:40:bd:31:f8:77:61:0e:5d:7c:
         04:71:3c:2b:c3:b7:31:9b:13:10:b3:c3:5a:f5:5d:59:dd:17:
         c1:99:d3:c1:ff:53:64:6a:40:bd:75:bc:bc:c7:2b:72:0f:58:
         cd:92:b5:ef:ed:8d:8a:f6:45:6c:f7:52:9f:c3:6b:c0:66:49:
         8d:4e:ab:98:4c:49:b9:fd:ea:ad:9b:78:65:82:50:36:94:88:
         ab:f8:6e:69:3f:78:fa:cb:80:7b:2d:6d:67:ff:cf:a6:a2:28:
         6e:d8:3a:61:86:fa:46:ef:02:e2:d7:40:73:87:6e:98:4e:59:
         27:93:f4:b4:84:c3:09:cf:f9:e5:7c:61:38:3d:d5:74:6f:80:
         45:07:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:43 2026 by rpki-client