Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
File:                     2WACNlD1TrS44dw0q9RZ9QJw140.mft (raw, json)
Hash identifier:          jsDU3E4tUMkoMPU8ZoT4mY0U5RdPhf8SzYYijV6Ccqc=
Subject key identifier:   14:A1:C4:1D:AC:24:E7:7F:BD:B2:33:38:26:92:B0:37:57:9E:D8:D6
Authority key identifier: D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
Certificate issuer:       /CN=F36B9A81AF/serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
Certificate serial:       0314
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
Manifest number:          0313
Signing time:             Tue 12 May 2026 04:05:33 +0000
Manifest this update:     Tue 12 May 2026 04:05:32 +0000
Manifest next update:     Thu 14 May 2026 04:05:32 +0000
Files and hashes:         1: 2WACNlD1TrS44dw0q9RZ9QJw140.crl (hash: hJFncWOwBqZo0NPYsFCIh/+IJK2jYVS9i6+3bjxzU+E=)
                          2: 31539876F1A311EEAC1F355D775412E6.roa (hash: j6M+6W88movOdd6zMZWbEb9mu+RhA+HSxS5xxIDt/qU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 04:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9A81AF, serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
        Validity
            Not Before: May 12 04:05:32 2026 GMT
            Not After : May 14 04:05:32 2026 GMT
        Subject: CN=6a02a70d-3d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:4d:c6:e5:17:5f:bc:a7:af:f5:e2:75:4c:
                    91:78:ef:c5:b7:05:8e:a9:f3:d6:c6:77:28:2d:cd:
                    c1:9b:ce:41:a4:e5:a1:e2:17:ee:58:85:be:85:19:
                    15:ce:f8:30:fd:ea:e9:85:bd:8c:59:83:5a:fa:f7:
                    43:ec:7e:2e:92:90:c0:e1:dd:37:ee:9e:8a:2a:11:
                    9f:b8:b9:39:27:c1:4c:fa:99:8e:55:78:79:c3:ba:
                    a5:66:d1:ca:08:ff:da:1f:ee:b9:31:fb:14:c5:9b:
                    95:fc:a5:f4:a2:85:0f:15:fe:e0:ea:d4:9c:31:62:
                    02:4b:7b:77:f2:af:92:e6:18:38:62:4a:19:83:8d:
                    23:95:4d:04:ee:4d:a6:f4:ff:bd:a5:30:4b:31:ac:
                    d7:29:b0:c8:75:e9:6e:1c:6c:ac:2e:72:25:94:0d:
                    57:1d:05:b6:34:08:d7:f7:d0:29:72:44:67:fb:b2:
                    5a:c2:ad:7c:8a:d9:18:97:b8:4e:9b:ea:e8:e1:a2:
                    d4:99:e2:2f:45:a6:34:89:fa:74:18:bc:a0:d1:d2:
                    e2:cb:a8:8e:7b:f9:f1:97:f2:00:bc:3a:7d:f7:0b:
                    71:a2:b1:8e:c7:c9:77:7c:3b:eb:ea:3a:a8:d6:24:
                    ef:9d:27:7f:1a:d7:39:c7:a7:23:a9:39:9f:09:71:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A1:C4:1D:AC:24:E7:7F:BD:B2:33:38:26:92:B0:37:57:9E:D8:D6
            X509v3 Authority Key Identifier:
