Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
File:                     NewylCgvp6NUePgvkJSwP-Jgb7Y.mft (raw, json)
Hash identifier:          baQeAcdK+3IjYBtaJU50tai1Z9jLVWQuZoLF4zu8Lbc=
Subject key identifier:   11:D7:9B:C5:E4:5F:17:7A:34:C7:58:30:81:9E:16:D6:E7:B2:51:58
Authority key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
Certificate issuer:       /CN=F36AB1CDAF/serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
Certificate serial:       08EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
Manifest number:          08E8
Signing time:             Wed 13 May 2026 01:44:14 +0000
Manifest this update:     Wed 13 May 2026 01:44:13 +0000
Manifest next update:     Fri 15 May 2026 01:44:13 +0000
Files and hashes:         1: NewylCgvp6NUePgvkJSwP-Jgb7Y.crl (hash: d+Hqh2u3Qnu3zdOOQgNhcB6H5qz/tcz2Surukte/9Wc=)
                          2: 274D32BAA87211F0A513AFDCDAE4EC9C.roa (hash: dMmC61qu86t31B1siiWb387Uypaf5odQkXtxFjVGQaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB1CDAF, serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
        Validity
            Not Before: May 13 01:44:13 2026 GMT
            Not After : May 15 01:44:13 2026 GMT
        Subject: CN=6a03d76e-d585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:57:99:dc:55:f7:9e:5b:e3:29:f1:04:3d:
                    a7:3c:55:09:53:52:d9:04:cc:9c:05:01:a9:90:06:
                    b7:5c:d6:60:c4:56:ba:c9:51:09:4b:b7:9c:cc:fa:
                    93:7c:89:49:b6:7c:5c:7a:ab:b4:54:07:78:4d:7f:
                    e6:fb:71:08:87:08:36:9e:4b:a2:48:8f:7e:30:a6:
                    0f:46:26:d9:bb:6c:b9:db:50:8a:24:9a:a9:5c:e3:
                    0a:cd:69:f0:25:a6:ce:58:f0:2c:bf:54:2b:d5:d3:
                    20:e1:47:53:64:89:91:b2:7d:b5:57:e3:ce:59:81:
                    fc:f1:c6:42:d4:a9:a5:3d:fe:81:b4:e5:96:ca:23:
                    b7:f1:96:63:31:2a:3c:4f:20:3f:f0:7c:ad:08:74:
                    86:ad:b7:50:c6:b5:72:04:b1:6a:1e:d5:56:3c:eb:
                    c1:74:c1:bf:ef:ec:1d:a7:da:d1:d5:c3:87:35:14:
                    79:87:50:2f:b9:a3:a1:8a:02:6b:5e:ad:1c:91:cf:
                    db:20:e5:43:b3:0f:b2:3d:fb:12:a8:66:9f:8f:40:
                    f4:0e:3c:95:ed:ff:85:5f:83:55:fe:23:b2:aa:c2:
                    f8:5a:57:9d:a3:06:0e:3b:2f:b3:62:fb:bd:e1:36:
                    b8:c2:ad:0d:c3:37:89:26:01:b9:40:29:ea:80:ac:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:9B:C5:E4:5F:17:7A:34:C7:58:30:81:9E:16:D6:E7:B2:51:58
            X509v3 Authority Key Identifier:
                keyid:35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:62:d9:15:60:48:0c:f5:2a:69:9a:d6:f4:55:08:ae:28:c8:
         a7:c1:b4:28:ed:93:6f:49:dd:d7:f8:9c:58:14:47:54:e4:2e:
         07:48:73:29:95:5d:54:b5:52:91:4f:89:17:2d:14:b2:13:c7:
         84:5c:f4:d3:c8:27:2a:c6:58:b1:67:4c:2c:60:fd:85:ea:5e:
         5f:33:79:9c:e2:7f:fd:d0:e1:3e:04:fd:cb:66:8c:62:d4:e9:
         b0:31:3c:17:5c:54:88:42:ec:fe:4e:30:2a:cc:8e:9b:91:00:
         4e:cf:9f:28:9f:b2:56:32:06:07:0f:02:b3:21:03:53:4d:3f:
         65:57:c2:1c:78:3b:a0:38:f0:62:78:18:9c:11:55:79:9b:8d:
         c2:3e:63:55:1e:a6:34:37:d5:81:2d:64:85:97:f1:bf:da:50:
         b3:e8:6c:db:14:89:65:ec:f5:0d:98:a8:b9:1f:11:e7:bc:44:
         cf:75:e0:e1:a7:01:60:99:dc:b4:c5:ef:6e:73:7d:df:34:ff:
         97:68:51:63:3b:65:82:62:c2:d6:a6:d5:7f:02:07:1e:0f:6f:
         55:cb:10:10:20:fe:2c:18:1c:5d:0a:cd:24:e8:c7:ac:df:18:
         04:e0:58:7c:d2:b7:39:47:79:cd:a7:bb:92:e0:6b:9d:d3:13:
         7e:f8:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:31 2026 by rpki-client