Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          WnyMLdVZFyukXji+rCf85JHl1eSvVBlkrbalKZsWxTM=
Subject key identifier:   8F:C1:B7:57:7C:87:61:E2:03:CB:13:EB:0F:BF:D3:80:0E:47:84:AD
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       025D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          0259
Signing time:             Tue 12 May 2026 04:33:03 +0000
Manifest this update:     Tue 12 May 2026 04:33:03 +0000
Manifest next update:     Thu 14 May 2026 04:33:03 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: JVttGLQ1YdOta8m1CyWvoBsZyIE8UZRsUnQeEKdEeuE=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: May 12 04:33:03 2026 GMT
            Not After : May 14 04:33:03 2026 GMT
        Subject: CN=6a02ad7f-939f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:3b:24:6f:20:46:92:81:2d:cd:0e:2c:06:
                    18:36:d4:30:75:7c:10:2f:78:6c:f0:ea:1f:c4:69:
                    ed:7d:da:ee:1e:c2:a0:08:4a:17:c8:1b:97:f7:1e:
                    0e:3d:04:51:37:2d:87:7c:ee:be:2c:90:c3:78:f0:
                    c0:dd:59:9e:ca:97:a7:02:64:94:fb:2b:df:e9:d8:
                    20:55:ab:de:cb:cd:f5:d4:45:bb:c0:3a:e1:13:c4:
                    86:5c:d6:e1:c7:2e:10:19:9c:a8:6a:89:47:7a:13:
                    3d:18:8e:c8:d8:2f:e2:da:a3:0a:33:f8:db:f6:40:
                    4a:e3:56:00:80:22:20:fe:ad:d0:5e:ed:ea:8a:ab:
                    14:3c:7a:cc:b2:72:c8:fd:49:6d:f7:c5:e9:2f:4f:
                    de:cd:a0:4a:5f:52:b3:7c:99:a0:51:0c:a8:9b:d0:
                    d4:cd:45:77:ba:d0:43:c6:a6:0e:9b:c1:6c:a6:2b:
                    1b:84:b5:61:4a:f9:dd:c1:e0:7b:de:c1:43:68:24:
                    cf:6a:cc:99:1d:7b:f5:80:e5:b4:c9:5f:d9:52:25:
                    32:a1:e6:01:f9:af:df:92:0a:72:98:9c:c7:2b:61:
                    72:5d:15:4e:ed:a7:9c:f5:ff:d7:07:97:a4:07:9d:
                    25:97:36:80:0f:5e:50:03:36:2a:91:e9:ff:42:30:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C1:B7:57:7C:87:61:E2:03:CB:13:EB:0F:BF:D3:80:0E:47:84:AD
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:97:ec:a5:ab:25:5e:c5:05:a5:03:cb:3b:35:ac:bd:a9:ce:
         9c:60:84:a6:a4:68:ed:19:4e:80:56:e5:09:c3:26:6e:da:34:
         d6:72:18:29:17:5a:11:f0:19:d9:69:49:0f:e8:e2:3b:29:b8:
         6a:21:05:6e:db:21:96:b8:63:8f:c3:7c:8a:ed:88:1e:97:79:
         16:c3:47:df:eb:8c:0f:8a:d1:a1:d3:5d:02:11:4f:47:6a:74:
         22:a1:12:1d:14:c3:f6:d7:c1:b2:52:b5:8d:a9:12:e5:65:98:
         36:15:c1:11:37:84:34:5c:e3:b4:2e:5a:02:58:e7:e5:7d:92:
         ff:15:ac:bf:be:51:c2:e5:3f:26:2b:b1:de:53:da:ad:01:80:
         44:0a:4d:16:04:85:0f:57:df:d3:9c:70:f1:da:ac:cf:4a:2b:
         18:0a:03:6d:27:be:50:01:8f:8b:1b:4c:6f:89:d0:3c:c3:3d:
         6b:1c:2d:e0:e3:4b:26:69:86:9b:8a:53:6e:ac:8c:1b:b6:70:
         46:af:7c:2a:86:d1:76:e7:b8:ad:b2:ba:ff:d1:82:c3:54:67:
         60:31:24:3a:7c:1d:50:bb:28:c1:e8:7c:16:df:3f:11:fc:1d:
         2f:19:c9:ec:04:f0:0a:6d:44:ca:04:29:85:c4:06:cd:70:81:
         b0:52:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:35 2026 by rpki-client