Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
File:                     zgfVJCGaKb9NDax9tiqIO3WsSUA.mft (raw, json)
Hash identifier:          KIuhYbBx2Nh749bDup8u7MIMa0w0CsqOOwK7GkxWLjw=
Subject key identifier:   D1:2E:94:F3:48:46:5D:7C:D9:F5:39:93:28:28:DB:35:98:28:AE:88
Authority key identifier: CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40
Certificate issuer:       /CN=F36E1A95AF/serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
Certificate serial:       7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
Manifest number:          7D
Signing time:             Wed 13 May 2026 05:24:22 +0000
Manifest this update:     Wed 13 May 2026 05:24:21 +0000
Manifest next update:     Fri 15 May 2026 05:24:21 +0000
Files and hashes:         1: zgfVJCGaKb9NDax9tiqIO3WsSUA.crl (hash: T6H43SVMr/I/h1E34BsJZiPeeVCEFYE+6hPrm4EOtU8=)
                          2: 0836D574EFA911F0AD3786BEDAE4EC9C.roa (hash: s34q98p+j1656mmnmZ5OjzaYIjMbFPtO6WF3YwxXSiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1A95AF, serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
        Validity
            Not Before: May 13 05:24:21 2026 GMT
            Not After : May 15 05:24:21 2026 GMT
        Subject: CN=6a040b06-61fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:a2:57:d1:5a:13:dc:37:45:f2:07:f9:55:
                    36:5b:90:17:e2:2b:10:53:86:55:a4:47:ca:a7:a1:
                    65:ac:60:5d:29:87:88:ca:85:54:da:8d:56:50:87:
                    a7:6e:48:a2:ae:03:a6:f4:f4:a9:a2:3d:b4:60:80:
                    28:84:3a:9d:b1:34:82:23:2c:ef:46:c1:91:3f:cf:
                    29:61:b8:73:6a:9f:54:21:77:ec:50:38:8e:3e:f1:
                    7b:cf:04:51:1d:c9:8b:b8:21:68:49:7b:1e:6c:a1:
                    5e:66:b9:2b:f9:5c:5d:a3:14:a9:92:ed:c3:bd:18:
                    ec:6b:80:51:d4:00:80:37:ae:cd:b0:b6:68:4c:95:
                    ee:d7:13:d9:7e:b7:01:47:1c:47:f8:b5:1f:b6:20:
                    16:5f:02:e2:ea:49:53:8d:20:bb:7c:a8:d7:ab:01:
                    f5:39:11:2a:c2:f3:d4:20:8d:51:71:e7:2a:aa:5d:
                    6c:18:94:53:6c:ae:e0:93:88:46:dc:40:33:6c:05:
                    b4:64:03:a8:99:99:2b:3d:ad:51:4b:64:77:4d:cc:
                    5b:06:7b:13:37:e6:34:db:20:30:d8:ce:5b:72:28:
                    53:5b:62:91:0f:ce:9a:aa:ee:ab:4e:0a:44:e1:24:
                    51:a7:48:75:d4:93:e2:60:51:b5:a7:fa:f5:1f:63:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:94:F3:48:46:5D:7C:D9:F5:39:93:28:28:DB:35:98:28:AE:88
            X509v3 Authority Key Identifier:
