Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          2cBYcD/67MhwWuiBXgO0ZPrPMzjBndL3lU/GCq6+JxU=
Subject key identifier:   66:76:FB:A9:61:D3:E8:95:CE:DD:1B:16:9A:50:D6:B6:E4:B6:53:DF
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0FE1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0FDF
Signing time:             Wed 13 May 2026 00:51:25 +0000
Manifest this update:     Wed 13 May 2026 00:51:24 +0000
Manifest next update:     Fri 15 May 2026 00:51:24 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: abcwvb5ZM9VHvQyv07SFMHfnYSfMsiRK6AWdeubnbd8=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4065 (0xfe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: May 13 00:51:24 2026 GMT
            Not After : May 15 00:51:24 2026 GMT
        Subject: CN=6a03cb0d-ab80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:c2:46:2e:e3:d3:a5:a0:25:0f:b9:5f:9f:
                    a3:82:65:69:59:1c:2a:6c:ac:e8:48:87:93:6a:2b:
                    53:09:f1:6a:1e:65:ba:ee:fb:50:ed:08:e8:b9:d4:
                    3c:98:f0:9e:60:ac:12:91:c6:93:06:2e:bc:47:ed:
                    1e:6e:9c:aa:31:93:bd:0e:fb:5f:96:9b:08:bc:d7:
                    ac:b7:08:4a:45:d4:e1:ff:64:8b:5e:30:58:99:9e:
                    20:e9:62:95:2a:c1:58:65:ec:60:c1:55:12:45:46:
                    c6:70:3b:f4:2b:8b:23:ed:e6:b7:85:c7:67:b7:7b:
                    86:ec:5f:ab:22:e1:f1:1c:7e:f1:98:f1:a6:1d:d4:
                    a6:26:7d:67:19:cd:eb:40:73:bf:25:d9:7d:c0:eb:
                    7a:58:0c:d1:60:5e:07:e7:60:33:04:e2:5e:2d:4a:
                    b2:aa:d0:2a:c7:6f:01:91:c8:48:c3:07:4f:96:e9:
                    cd:82:77:58:a7:02:1a:7a:49:61:18:c2:49:32:71:
                    16:72:16:75:61:a5:a6:aa:36:be:8f:2f:65:a8:2f:
                    49:4e:e5:ad:25:85:d9:d3:73:38:06:44:b4:30:89:
                    ee:a8:52:77:60:a1:22:2b:2d:f9:fa:34:87:c4:40:
                    70:00:f1:08:29:89:f7:c8:bc:9c:9b:c9:ff:a7:7c:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:FB:A9:61:D3:E8:95:CE:DD:1B:16:9A:50:D6:B6:E4:B6:53:DF
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:77:d4:2c:0f:c9:55:52:49:62:09:84:ef:c7:26:0b:96:a4:
         0c:25:5c:4c:f8:25:f7:dc:25:b7:ea:26:fa:95:4c:78:1b:a1:
         d7:c3:da:c2:91:61:b0:8e:96:88:4a:cb:45:d6:27:97:b0:b5:
         cd:9f:52:bf:c7:8a:05:9c:41:fd:68:e5:6f:53:7e:88:15:d8:
         95:06:d3:8d:c4:85:81:a5:9e:3f:b7:f5:9f:3a:78:ed:75:bb:
         71:d9:57:0c:fb:15:aa:48:ec:ff:70:ec:1c:a3:88:9f:d4:8f:
         26:85:21:b3:a5:fe:f1:c5:94:51:21:c2:c5:e5:7f:5e:31:b6:
         67:2b:51:1f:21:a0:9c:22:b7:e2:67:89:03:3c:dd:25:a9:2c:
         e8:94:12:30:12:4d:c4:00:03:a8:63:3e:04:b9:11:f8:98:0d:
         7e:c0:ad:f9:40:b3:1d:4c:36:f0:0e:0b:ad:94:0e:21:1a:39:
         1e:f5:8c:5e:12:19:df:f0:08:45:43:70:1c:8a:64:1c:cb:6e:
         ff:02:de:d1:5d:2b:9c:e2:33:65:c0:90:88:56:ad:bf:5f:bc:
         c7:a4:a5:2d:00:d8:31:02:75:4d:0b:05:37:df:2b:a1:b1:cb:
         9f:db:ac:e5:8a:43:ac:12:49:c3:7c:1a:db:c8:25:0a:42:d0:
         fe:ca:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:32:24 2026 by rpki-client