Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
File:                     AjFjgfORycHBtlB5K7N-_nj13ZM.mft (raw, json)
Hash identifier:          2ZGb2/9jsZ5v/HLzr+kASgKrb/8qn2Ignj9n1Wg6Aqw=
Subject key identifier:   F8:CE:5D:7C:A1:7D:71:01:E5:DA:E5:C0:BA:45:AE:3B:76:C5:EB:AB
Authority key identifier: 02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
Certificate issuer:       /CN=F36C684FAF/serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Certificate serial:       09BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
Manifest number:          09BE
Signing time:             Wed 13 May 2026 01:33:57 +0000
Manifest this update:     Wed 13 May 2026 01:33:56 +0000
Manifest next update:     Fri 15 May 2026 01:33:56 +0000
Files and hashes:         1: AjFjgfORycHBtlB5K7N-_nj13ZM.crl (hash: js2zK8wUIS/wqLJa8wWcIfeMXES4B+dH/HFnNqHIU0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FAF, serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
        Validity
            Not Before: May 13 01:33:56 2026 GMT
            Not After : May 15 01:33:56 2026 GMT
        Subject: CN=6a03d505-44ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:20:a9:68:b2:19:f6:6a:6b:94:65:b6:e7:
                    9e:1f:5c:cc:3f:cd:a2:a5:96:8a:da:62:52:66:49:
                    94:2b:3b:f2:1b:4c:9e:c7:69:de:9c:87:72:81:92:
                    27:07:bd:9c:eb:f0:f1:ec:b0:ce:e2:0c:70:e7:0d:
                    93:dc:b2:ba:0f:c9:cd:39:8a:50:97:87:cf:1f:53:
                    e2:40:ea:c1:bc:2b:e4:c8:c4:36:9d:e4:10:d7:2a:
                    03:77:18:d0:e6:99:ac:eb:e4:e4:64:fa:8d:fd:1a:
                    a7:81:e3:f4:3e:0b:f9:06:5b:55:02:99:45:df:6c:
                    7e:cb:c4:93:63:e1:47:1d:30:0b:e0:b8:5a:65:48:
                    34:9f:3c:bf:4a:2b:8b:15:a4:3c:6a:9b:c9:67:cd:
                    2d:f7:61:db:b4:cb:96:b2:d6:fd:10:05:9e:24:57:
                    0a:dc:51:29:38:b3:5d:5c:30:f9:c0:23:02:87:17:
                    4f:ac:ce:12:d5:d5:8b:63:cf:bf:b1:e3:b8:ef:92:
                    3c:50:9a:26:61:e7:f0:3e:c8:bf:de:35:05:49:b9:
                    9f:d9:8a:de:59:4b:ed:42:93:e4:d1:6c:d1:77:70:
                    a3:f6:a3:ad:05:ae:06:c9:c1:99:d8:1c:e4:84:5b:
                    d7:1a:ea:b3:67:97:16:a9:f4:ec:9f:86:2c:5a:d4:
                    2f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CE:5D:7C:A1:7D:71:01:E5:DA:E5:C0:BA:45:AE:3B:76:C5:EB:AB
            X509v3 Authority Key Identifier:
