Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          dSII9BJh9JzZ4NSKapm7tXGjImxGZF+Tbqyi3J0khM0=
Subject key identifier:   3C:48:09:E6:52:BA:03:53:8D:FF:B3:AC:7F:AE:EF:EE:1E:C6:4A:1D
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       022B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          0228
Signing time:             Tue 12 May 2026 04:38:15 +0000
Manifest this update:     Tue 12 May 2026 04:38:14 +0000
Manifest next update:     Thu 14 May 2026 04:38:14 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: 67K6cuVE38ubh5VwZcEc7s/fmyWEObm/wmFnKCn2dbU=)
                          2: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 04:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
        Validity
            Not Before: May 12 04:38:14 2026 GMT
            Not After : May 14 04:38:14 2026 GMT
        Subject: CN=6a02aeb7-1576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:ec:8b:09:a2:79:ec:a9:e2:cc:7b:5b:89:
                    7e:1a:01:a8:86:ad:78:0d:ab:06:07:11:97:de:f1:
                    dd:14:01:b7:bc:3a:7a:82:bf:7e:a4:a5:5f:1b:5b:
                    fe:78:0d:9d:f6:99:30:6a:98:28:4b:ea:4d:64:09:
                    a9:d4:70:27:b6:c0:44:d8:76:12:58:2e:48:52:7e:
                    f9:2e:cc:19:f2:db:e6:cf:4d:74:51:a5:c7:e3:af:
                    23:18:cd:82:d1:69:03:f5:87:58:47:17:45:1e:7a:
                    d0:42:7d:67:07:2b:7b:f4:21:6b:21:f3:94:a9:59:
                    e9:3d:31:a9:82:74:2f:9f:06:fd:57:e2:79:4b:9d:
                    ba:26:99:07:3f:a9:3b:87:ea:3d:cb:71:17:ce:a6:
                    f5:6b:bc:55:2f:f3:37:0b:32:3c:8e:f6:ce:68:18:
                    c5:93:ce:ce:79:d2:d2:df:df:19:af:d0:39:6b:0e:
                    83:36:25:56:c9:d4:06:0c:49:f2:61:e6:1f:48:f4:
                    83:e7:d9:a5:d6:e4:17:af:25:a6:ef:60:60:9a:7d:
                    61:d6:a8:13:1c:e8:bb:50:81:a2:92:d8:84:3d:59:
                    f0:5c:97:04:75:4e:e2:0c:53:2d:dc:fb:fb:f9:e9:
                    fa:4a:04:f1:58:b5:69:da:2f:2c:22:2b:5b:2c:c8:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:09:E6:52:BA:03:53:8D:FF:B3:AC:7F:AE:EF:EE:1E:C6:4A:1D
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:d1:35:93:9e:b7:30:c3:60:b0:64:d9:31:89:96:ae:5b:
         1e:10:c4:b8:b8:62:ee:90:42:53:11:91:9f:62:52:84:52:95:
         e4:92:6d:cd:94:ed:f1:24:fd:47:f7:be:60:4b:e4:87:9c:0d:
         43:3e:60:68:03:4a:fa:d4:66:1f:cb:1c:a1:15:f8:85:f6:8b:
         b5:ac:41:1e:9f:43:e0:62:87:1b:ec:41:66:f9:e4:d8:b4:c9:
         81:9f:e2:fd:68:3b:b8:bd:d9:a7:76:ea:a3:a7:4a:c6:8d:ec:
         f6:ef:2a:78:1d:a4:74:59:76:0f:00:65:8a:8b:5f:57:d5:72:
         3b:fa:be:8d:6a:4b:fc:be:87:a5:b4:e9:35:e8:ac:0d:fd:9c:
         c3:d3:9c:70:84:8c:4f:90:bf:0b:02:d5:12:94:08:43:11:fb:
         34:2b:3f:40:90:54:05:1c:10:97:9d:4c:4d:62:04:a7:9a:c3:
         22:43:0d:c3:58:85:05:be:ef:6e:97:25:6b:c1:1a:c8:d5:fd:
         c2:b4:28:1c:3e:b8:fe:9f:bd:99:69:9a:28:70:17:8f:b9:da:
         90:44:9c:10:57:73:e1:81:bd:f2:f6:72:da:32:06:bc:d2:c1:
         d7:8f:7b:e9:8d:e0:79:94:f6:65:7a:4f:61:61:09:da:dd:9b:
         3e:e6:5b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:38 2026 by rpki-client