                keyid:D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f4:4f:d7:51:96:81:63:b1:2b:83:8b:e7:a4:0e:78:fb:cf:
         d7:1b:db:b9:be:9c:31:89:05:d4:d4:9e:83:63:b3:b1:c2:3f:
         5e:f0:1b:32:88:79:16:e1:c5:42:8c:ab:20:52:83:b9:cc:d8:
         7e:7a:bc:7a:76:6d:22:6c:68:ab:3b:d4:52:bd:80:47:e7:5f:
         94:da:7a:0e:c6:29:84:96:69:f5:09:79:9c:a3:fb:2c:2a:68:
         b3:03:d2:37:a0:c2:d4:df:fa:d5:64:54:7c:4e:bd:15:7a:69:
         fb:47:0d:39:53:0e:18:78:88:97:bc:70:1f:b1:9d:3d:01:4e:
         a6:c5:82:6e:1e:b6:8c:e1:c6:1a:44:2d:60:41:a7:25:15:55:
         e6:a9:e7:da:d5:8e:0e:5f:12:e3:6f:04:bc:7e:d0:28:1c:ee:
         47:13:e1:b9:35:03:b2:5b:62:38:b9:73:98:2d:d6:9c:d9:b6:
         e3:99:37:f8:d3:50:bd:ca:8a:0e:e6:e0:04:79:6f:75:01:a9:
         24:f1:86:da:b6:63:6b:a4:6e:aa:e2:6b:74:16:da:e5:0f:ef:
         24:8f:83:e3:80:e0:c1:fa:a0:4e:e2:7d:2c:28:84:1d:4b:9d:
         96:3c:24:7d:57:c8:4a:4e:4f:94:e1:da:03:b2:5e:c4:0b:50:
         3e:d2:f3:b1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlBODFBRjExMC8GA1UEBRMoRDk2MDAyMzY1MEY1NEVCNEI4RTFEQzM0QUJENDU5
RjUwMjcwRDc4RDAeFw0yNjA1MTIwNDA1MzJaFw0yNjA1MTQwNDA1MzJaMBgxFjAU
BgNVBAMTDTZhMDJhNzBkLTNkNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzVE3G5RdfvKev9eJ1TJF478W3BY6p89bGdygtzcGbzkGk5aHiF+5Yhb6F
GRXO+DD96umFvYxZg1r690Psfi6SkMDh3TfunooqEZ+4uTknwUz6mY5VeHnDuqVm
0coI/9of7rkx+xTFm5X8pfSihQ8V/uDq1JwxYgJLe3fyr5LmGDhiShmDjSOVTQTu
Tab0/72lMEsxrNcpsMh16W4cbKwuciWUDVcdBbY0CNf30ClyRGf7slrCrXyK2RiX
uE6b6ujhotSZ4i9FpjSJ+nQYvKDR0uLLqI57+fGX8gC8On33C3GisY7HyXd8O+vq
OqjWJO+dJ38a1znHpyOpOZ8JcSoTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFKHE
Hawk53+9sjM4JpKwN1ee2NYwHwYDVR0jBBgwFoAU2WACNlD1TrS44dw0q9RZ9QJw
140wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5QTgxLzBCMjdDMEYyRjFBMTExRUVBNDhGQjY0Qzc3NTQxMkU2LzJXQUNO
bEQxVHJTNDRkdzBxOVJaOVFKdzE0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJXQUNObEQxVHJTNDRkdzBxOVJaOVFKdzE0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjlBODEvMEIyN0MwRjJGMUExMTFFRUE0OEZCNjRDNzc1
NDEyRTYvMldBQ05sRDFUclM0NGR3MHE5Ulo5UUp3MTQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBl9E/XUZaBY7Erg4vnpA54+8/XG9u5
vpwxiQXU1J6DY7Oxwj9e8BsyiHkW4cVCjKsgUoO5zNh+erx6dm0ibGirO9RSvYBH
51+U2noOximElmn1CXmco/ssKmizA9I3oMLU3/rVZFR8Tr0Vemn7Rw05Uw4YeIiX
vHAfsZ09AU6mxYJuHraM4cYaRC1gQaclFVXmqefa1Y4OXxLjbwS8ftAoHO5HE+G5
NQOyW2I4uXOYLdac2bbjmTf401C9yooO5uAEeW91Aakk8YbatmNrpG6q4mt0Ftrl
D+8kj4PjgODB+qBO4n0sKIQdS52WPCR9V8hKTk+U4doDsl7EC1A+0vOx
-----END CERTIFICATE-----
Generated at Wed May 13 07:16:56 2026 by rpki-client