Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File:                     XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier:          CynGojCV+HTevxV07cZjyEAu8CJhbb7kzTHjZLZNm1A=
Subject key identifier:   FE:E2:71:EC:CE:B2:00:DE:A7:BE:5C:3F:BA:E5:02:CB:B8:C9:09:01
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer:       /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial:       7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number:          7A
Signing time:             Tue 12 May 2026 05:21:28 +0000
Manifest this update:     Tue 12 May 2026 05:21:27 +0000
Manifest next update:     Thu 14 May 2026 05:21:27 +0000
Files and hashes:         1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: RdKJ6TOpQlhZcmEZNO1n5ijzn+wvzZ9nBVo8x9L9uFA=)
                          2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
        Validity
            Not Before: May 12 05:21:27 2026 GMT
            Not After : May 14 05:21:27 2026 GMT
        Subject: CN=6a02b8d8-2e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:50:db:5f:d8:d3:a7:e2:96:a4:17:2c:fc:
                    25:0f:23:03:a4:8d:59:7b:30:97:0d:ef:b2:93:56:
                    66:27:7b:39:1b:08:57:c2:61:23:80:ef:26:3b:fa:
                    b0:79:ad:a5:9e:56:35:4a:7c:de:61:ee:07:b6:c2:
                    ca:0e:a5:7d:cd:54:61:0d:d4:b6:ae:3f:31:37:a7:
                    87:a0:2f:77:5e:37:c4:e1:e6:77:1a:83:63:63:2f:
                    8f:aa:2e:40:38:88:c7:93:3f:5a:74:78:2a:da:1e:
                    b0:9c:1b:bd:6d:c9:9f:68:cd:48:dc:d7:56:7d:3f:
                    fa:dd:29:ad:c0:ae:cf:d5:17:a1:36:69:cf:3f:c0:
                    e5:b0:9c:98:6e:ea:f7:8e:af:18:3c:47:3d:fe:4a:
                    e1:79:ec:e3:f1:35:62:4e:d3:1b:b5:d4:2b:cf:cb:
                    c1:15:d5:18:89:7a:f8:a5:1f:ce:26:9d:c1:a4:7d:
                    56:2e:79:3a:9f:6b:4c:ca:a5:25:8c:d9:55:1e:ac:
                    b8:98:8b:ad:a0:a7:1f:b4:8c:4c:27:9e:f2:e5:2c:
                    71:22:89:bb:60:a0:f3:ab:67:e6:64:1f:50:4d:cb:
                    28:f0:34:64:90:4b:19:43:80:1e:3b:ec:98:27:1b:
                    dc:ec:c8:49:50:3d:84:da:0f:b0:a6:d9:3c:9c:30:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:71:EC:CE:B2:00:DE:A7:BE:5C:3F:BA:E5:02:CB:B8:C9:09:01
            X509v3 Authority Key Identifier:
                keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:13:f7:1f:88:a2:ff:38:85:72:f0:38:4a:8c:93:ab:33:
         38:25:7b:79:41:3a:8a:37:eb:f7:47:69:e6:71:7b:8c:69:1d:
         4e:70:37:c4:53:d6:d9:09:cb:f6:67:e3:94:1d:c3:15:6d:80:
         bb:12:0c:22:69:a8:d4:53:c1:f3:f4:1e:e5:70:12:67:ce:ba:
         90:26:d7:1e:98:91:c9:d5:95:0e:1e:0d:1b:ca:2d:03:6a:6d:
         fa:9b:c0:81:ec:8c:4a:f4:5b:7d:67:36:1c:39:f6:7d:27:aa:
         9e:d1:32:1a:59:4d:ba:c1:28:8a:5d:8c:57:85:72:57:af:49:
         66:31:1f:2d:4e:d2:96:1d:9e:35:04:43:ec:07:28:f8:95:e0:
         56:57:2e:37:6d:5f:ce:f1:9f:68:c3:b9:e5:fa:3c:35:64:39:
         39:dd:e1:93:3b:af:4b:ab:d3:c4:1c:6b:8c:56:d9:5c:3f:15:
         05:43:7c:96:70:e5:89:b4:c9:12:ec:be:8a:be:e4:ea:23:ff:
         d2:f9:25:0b:42:59:c0:5e:fe:e9:e4:03:d9:6a:8c:f3:bb:25:
         c2:1b:9f:07:e2:2d:a8:14:dd:7a:11:de:03:50:63:f8:10:ea:
         e9:cc:6d:e5:4b:90:7d:74:b5:c8:eb:c3:da:20:16:af:15:f4:
         c7:41:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:44 2026 by rpki-client