Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          mRYwPV52ou6tsYUWSlwkT8HvNegKiqPfDgGbYG3XOis=
Subject key identifier:   25:5F:62:1E:58:36:50:7E:89:E5:7B:BB:20:CD:B7:1D:CD:DA:68:46
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       0825
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          0822
Signing time:             Wed 13 May 2026 01:54:46 +0000
Manifest this update:     Wed 13 May 2026 01:54:45 +0000
Manifest next update:     Fri 15 May 2026 01:54:45 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: RTeVh9HAIHy3VXBM+tdzTwOpekDl6xpYdNutOrSWL04=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: May 13 01:54:45 2026 GMT
            Not After : May 15 01:54:45 2026 GMT
        Subject: CN=6a03d9e6-db14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:50:04:50:2d:f1:07:42:3a:1f:0c:cb:05:
                    f1:c2:1c:f9:d7:88:83:76:8a:d7:8e:ac:c1:e2:2a:
                    5f:3f:3b:67:e6:8b:93:30:e1:9e:a2:36:df:fa:e9:
                    2f:48:b9:e4:56:90:25:f2:4c:f6:e4:19:e2:b9:f9:
                    78:51:27:c6:cf:24:67:76:a1:ed:83:92:a2:ed:3c:
                    a6:44:54:85:eb:eb:9a:18:ec:95:3a:21:7d:42:6f:
                    e8:4b:6e:ce:82:b7:68:69:5a:92:14:6e:1e:e5:c0:
                    d6:32:35:b3:6d:13:83:9b:f4:a0:d5:65:61:e1:ff:
                    fa:36:b3:2e:f8:3a:ce:9d:1f:e9:ab:03:5d:26:9d:
                    32:da:6a:90:db:36:a7:f4:ab:51:a3:49:67:79:62:
                    7a:29:7a:93:4b:cf:f1:8e:65:4f:b1:19:bb:b4:dd:
                    ec:d2:2a:17:05:be:7e:92:af:db:22:d8:cb:3f:00:
                    bd:c9:bc:cb:5f:d6:c4:42:28:85:42:90:8f:59:14:
                    8f:b1:ba:11:fd:e5:ef:51:b6:77:7c:83:9d:5c:fb:
                    82:81:03:81:1b:a8:23:25:47:16:35:4c:5b:81:b4:
                    8e:88:cc:c3:bc:2a:65:c6:e4:4e:19:80:16:a2:da:
                    30:56:16:19:06:82:5d:27:1c:b0:03:a2:e2:e1:26:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:62:1E:58:36:50:7E:89:E5:7B:BB:20:CD:B7:1D:CD:DA:68:46
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:a2:92:5c:f4:8b:b7:ac:99:66:4a:7c:3d:74:c2:a2:3c:
         dc:1e:7c:2f:ca:1a:a8:4b:63:c0:79:83:83:cf:7e:04:20:bb:
         70:bd:0b:b6:08:51:a1:6d:f6:09:b5:14:84:b5:9b:3a:03:45:
         9f:9c:89:d1:74:51:4f:c3:2c:29:a5:8c:84:76:91:c5:69:15:
         c1:29:3e:ea:f3:e8:51:76:5a:8e:c1:9c:78:7b:73:bd:54:e4:
         96:cc:38:9c:d6:c2:0f:f1:77:62:16:55:e2:e7:a5:13:4b:ab:
         c1:7c:b6:33:74:76:22:d8:18:70:49:7b:c9:36:0c:96:b6:8a:
         ce:37:2c:0b:02:e9:08:55:34:27:cf:05:4a:a3:e5:40:eb:02:
         af:87:4a:d1:a3:aa:52:e2:0b:c8:c6:ae:b0:72:56:71:73:53:
         d9:44:52:9e:65:24:84:3e:36:c4:15:5d:71:21:4b:62:d6:1f:
         70:54:d2:98:cc:bc:80:67:e0:1e:89:df:1a:13:46:75:51:38:
         67:74:df:59:ef:8c:bd:4f:2b:c5:a6:fb:00:2f:ed:bf:09:d0:
         e4:3d:4c:a7:e5:b5:57:af:d1:96:16:50:b2:2c:e6:26:73:66:
         46:47:fe:97:c0:a6:ae:69:20:ee:45:9e:82:2b:41:06:40:38:
         ed:b0:d8:7a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZERDRBRjExMC8GA1UEBRMoMzZGNzU3MkEwMkU4M0YwN0JEODFCN0FFNDI2NjEz
NkVENTZGQTA1MDAeFw0yNjA1MTMwMTU0NDVaFw0yNjA1MTUwMTU0NDVaMBgxFjAU
BgNVBAMTDTZhMDNkOWU2LWRiMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHhFAEUC3xB0I6HwzLBfHCHPnXiIN2iteOrMHiKl8/O2fmi5Mw4Z6iNt/6
6S9IueRWkCXyTPbkGeK5+XhRJ8bPJGd2oe2DkqLtPKZEVIXr65oY7JU6IX1Cb+hL
bs6Ct2hpWpIUbh7lwNYyNbNtE4Ob9KDVZWHh//o2sy74Os6dH+mrA10mnTLaapDb
Nqf0q1GjSWd5YnopepNLz/GOZU+xGbu03ezSKhcFvn6Sr9si2Ms/AL3JvMtf1sRC
KIVCkI9ZFI+xuhH95e9Rtnd8g51c+4KBA4EbqCMlRxY1TFuBtI6IzMO8KmXG5E4Z
gBai2jBWFhkGgl0nHLADouLhJgoRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJV9i
Hlg2UH6J5Xu7IM23Hc3aaEYwHwYDVR0jBBgwFoAUNvdXKgLoPwe9gbeuQmYTbtVv
oFAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2REQ0L0EyRDFGNTE2MTI1ODExRUI5ODREQ0Y3OUY4QUVBMjI4L052ZFhL
Z0xvUHdlOWdiZXVRbVlUYnRWdm9GQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL052ZFhLZ0xvUHdlOWdiZXVRbVlUYnRWdm9GQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhB
RUEyMjgvTnZkWEtnTG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAtaKSXPSLt6yZZkp8PXTCojzcHnwv
yhqoS2PAeYODz34EILtwvQu2CFGhbfYJtRSEtZs6A0WfnInRdFFPwywppYyEdpHF
aRXBKT7q8+hRdlqOwZx4e3O9VOSWzDic1sIP8XdiFlXi56UTS6vBfLYzdHYi2Bhw
SXvJNgyWtorONywLAukIVTQnzwVKo+VA6wKvh0rRo6pS4gvIxq6wclZxc1PZRFKe
ZSSEPjbEFV1xIUti1h9wVNKYzLyAZ+Aeid8aE0Z1UThndN9Z74y9TyvFpvsAL+2/
CdDkPUyn5bVXr9GWFlCyLOYmc2ZGR/6XwKauaSDuRZ6CK0EGQDjtsNh6
-----END CERTIFICATE-----
Generated at Wed May 13 07:32:04 2026 by rpki-client