                keyid:CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:20:5b:3c:7b:bf:f2:dc:ab:97:c6:61:55:b5:07:4a:91:08:
         99:37:3a:70:3c:47:88:5a:db:f6:e7:a3:e3:81:9e:cf:c3:76:
         db:7f:0d:84:34:0c:95:d6:17:80:d2:8a:07:b1:9f:70:d7:ee:
         76:2e:81:4f:d6:a9:de:aa:47:db:26:10:3e:a1:0f:e0:9a:98:
         21:9e:2c:48:92:db:07:38:96:03:0b:e1:1b:e3:c2:94:e7:8e:
         64:ea:09:95:70:80:3a:5d:4f:4a:0d:60:99:e7:16:c3:30:5e:
         dd:32:34:99:9d:c0:bc:be:2c:52:90:a5:54:1d:14:3a:c6:c1:
         0e:9e:fb:52:5f:5d:f6:e6:fb:ae:31:65:89:b1:da:62:7b:4f:
         d7:f1:c5:eb:7d:8a:f7:1a:6e:43:e1:30:24:53:2e:e5:c8:dd:
         0b:ab:d7:0a:6d:35:5c:10:67:e0:1a:22:80:96:33:5e:4e:65:
         a7:c6:ac:92:7f:3e:95:c7:b0:04:3d:a8:04:cf:b8:b3:f0:f4:
         4f:1c:61:36:84:0e:0b:d5:08:43:9a:49:a3:cb:93:55:62:9d:
         7d:4e:4a:f3:11:b1:d2:e3:eb:d9:8c:36:5c:f8:16:66:75:2b:
         c0:2a:c7:1d:e1:41:e5:fd:1a:b0:ff:63:b2:94:e5:e0:6e:1c:
         a2:dc:89:07
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBfjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
MUE5NUFGMTEwLwYDVQQFEyhDRTA3RDUyNDIxOUEyOUJGNEQwREFDN0RCNjJBODgz
Qjc1QUM0OTQwMB4XDTI2MDUxMzA1MjQyMVoXDTI2MDUxNTA1MjQyMVowGDEWMBQG
A1UEAxMNNmEwNDBiMDYtNjFmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN3xolfRWhPcN0XyB/lVNluQF+IrEFOGVaRHyqehZaxgXSmHiMqFVNqNVlCH
p25Ioq4DpvT0qaI9tGCAKIQ6nbE0giMs70bBkT/PKWG4c2qfVCF37FA4jj7xe88E
UR3Ji7ghaEl7HmyhXma5K/lcXaMUqZLtw70Y7GuAUdQAgDeuzbC2aEyV7tcT2X63
AUccR/i1H7YgFl8C4upJU40gu3yo16sB9TkRKsLz1CCNUXHnKqpdbBiUU2yu4JOI
RtxAM2wFtGQDqJmZKz2tUUtkd03MWwZ7EzfmNNsgMNjOW3IoU1tikQ/Omqruq04K
ROEkUadIddST4mBRtaf69R9jQaMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTRLpTz
SEZdfNn1OZMoKNs1mCiuiDAfBgNVHSMEGDAWgBTOB9UkIZopv00NrH22Kog7daxJ
QDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTFBOTUvMjhBM0JGNThFRkE4MTFGMEE2Qjk5MUI4REFFNEVDOUMvemdmVkpD
R2FLYjlORGF4OXRpcUlPM1dzU1VBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvemdmVkpDR2FLYjlORGF4OXRpcUlPM1dzU1VBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFMUE5NS8yOEEzQkY1OEVGQTgxMUYwQTZCOTkxQjhEQUU0
RUM5Qy96Z2ZWSkNHYUtiOU5EYXg5dGlxSU8zV3NTVUEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABwgWzx7v/Lcq5fGYVW1B0qRCJk3OnA8
R4ha2/bno+OBns/Ddtt/DYQ0DJXWF4DSigexn3DX7nYugU/Wqd6qR9smED6hD+Ca
mCGeLEiS2wc4lgML4RvjwpTnjmTqCZVwgDpdT0oNYJnnFsMwXt0yNJmdwLy+LFKQ
pVQdFDrGwQ6e+1JfXfbm+64xZYmx2mJ7T9fxxet9ivcabkPhMCRTLuXI3Qur1wpt
NVwQZ+AaIoCWM15OZafGrJJ/PpXHsAQ9qATPuLPw9E8cYTaEDgvVCEOaSaPLk1Vi
nX1OSvMRsdLj69mMNlz4FmZ1K8Aqxx3hQeX9GrD/Y7KU5eBuHKLciQc=
-----END CERTIFICATE-----
Generated at Wed May 13 09:05:12 2026 by rpki-client