Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          ruMx1KJvZEeVcRtuja3CVMb8BvJ0YRPMdPTFsLd+6I4=
Subject key identifier:   B5:C5:A6:D6:98:CE:CF:A4:DA:13:30:59:4F:B0:DF:27:42:B3:7E:A8
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       023E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          023D
Signing time:             Wed 13 May 2026 04:37:29 +0000
Manifest this update:     Wed 13 May 2026 04:37:28 +0000
Manifest next update:     Fri 15 May 2026 04:37:28 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: aCG7D8FW6G71sGaviMVXgIDc7wuzWI7rYIXyEFtTpwA=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 04:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: May 13 04:37:28 2026 GMT
            Not After : May 15 04:37:28 2026 GMT
        Subject: CN=6a040009-6462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:96:10:6a:55:5c:ca:84:5b:17:a2:95:15:
                    1e:50:28:fe:cb:49:63:b4:8e:63:ab:15:c9:b2:80:
                    10:f5:90:50:a4:f6:b3:18:a6:6f:f4:ab:83:c3:6e:
                    7f:78:de:06:ab:7f:20:48:78:d0:cf:26:01:6a:43:
                    0d:53:41:da:54:ce:a7:1a:40:53:68:0e:45:c0:f4:
                    32:5e:28:9a:a9:cc:6c:8d:98:ae:08:df:5a:bf:4b:
                    cb:a6:65:7e:85:9f:f4:dc:27:22:c3:e5:75:cb:65:
                    b2:a5:ea:a3:d4:78:89:e6:09:34:22:40:61:4f:64:
                    b8:8e:4a:c3:3a:07:e6:d7:1a:18:21:b4:3c:c4:e0:
                    71:88:a6:36:51:b0:d7:4f:1f:b4:4b:21:c5:07:03:
                    5e:53:4b:ab:f2:19:0d:49:d6:cd:2a:3a:b2:23:1d:
                    9d:f8:b9:bc:10:45:84:08:eb:ec:da:d2:d5:02:10:
                    e7:8b:2d:90:48:2b:b5:56:c6:1d:3a:98:ba:6a:68:
                    84:37:06:2d:74:b4:29:54:2a:66:74:a7:9b:ce:b3:
                    fe:30:d9:07:ea:df:6a:7d:56:16:d0:85:39:0e:a9:
                    00:1c:2f:53:40:e2:f7:b5:d7:fd:c1:59:8d:28:10:
                    55:29:35:bf:4e:97:4e:db:27:66:bc:5f:b5:6e:08:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C5:A6:D6:98:CE:CF:A4:DA:13:30:59:4F:B0:DF:27:42:B3:7E:A8
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:89:eb:e4:fc:05:3e:f7:4e:83:3e:3d:ba:4a:a9:e9:84:3a:
         0a:59:12:43:c2:d3:5f:f1:af:f7:7f:74:6e:4f:5c:37:b2:39:
         db:75:b7:fa:fc:6c:71:03:1d:75:0a:ef:5a:f7:10:50:ce:fd:
         8b:27:a0:16:3b:98:e2:b1:6b:c9:22:64:b3:2a:6d:fb:7b:83:
         ef:a6:da:51:21:d0:d1:52:c3:dd:1b:52:75:39:89:ef:03:3c:
         49:81:58:b6:f9:74:ca:e6:6e:bc:ad:35:78:ae:f5:80:1f:4c:
         93:22:d9:e4:5d:d0:be:94:a3:f4:68:ec:65:a0:74:0f:3a:01:
         6a:5b:61:53:a6:59:db:96:f2:ad:8c:33:d1:5f:05:01:25:88:
         2a:cf:37:0b:5a:0d:b4:9b:9f:ac:c7:c8:16:5f:87:7e:17:69:
         00:87:f1:73:7f:1e:f5:45:c3:87:ca:cd:b9:33:55:c6:99:1d:
         45:82:bb:d3:51:eb:f1:a1:a4:86:0d:29:ba:37:18:34:71:81:
         b8:42:f3:c9:cf:f5:5d:86:29:83:4a:f1:2c:64:96:16:80:3d:
         eb:f5:04:ac:c5:93:4d:24:29:e7:cf:52:d3:b0:56:cb:80:61:
         40:77:fc:9f:db:9a:06:92:fe:fe:05:5e:22:d7:eb:ff:8d:11:
         97:e3:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:06:09 2026 by rpki-client