                keyid:02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:c9:49:31:d1:58:b2:48:b1:4e:e0:70:f3:18:b0:f3:f0:
         75:d0:86:b4:48:a2:80:d4:8f:e6:d8:7b:b0:ad:a0:36:62:ed:
         6e:2c:92:7b:fd:b4:0c:e1:55:9f:f4:1a:60:42:eb:6b:74:fe:
         c4:c9:44:53:4e:4c:5b:64:1d:b4:42:b1:70:6d:f9:52:de:fb:
         b2:49:7d:d0:c4:1a:c1:00:13:1b:c1:75:c7:7c:c9:bf:70:56:
         02:95:e6:dc:e3:97:4d:94:d3:84:48:aa:02:d9:e5:c2:83:cf:
         85:25:c7:71:2f:be:a5:5e:5d:2f:5f:6d:71:c6:b8:a4:23:e2:
         d4:a5:c8:ff:2f:3a:65:cc:90:07:06:2c:01:9e:fc:90:c3:c1:
         ec:6d:73:d8:76:d1:48:d4:63:25:5c:ea:0b:77:21:6f:fc:1b:
         2a:f9:36:8d:2c:51:56:cc:3b:cb:e8:ea:0f:b0:4c:49:8d:fd:
         7a:88:e9:dc:aa:de:e4:f6:5e:dc:39:60:d4:f9:0a:a2:31:f6:
         28:11:f3:32:8f:48:c7:19:16:f7:15:ee:8b:19:0e:cd:fb:4f:
         ec:e2:da:82:eb:e9:ad:c4:8a:a8:6f:fe:56:bb:ce:79:9e:f9:
         5b:98:c8:19:ac:2e:3a:d3:78:2b:75:25:3e:c8:b0:f1:cc:79:
         b8:b8:c9:83
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzY4NEZBRjExMC8GA1UEBRMoMDIzMTYzODFGMzkxQzlDMUMxQjY1MDc5MkJCMzdF
RkU3OEY1REQ5MzAeFw0yNjA1MTMwMTMzNTZaFw0yNjA1MTUwMTMzNTZaMBgxFjAU
BgNVBAMTDTZhMDNkNTA1LTQ0ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXviCpaLIZ9mprlGW2554fXMw/zaKlloraYlJmSZQrO/IbTJ7Had6ch3KB
kicHvZzr8PHssM7iDHDnDZPcsroPyc05ilCXh88fU+JA6sG8K+TIxDad5BDXKgN3
GNDmmazr5ORk+o39GqeB4/Q+C/kGW1UCmUXfbH7LxJNj4UcdMAvguFplSDSfPL9K
K4sVpDxqm8lnzS33Ydu0y5ay1v0QBZ4kVwrcUSk4s11cMPnAIwKHF0+szhLV1Ytj
z7+x47jvkjxQmiZh5/A+yL/eNQVJuZ/Zit5ZS+1Ck+TRbNF3cKP2o60FrgbJwZnY
HOSEW9ca6rNnlxap9Oyfhixa1C8xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+M5d
fKF9cQHl2uXAukWuO3bF66swHwYDVR0jBBgwFoAUAjFjgfORycHBtlB5K7N+/nj1
3ZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2ODRGL0IyOEUyOTBDRDQ4MzExRTk4OTQxN0YxQ0Y4QUVBMjI4L0FqRmpn
Zk9SeWNIQnRsQjVLN04tX25qMTNaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FqRmpnZk9SeWNIQnRsQjVLN04tX25qMTNaTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzY4NEYvQjI4RTI5MENENDgzMTFFOTg5NDE3RjFDRjhB
RUEyMjgvQWpGamdmT1J5Y0hCdGxCNUs3Ti1fbmoxM1pNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkPMlJMdFYskixTuBw8xiw8/B10Ia0
SKKA1I/m2HuwraA2Yu1uLJJ7/bQM4VWf9BpgQutrdP7EyURTTkxbZB20QrFwbflS
3vuySX3QxBrBABMbwXXHfMm/cFYClebc45dNlNOESKoC2eXCg8+FJcdxL76lXl0v
X21xxrikI+LUpcj/LzplzJAHBiwBnvyQw8HsbXPYdtFI1GMlXOoLdyFv/Bsq+TaN
LFFWzDvL6OoPsExJjf16iOncqt7k9l7cOWDU+QqiMfYoEfMyj0jHGRb3Fe6LGQ7N
+0/s4tqC6+mtxIqob/5Wu855nvlbmMgZrC4603grdSU+yLDxzHm4uMmD
-----END CERTIFICATE-----
Generated at Wed May 13 10:57:44 2026 by rpki-client