Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          BpSrTAx3YfFoUiFjWNo9uCMFtd/UO8iE7hARRNxvmcs=
Subject key identifier:   9A:27:56:EE:5B:91:89:8E:0E:64:F6:0F:38:35:45:F5:13:32:03:05
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       02B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          02B5
Signing time:             Wed 13 May 2026 04:17:22 +0000
Manifest this update:     Wed 13 May 2026 04:17:22 +0000
Manifest next update:     Fri 15 May 2026 04:17:22 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: B8wE24Rx/OUAWV/9x8gnn3o8u+KXfNP+7byrLCW9HYM=)
                          2: C398885E3AC311EF90F6DF67762E951A.roa (hash: ul3nn21hDO7UgXCYkLGPryVSInddXUiuHuE7QBhZSgU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: May 13 04:17:22 2026 GMT
            Not After : May 15 04:17:22 2026 GMT
        Subject: CN=6a03fb52-292a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:18:ee:b4:55:53:ef:cf:11:96:07:dc:24:
                    5d:c1:be:14:ad:51:65:41:38:74:66:92:3e:0b:39:
                    be:ad:57:8e:db:e1:7b:b7:5d:f6:21:e0:87:81:cb:
                    ee:c7:62:66:62:0d:5d:28:f9:b6:39:21:1d:2d:a2:
                    86:fd:06:15:ce:96:83:88:18:69:32:0c:ec:f3:bb:
                    f4:8b:11:55:ae:f0:25:0f:12:c1:83:8f:4b:ed:09:
                    a3:05:d7:ac:1f:71:df:07:85:2b:a0:78:b9:0c:18:
                    21:30:11:18:9c:5b:50:24:93:24:8f:da:0c:94:81:
                    22:42:fc:cd:a9:56:72:67:46:9b:68:b4:65:0d:af:
                    0a:2e:4d:07:db:7d:60:2c:b9:35:80:d7:9e:75:4e:
                    ec:5c:e1:39:3e:e5:3b:f8:ba:f2:c8:0b:e7:d1:46:
                    0b:e3:87:1b:3c:ca:50:36:b2:d9:01:7f:a5:cd:90:
                    8f:9b:80:3d:9f:b2:ce:5d:c8:00:58:54:3c:ee:f9:
                    d8:20:f1:6c:7c:7a:60:1f:d8:ca:ac:e9:6e:c9:1b:
                    f5:46:d3:1f:c4:61:81:5f:c7:4c:1e:6d:55:fb:14:
                    6b:41:f0:44:11:da:b3:0f:c6:3e:27:56:2a:16:28:
                    10:78:96:95:f6:3d:ed:d3:19:ab:7b:86:ad:55:3b:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:56:EE:5B:91:89:8E:0E:64:F6:0F:38:35:45:F5:13:32:03:05
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:6e:f7:bd:5e:65:8b:2e:51:a8:5c:49:6d:63:c8:1c:f3:
         9b:9f:9e:10:00:75:45:a1:6f:ba:60:5a:9c:5e:24:2e:a9:35:
         17:f2:33:5f:1e:c6:bf:2d:26:33:f7:be:ca:42:4c:4c:9d:1b:
         bd:25:fb:e7:4a:49:f6:4a:bf:73:09:41:3a:22:26:46:98:4a:
         17:e4:9c:8a:e1:05:34:45:ea:b7:32:43:28:f7:fb:0a:c1:67:
         11:28:68:8b:88:48:be:41:20:82:7b:7d:fb:21:5c:0b:75:9b:
         7a:0a:a9:a1:93:d6:3c:4b:36:25:94:a8:b5:f3:5c:13:08:0a:
         07:16:a2:36:bd:c2:7c:11:60:d1:0f:cb:85:1d:d4:eb:8b:23:
         56:ca:57:15:f1:e0:7c:49:29:12:27:40:3f:f6:e4:e5:0c:28:
         f3:1f:67:54:39:ab:db:a7:fe:4f:13:19:28:a3:82:0b:f5:3e:
         07:d9:6a:7a:b1:38:ad:31:0f:55:94:e8:b2:c7:db:22:72:23:
         c4:6b:ee:b8:1c:cd:f2:aa:91:e5:80:98:45:8f:6a:d7:1c:9c:
         3f:20:5d:4a:ef:4e:82:6f:a7:14:bb:48:87:b9:a7:79:5c:f4:
         6b:1e:1e:ee:7c:f3:dd:ab:a8:79:13:db:b6:27:a4:3f:62:7f:
         65:34:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:11:57 2026 by rpki-client