Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
File:                     8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft (raw, json)
Hash identifier:          DfARFJM0PNK6PTj3TQrG/gHrrOhj1uAuqf2+9q+8zE8=
Subject key identifier:   77:FE:3C:D9:0D:CA:09:78:81:5C:92:25:91:F9:89:1F:2E:01:75:C1
Authority key identifier: F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC
Certificate issuer:       /CN=F36DB560AF/serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
Certificate serial:       0125
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
Manifest number:          0123
Signing time:             Tue 12 May 2026 05:02:20 +0000
Manifest this update:     Tue 12 May 2026 05:02:19 +0000
Manifest next update:     Thu 14 May 2026 05:02:19 +0000
Files and hashes:         1: 8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl (hash: DbgMMBvj5WY/+BZsXvYyx6EGi7iz+deLNRcGiFeZefs=)
                          2: EF1EDC126F1511F0896E51DFDAE4EC9C.roa (hash: nncn04IJgdyOwnNCorMzliS/IExnEzLZa8RXxvCREP8=)
                          3: 36A34100A71911F0A69F4CB4DAE4EC9C.roa (hash: QKfK7l11b05pQefRS0a/vN3KNRRCGjDcx7/+8e1H4sA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB560AF, serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
        Validity
            Not Before: May 12 05:02:19 2026 GMT
            Not After : May 14 05:02:19 2026 GMT
        Subject: CN=6a02b45c-767c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:fb:7d:67:c2:49:5b:59:a8:25:aa:4a:ac:
                    c2:11:83:8e:d0:27:e2:f7:4f:37:f8:5c:8b:56:29:
                    f6:c4:e8:14:0e:a2:ce:39:ee:e6:01:78:0d:50:4e:
                    7e:97:b6:92:d9:4e:b7:ee:f5:c9:2f:09:55:72:6c:
                    60:1a:ea:82:7e:6d:25:5d:c0:47:d9:48:c8:89:9b:
                    39:10:1d:2f:23:8e:b7:09:5d:16:7c:b7:ac:4d:47:
                    3a:c6:22:eb:0a:23:2b:f1:25:0f:77:5f:5c:06:dd:
                    11:8a:f2:09:53:e6:1d:e2:a1:8a:01:fc:30:9a:49:
                    e7:8e:b3:4c:8e:23:dd:30:f4:44:92:a6:3f:64:3c:
                    71:9a:ab:4b:e3:29:39:8f:52:3e:76:81:ed:7f:fe:
                    34:a9:42:9a:e3:0a:2c:15:d1:58:94:32:5f:cb:77:
                    b2:ef:38:af:c1:93:e9:27:cb:d1:c9:8e:fa:20:7b:
                    dc:7b:30:b0:dd:55:56:66:19:1d:94:8d:4c:ac:52:
                    76:5c:74:1d:33:34:1e:da:a5:4a:bc:8e:37:a4:cd:
                    42:01:dc:c9:3c:b7:c8:30:b0:5b:7a:fe:e6:e7:f0:
                    08:e2:c6:16:3b:3b:6b:b3:b9:c3:54:c0:eb:9e:23:
                    c9:df:a5:2a:b0:54:eb:de:82:a5:9c:ef:c0:52:f5:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:3C:D9:0D:CA:09:78:81:5C:92:25:91:F9:89:1F:2E:01:75:C1
            X509v3 Authority Key Identifier:
                keyid:F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:12:96:a3:24:3e:bd:37:7f:d9:76:3e:66:b7:cb:d9:66:7b:
         d7:a5:f9:a4:34:72:73:5e:25:72:11:9e:94:7d:4a:08:b7:41:
         d2:c7:89:c5:81:60:8d:08:8d:26:d4:75:b1:18:21:d6:5d:8c:
         60:d1:bd:ec:7e:e5:1b:34:cc:d1:02:d1:09:84:a5:2f:0c:a8:
         63:fd:ff:4b:cf:90:14:75:fe:c9:35:9a:83:b7:d3:4a:e9:65:
         53:18:f5:b1:ab:21:cd:be:69:0b:a9:3c:90:99:84:9a:75:e2:
         63:d7:e7:50:90:97:1f:12:ed:90:90:c6:e4:1e:32:4d:58:c6:
         cd:5c:b7:33:58:3b:df:8d:86:f1:b6:af:6f:07:74:8e:e6:25:
         65:71:3f:c8:8e:38:60:bb:1a:0f:da:c1:73:99:07:69:77:8c:
         ea:be:32:b6:0d:c7:5a:74:0f:3f:4c:c1:a3:e1:af:e8:fc:43:
         2e:a2:e9:44:d4:e4:69:7a:1b:c2:0d:c5:ab:be:23:ab:2d:c6:
         1f:3b:83:89:70:5f:97:bf:4a:f1:3a:74:8c:7a:d5:83:27:c2:
         70:a1:a3:23:e9:38:34:5b:5b:14:e4:8e:cb:c8:6e:3d:51:14:
         bf:12:e7:56:0b:cd:8c:31:6b:ca:aa:59:6e:6e:ea:99:5d:f0:
         a8:03:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:08 2026 by rpki-client