Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
File:                     Mh-BR7LBGZaoFo69bpeb7goWDSg.mft (raw, json)
Hash identifier:          E/ZlKkNsgzq30pb5cYAxUS1sh2+U+OXF61yJCJNRc4g=
Subject key identifier:   72:78:57:40:5E:E2:18:B7:EE:DB:D5:A2:94:90:5C:B7:BE:A4:A7:52
Authority key identifier: 32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28
Certificate issuer:       /CN=F36C5799AF/serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
Manifest number:          25
Signing time:             Tue 12 May 2026 05:31:05 +0000
Manifest this update:     Tue 12 May 2026 05:31:04 +0000
Manifest next update:     Thu 14 May 2026 05:31:04 +0000
Files and hashes:         1: Mh-BR7LBGZaoFo69bpeb7goWDSg.crl (hash: DTv1iTdgqKkLAU9dt4EPxNx5Tenadj0JdEaZRMnJ2Pk=)
                          2: 6EB787A833E211F19A2B66F0CE1D38B0.roa (hash: khl45c9kCg+cPXJc6/8UvAcq1OtRKhjfiq9hfCULuv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5799AF, serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
        Validity
            Not Before: May 12 05:31:04 2026 GMT
            Not After : May 14 05:31:04 2026 GMT
        Subject: CN=6a02bb19-4aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:74:94:d7:1b:dc:41:ef:0d:64:54:34:7b:
                    8a:86:34:f9:a6:e7:0b:b7:d9:be:a6:1a:da:8d:84:
                    21:4d:15:2c:80:e5:1e:61:e4:f7:8e:38:f5:3c:5f:
                    54:e0:13:65:5d:6e:0f:1c:71:32:10:40:cf:2d:93:
                    54:b5:e1:07:e2:35:17:31:3c:54:08:77:7e:0b:93:
                    6f:ec:ff:8a:6b:21:be:81:4d:1a:c2:dd:95:37:f5:
                    ee:76:8c:73:d8:72:bf:05:f1:91:b6:89:71:02:66:
                    32:c4:52:f1:11:e7:1a:ac:b6:c2:0f:33:8a:04:73:
                    5a:69:3f:50:b1:cc:82:b2:63:1b:7d:b9:f7:1e:de:
                    17:83:65:33:c3:bb:25:b6:cd:29:c7:b4:19:14:c7:
                    78:24:76:d8:92:6e:ad:7e:73:5c:9f:ee:9d:35:94:
                    cb:8d:16:b7:b1:94:df:d9:84:fb:3f:4c:f4:ea:66:
                    63:a0:08:13:1c:44:0d:87:e8:72:d4:67:34:6a:cd:
                    f7:0e:8d:9c:47:5b:13:9d:6f:17:52:e2:a3:a9:bd:
                    75:5c:f8:83:75:0c:ab:e6:ad:c2:f7:c7:af:10:70:
                    6c:84:f7:69:4e:48:87:09:60:3e:7f:6f:44:37:31:
                    04:49:09:da:20:6b:c4:7f:07:0c:87:4e:88:27:1e:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:78:57:40:5E:E2:18:B7:EE:DB:D5:A2:94:90:5C:B7:BE:A4:A7:52
            X509v3 Authority Key Identifier:
                keyid:32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:ce:a4:b3:54:7f:16:92:cf:b5:d8:e3:6c:48:b6:44:3b:
         24:cc:b1:21:5c:c4:e5:10:d0:b4:16:33:e7:52:5f:12:b0:bb:
         f2:17:c7:50:43:90:d1:84:50:65:91:2e:2b:8f:b9:7f:05:38:
         18:0d:75:db:d0:6e:f1:27:7d:cf:6f:2c:81:26:4b:26:13:c5:
         9f:9c:ca:59:9e:4d:1b:50:50:2b:ee:60:41:ac:a6:4b:f1:49:
         e8:3d:50:a2:5e:c6:4e:2e:34:45:36:ca:d7:6d:34:2c:d8:85:
         6a:e5:f9:14:04:d6:a6:28:e4:2c:54:dd:9e:90:06:56:0b:43:
         4a:94:f8:64:04:79:00:1f:31:90:af:2b:4e:c8:65:53:94:6a:
         70:85:e8:f4:e7:a0:6b:00:58:a1:9c:e2:dd:aa:0f:c5:80:60:
         ae:4f:36:2f:72:18:0a:33:9e:19:e9:46:97:9a:ed:4d:36:25:
         0b:80:d2:4b:a3:a8:4f:e1:f2:ee:79:8b:d9:38:09:00:8b:c5:
         bb:9f:a7:2e:e9:cd:29:71:8c:2d:74:6d:b3:db:e3:5a:fb:a0:
         80:ee:c2:15:8d:9b:5c:51:b2:23:d5:74:6e:85:e7:a9:93:78:
         90:38:4d:12:74:c7:fe:fd:11:ba:6f:df:73:19:13:3d:36:9b:
         41:e7:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:54 2026 by rpki-client