Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
File:                     9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft (raw, json)
Hash identifier:          sPEMOXzcIfWmICL89a0ztrcWOhKxMAR4KRw6sgxKn7E=
Subject key identifier:   5B:A0:EC:E1:11:EA:5D:77:78:9E:7C:AE:92:FB:5E:A1:B7:38:D4:BC
Authority key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Certificate issuer:       /CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
Certificate serial:       0444
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
Manifest number:          0443
Signing time:             Tue 12 May 2026 03:28:17 +0000
Manifest this update:     Tue 12 May 2026 03:28:16 +0000
Manifest next update:     Thu 14 May 2026 03:28:16 +0000
Files and hashes:         1: 9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl (hash: l2cY6oZ1obC+MLuaWh0x0iMfNFnv5Ze7vDmQDtqtcWU=)
                          2: C226B7D40AA411EEAEA4A5484AD9E6FC.roa (hash: Qm72goTpyMAJ3Op/uLoxMku/eqrMrQ5Gy2DoW/t8FVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 03:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EED3EAF, serialNumber=F59284D76678851F7AA743B13F6C067479550074
        Validity
            Not Before: May 12 03:28:16 2026 GMT
            Not After : May 14 03:28:16 2026 GMT
        Subject: CN=6a029e51-2d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1f:8c:aa:d7:e5:16:1e:67:80:13:65:91:4d:
                    e9:f9:81:00:59:ef:73:7c:8d:f9:66:8f:15:a5:80:
                    cd:c9:3c:92:7d:0e:57:ab:50:59:da:82:88:5d:3c:
                    f5:07:e1:37:a3:13:d7:34:b9:9a:11:09:5b:81:a8:
                    98:34:28:d0:12:60:a1:f9:fc:af:9a:00:6e:23:76:
                    63:ed:9b:ba:97:01:b2:df:49:c1:d3:56:0d:a2:a6:
                    19:7b:b5:19:e9:27:e0:8b:48:f7:f9:68:65:c0:bb:
                    d5:62:7c:ca:b5:5d:34:b2:e9:ab:91:4d:d8:74:e6:
                    38:20:d1:a2:2b:94:d6:a7:7b:91:cc:23:93:86:15:
                    d7:87:5e:cc:59:5a:70:23:88:b7:bd:9d:4d:ad:de:
                    64:d2:4c:81:48:1f:19:3f:04:37:bc:d3:57:97:8f:
                    f9:94:2c:4b:dc:be:4f:5e:06:72:24:0f:3f:b8:43:
                    46:23:e0:32:41:e3:2b:2a:34:95:cd:b0:cf:e2:f1:
                    2a:0a:d3:50:0f:d8:e2:0f:5d:a5:57:e9:c1:fe:98:
                    41:24:aa:63:a5:8b:69:ce:f5:b1:ff:1b:4d:41:f0:
                    44:85:2b:ea:1c:69:cd:cb:02:84:ae:0c:33:c0:0f:
                    6d:e2:7e:37:9d:1b:17:64:a0:2d:65:7c:2c:ba:c3:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:EC:E1:11:EA:5D:77:78:9E:7C:AE:92:FB:5E:A1:B7:38:D4:BC
            X509v3 Authority Key Identifier:
                keyid:F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:c0:7f:fd:e2:6a:ce:c5:84:ea:f6:d6:13:ac:2c:7f:8b:
         a4:83:18:1a:3c:69:e2:34:32:16:3d:9c:ad:d8:1c:d8:42:1a:
         f2:d8:71:5e:30:9e:c1:f8:ff:7c:f3:4b:49:52:9c:57:02:8c:
         84:13:a4:1d:71:07:74:29:1d:5a:a7:35:f3:21:34:16:f1:03:
         81:31:f0:95:e9:2c:ec:3f:47:16:91:ab:b0:ea:44:e8:0c:c2:
         e3:e2:8e:ab:6c:8c:11:f2:d4:92:b1:16:c2:09:db:82:aa:f3:
         59:47:4e:b3:8a:d7:72:6c:0c:6c:3a:d7:a3:94:e5:e3:91:ca:
         1d:f8:97:aa:66:ba:12:06:66:55:1c:cb:2e:48:e7:2c:5b:e4:
         81:13:ff:5a:03:89:78:d3:0e:e5:b8:13:ff:3c:b3:32:7c:d4:
         7b:17:e4:fd:4d:c0:5c:da:58:10:f2:13:a1:5f:d3:e3:81:71:
         e5:ba:0a:7f:c4:8f:35:c9:02:c2:c6:5e:e8:62:59:85:94:0d:
         c2:68:10:fa:0f:43:6b:a1:25:1f:ae:a0:f8:14:5a:77:16:20:
         72:c4:0a:d0:bf:60:e0:49:8d:1d:04:75:38:7f:3a:d3:ab:1b:
         f7:6d:76:ed:79:2e:d1:97:4f:e4:67:d6:2d:76:ec:3d:3d:4b:
         2c:f4:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:43 2026 by rpki-client