Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
File:                     NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft (raw, json)
Hash identifier:          QpeEUM9IYNR06Ymd/ApnTBNaxslxzl2zc7T1GYGFNBQ=
Subject key identifier:   06:27:A9:E4:00:C2:85:B4:AF:33:12:4A:FA:13:EC:FA:4D:27:B5:D6
Authority key identifier: 35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Certificate issuer:       /CN=F36C67A4AF/serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
Manifest number:          34
Signing time:             Tue 12 May 2026 05:30:17 +0000
Manifest this update:     Tue 12 May 2026 05:30:16 +0000
Manifest next update:     Thu 14 May 2026 05:30:16 +0000
Files and hashes:         1: NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl (hash: 02SwBMxlm/2/pfFd6D2fj+rq8TxhZvZeoyI0rLFtQ7w=)
                          2: 3100489627B211F18A08A3B6DAE4EC9C.roa (hash: KxXVh/K4PRDNOgb6lGt6sWf5pvipfL5DWCni74reBi0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
        Validity
            Not Before: May 12 05:30:16 2026 GMT
            Not After : May 14 05:30:16 2026 GMT
        Subject: CN=6a02bae9-67ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4e:11:e0:43:24:89:55:24:20:ab:0e:3c:16:
                    86:ad:dd:3b:11:67:c1:6e:99:94:16:65:b2:88:90:
                    18:9f:19:63:f9:76:df:29:a8:d9:1f:05:1e:fd:a0:
                    81:3d:89:d3:17:e4:b9:90:77:06:ec:cd:2d:a6:e5:
                    d6:b9:ad:07:a5:dc:a9:83:d9:8e:53:65:81:c1:11:
                    36:01:47:21:6f:60:f9:e4:f4:fc:a1:b8:29:e2:2b:
                    65:84:21:0c:72:11:a8:b4:4b:5c:38:18:fb:3d:be:
                    c1:f7:73:7e:8b:0b:27:65:72:7c:fb:64:78:e2:6f:
                    c2:bf:5d:62:ce:25:a4:24:82:a8:fa:9e:8c:0e:00:
                    e7:93:ef:b8:8b:f1:df:e5:2d:df:b0:c7:65:40:7c:
                    7b:ae:64:38:aa:52:be:19:2e:b0:06:8e:e7:68:42:
                    55:e6:05:c6:99:20:ce:6d:6d:a0:09:ff:ca:87:ad:
                    5d:67:d6:3b:29:ec:e5:db:52:06:73:24:41:7b:60:
                    35:57:4e:22:8b:80:2d:74:63:12:28:99:6f:8c:a6:
                    6a:5a:77:e5:93:78:08:c5:9a:f6:46:f7:ec:bd:0c:
                    38:ea:70:e4:ad:63:07:f8:62:00:aa:c1:3a:ad:af:
                    f1:48:ad:b8:06:78:79:be:04:f0:9e:0c:44:06:4f:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:A9:E4:00:C2:85:B4:AF:33:12:4A:FA:13:EC:FA:4D:27:B5:D6
            X509v3 Authority Key Identifier:
                keyid:35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:96:6b:a7:03:c1:9f:75:04:a2:32:1f:f0:fd:0e:3b:a9:f5:
         74:4a:52:5f:12:55:c8:04:0f:b3:2e:3f:bc:c1:b9:9d:77:98:
         44:d7:56:3a:33:3d:f1:14:ba:ee:7c:e5:09:33:56:7d:44:fb:
         1e:36:89:b6:4a:3c:0c:78:46:82:e0:8a:c2:fa:b6:63:7b:aa:
         3b:e2:e7:59:f1:29:bd:1c:39:35:18:f4:c9:ef:e0:a9:64:b8:
         30:74:3f:dc:56:36:8c:bc:7d:01:af:de:d6:e0:8f:57:ce:56:
         ea:cc:be:8a:0e:25:7f:96:dc:ec:41:fa:85:ca:f6:7c:d1:ea:
         ea:02:34:fd:47:21:24:84:e4:ad:e1:e2:2f:fa:5d:ae:02:97:
         de:52:dc:41:bc:7c:49:e1:f3:b9:86:60:42:05:bd:88:69:cc:
         b6:07:17:77:63:ba:58:c6:9d:ed:f7:86:bc:5f:ee:f8:46:f1:
         a1:46:aa:56:64:9d:41:6c:0b:38:46:5d:72:6f:2d:65:6d:8b:
         b5:79:9b:de:d3:07:e2:00:49:ad:ff:6a:6a:fd:7e:bc:f1:8b:
         f7:49:fd:20:e0:ee:70:d2:37:35:c9:cb:99:eb:66:70:dd:c8:
         56:88:db:be:73:b3:4e:4d:fb:6e:44:57:be:31:f7:15:c8:1a:
         2e:ee:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:01 2026 by rpki-client