Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          NSMM3snNyjx0pF0JPTgvujQbL12uZvf3zVGKpmGZQ0Q=
Subject key identifier:   03:6B:0D:55:28:E7:64:62:39:37:23:CD:34:6D:BC:D4:BB:85:74:12
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       0F85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          0F85
Signing time:             Wed 13 May 2026 00:57:15 +0000
Manifest this update:     Wed 13 May 2026 00:57:15 +0000
Manifest next update:     Fri 15 May 2026 00:57:15 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: cMkSgCEpsJCroX/mgAEjwGPdy1gSxUhTtElNdF+Rx0k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3973 (0xf85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: May 13 00:57:15 2026 GMT
            Not After : May 15 00:57:15 2026 GMT
        Subject: CN=6a03cc6b-de03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:26:75:81:d2:f2:5e:48:92:24:ad:c6:da:
                    e4:d2:ba:4e:bf:6c:d2:26:db:9a:10:c6:e0:e9:8f:
                    c1:81:ea:59:6c:5a:f3:e1:37:dd:b8:b2:89:ab:80:
                    9c:e3:d3:b1:09:52:40:70:fb:f6:10:be:4a:b0:2b:
                    6a:65:61:07:09:4a:86:37:55:6a:2a:ff:0c:19:96:
                    7e:23:ce:d4:61:04:58:6a:ff:0f:ac:7a:d6:96:34:
                    7d:eb:e1:b4:7d:de:94:88:e5:f0:63:c1:07:7a:4e:
                    50:3f:bb:67:e9:82:ce:bf:d7:38:3e:36:ff:41:d4:
                    f8:c5:89:c1:f1:ab:b8:83:09:d7:5e:9b:00:3a:6e:
                    24:fd:4b:a5:ab:42:f2:81:6a:a1:b2:38:a3:65:fa:
                    51:98:ea:1a:43:57:23:8a:98:ac:ed:71:f3:df:96:
                    ea:d5:44:e2:b3:d1:8b:83:35:c5:a6:08:3a:5b:83:
                    80:2f:5f:5b:2b:38:8f:a4:22:f4:60:36:ad:95:17:
                    a5:7f:4a:cd:10:bb:13:67:bc:12:3a:f9:c2:ad:b4:
                    5f:24:a1:44:2a:70:25:d1:28:31:c4:82:61:75:fd:
                    04:61:97:19:f3:46:e1:72:6e:5b:c4:16:63:e8:0d:
                    24:ab:1d:5d:3a:6a:c4:30:fa:24:60:7f:df:e3:1a:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6B:0D:55:28:E7:64:62:39:37:23:CD:34:6D:BC:D4:BB:85:74:12
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:a9:de:ed:c0:30:f3:db:59:04:66:62:e8:43:5f:b5:42:
         55:c7:d6:f4:18:96:36:41:80:fc:97:1c:e1:48:4b:a9:a4:15:
         ac:71:51:7d:78:53:6e:02:24:dc:8f:9b:37:b9:d1:d2:5e:54:
         02:de:d0:8f:80:0f:f9:36:2b:9a:0f:16:19:2b:e5:0d:75:55:
         55:69:ff:71:6c:32:82:b5:13:14:c6:85:6c:b7:d3:52:85:d2:
         07:c9:b7:c9:c3:ab:2e:23:c0:a7:f0:31:bc:f4:fd:44:e8:e6:
         65:a3:04:0b:a8:fc:d9:24:ea:d7:3c:4a:e9:33:0b:b2:27:4d:
         28:4f:d8:90:93:46:ba:19:ab:98:28:41:6e:d3:c5:d5:46:88:
         80:05:4f:ae:b6:47:bb:bc:5d:87:63:14:01:61:88:b9:0d:b7:
         20:b3:4c:15:bb:0b:01:a3:67:10:ce:16:eb:9c:43:d0:4f:36:
         21:ae:29:fd:d9:d7:31:13:88:86:a3:f4:68:6e:39:ef:39:65:
         50:b3:12:d3:36:74:59:96:7e:ff:aa:fd:f5:c0:af:ed:47:df:
         d9:4e:56:4d:b2:9a:01:c5:7a:d1:7c:1b:cf:14:2f:95:a8:39:
         7b:ac:73:cc:54:ea:42:8c:d3:f0:e7:8f:85:d8:b6:1e:93:40:
         75:61:8c:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FGMzdBRjExMC8GA1UEBRMoOEE2OUUzMTM5QkQ3RUZDMDgwQTQyRTE2MDQ4MzM5
OEZBNkM3NUJCNjAeFw0yNjA1MTMwMDU3MTVaFw0yNjA1MTUwMDU3MTVaMBgxFjAU
BgNVBAMTDTZhMDNjYzZiLWRlMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKjSZ1gdLyXkiSJK3G2uTSuk6/bNIm25oQxuDpj8GB6llsWvPhN924somr
gJzj07EJUkBw+/YQvkqwK2plYQcJSoY3VWoq/wwZln4jztRhBFhq/w+setaWNH3r
4bR93pSI5fBjwQd6TlA/u2fpgs6/1zg+Nv9B1PjFicHxq7iDCddemwA6biT9S6Wr
QvKBaqGyOKNl+lGY6hpDVyOKmKztcfPflurVROKz0YuDNcWmCDpbg4AvX1srOI+k
IvRgNq2VF6V/Ss0QuxNnvBI6+cKttF8koUQqcCXRKDHEgmF1/QRhlxnzRuFyblvE
FmPoDSSrHV06asQw+iRgf9/jGiX/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUA2sN
VSjnZGI5NyPNNG281LuFdBIwHwYDVR0jBBgwFoAUimnjE5vX78CApC4WBIM5j6bH
W7YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRjM3LzQyNkEwQUQ2NTg2RjExRTVBMzI3NjIzMUY4QUVBMjI4L2ltbmpF
NXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ltbmpFNXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FGMzcvNDI2QTBBRDY1ODZGMTFFNUEzMjc2MjMxRjhB
RUEyMjgvaW1uakU1dlg3OENBcEM0V0JJTTVqNmJIVzdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxmane7cAw89tZBGZi6ENftUJVx9b0
GJY2QYD8lxzhSEuppBWscVF9eFNuAiTcj5s3udHSXlQC3tCPgA/5NiuaDxYZK+UN
dVVVaf9xbDKCtRMUxoVst9NShdIHybfJw6suI8Cn8DG89P1E6OZlowQLqPzZJOrX
PErpMwuyJ00oT9iQk0a6GauYKEFu08XVRoiABU+utke7vF2HYxQBYYi5Dbcgs0wV
uwsBo2cQzhbrnEPQTzYhrin92dcxE4iGo/RobjnvOWVQsxLTNnRZln7/qv31wK/t
R9/ZTlZNspoBxXrRfBvPFC+VqDl7rHPMVOpCjNPw54+F2LYek0B1YYzy
-----END CERTIFICATE-----
Generated at Wed May 13 12:32:52 2026 by rpki-client