Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          n/fYzhumi+0VesEvTmamr2XH1XcuNBu2vlDlOka1NYQ=
Subject key identifier:   6B:4F:D0:E7:F2:62:3A:54:7A:AC:A7:15:2D:28:5C:1E:1A:41:68:5C
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       0329
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          0328
Signing time:             Wed 13 May 2026 04:05:42 +0000
Manifest this update:     Wed 13 May 2026 04:05:41 +0000
Manifest next update:     Fri 15 May 2026 04:05:41 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: oaxmco4kpPTZlZVPCzgIFv/8VD1zViqqg9uis4DvfAs=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 04:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: May 13 04:05:41 2026 GMT
            Not After : May 15 04:05:41 2026 GMT
        Subject: CN=6a03f896-be25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:72:3c:cd:45:85:2f:75:2c:9c:be:35:5c:
                    2e:65:c7:34:29:7d:7f:d5:1a:56:89:7b:78:eb:a4:
                    2e:1e:d6:96:47:60:47:7f:5b:1e:a3:ff:9e:1d:1e:
                    0d:71:1d:3a:2c:59:44:ba:8e:b4:b8:3f:52:c3:27:
                    fe:af:1a:40:ef:5c:8e:31:a9:d1:1b:58:21:01:98:
                    11:3d:1f:fe:3e:d6:5b:f7:ed:c3:88:a7:c4:ec:dd:
                    98:4c:d2:fb:f3:cb:11:8d:fb:3b:21:6c:6c:26:22:
                    28:e4:5c:b4:cc:2a:31:77:9d:92:2b:36:02:28:7a:
                    70:8e:57:60:8d:5a:bf:e0:1f:96:ee:33:3b:db:39:
                    5d:f9:fe:06:61:2d:79:19:31:67:2c:9a:14:7e:5d:
                    ac:a1:a2:d5:d1:60:c1:7f:fd:ac:2f:d9:99:23:52:
                    48:32:bb:ad:5c:bd:e2:d4:18:8f:8f:ff:c1:66:41:
                    5d:9e:52:4e:75:9c:a5:12:32:6d:93:82:c4:da:4a:
                    29:42:77:7d:ce:c2:2c:46:57:4a:b6:98:33:53:e5:
                    91:26:2d:f7:ae:de:af:3b:b9:ef:36:bb:a6:0e:96:
                    bc:c7:1b:72:0e:4e:de:2a:df:ad:23:9e:46:b6:7a:
                    f1:a2:c3:19:c9:9c:13:60:45:dd:b2:39:03:de:76:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:D0:E7:F2:62:3A:54:7A:AC:A7:15:2D:28:5C:1E:1A:41:68:5C
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:61:95:76:8f:5d:fa:06:93:57:e0:e2:1c:f5:b2:5a:b1:
         cc:bd:77:b3:e2:c5:b5:7b:8c:9f:47:e3:12:e4:41:fe:1f:b8:
         7b:f6:44:de:4c:f1:90:99:16:22:48:d5:75:fc:1c:e8:af:59:
         4d:ac:8a:30:47:58:ff:28:bf:35:a1:64:2f:16:38:c3:9a:00:
         81:0d:26:54:2b:99:bd:3a:6a:15:e4:50:70:0e:65:c7:9e:05:
         8e:16:6c:f2:24:95:f7:88:1f:c7:ee:bd:b6:5c:91:f1:0c:dc:
         1a:68:5b:60:d3:c4:8e:db:9a:b6:e8:97:ed:75:cf:fb:72:48:
         07:cf:50:7a:0b:c6:62:18:d8:ec:77:e4:7b:60:86:9e:05:b8:
         03:ab:71:a0:57:96:a6:19:9d:f6:02:5a:98:8a:9c:89:b4:79:
         21:d6:70:18:67:6f:ae:0e:18:5e:cb:08:c5:b0:f2:9b:c8:bb:
         49:a8:c8:98:d0:2a:e0:fc:e5:ae:65:89:db:04:d2:fb:2e:8a:
         7e:bb:da:d1:8e:1d:a0:9d:72:ec:42:f3:38:ca:16:0b:b8:82:
         8f:15:1e:80:41:a2:e7:30:0b:e0:f1:2b:e5:16:ca:7f:33:f4:
         c3:12:3f:b2:12:77:eb:4a:ef:5e:da:23:06:0f:ee:9f:86:9d:
         e0:86:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:04 2026 by rpki-client