Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          qOa+fy1cmKnuMb2c4yi5RK9j4/xOc1a8BM7hSHLjo0c=
Subject key identifier:   8D:CF:A8:1A:91:45:A1:6E:AF:81:AD:8D:55:EA:7F:90:A8:56:BD:22
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0D21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0D20
Signing time:             Wed 13 May 2026 01:07:40 +0000
Manifest this update:     Wed 13 May 2026 01:07:40 +0000
Manifest next update:     Fri 15 May 2026 01:07:40 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: 5/BlcXKzSPnzk+n4GK8eqe+dwmpB5P7ijJmsGmr7eng=)
                          2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: May 13 01:07:40 2026 GMT
            Not After : May 15 01:07:40 2026 GMT
        Subject: CN=6a03cedc-c7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:48:24:0c:1d:0e:3f:06:6c:fa:17:ac:78:
                    3a:74:07:d1:0f:22:c8:98:9b:02:69:ef:d6:f7:d1:
                    99:a0:6d:3b:3d:c1:18:78:7c:96:21:2a:88:cd:81:
                    63:27:ed:54:4e:90:09:ed:0e:97:93:c5:f5:4b:f3:
                    f2:92:13:55:b9:37:9d:df:75:5d:9a:dc:11:eb:48:
                    95:de:a0:c5:b2:3d:23:d5:c8:c5:5b:95:e2:3f:6b:
                    bb:95:6d:9c:31:90:de:43:43:d5:9d:40:5c:73:7f:
                    99:93:af:4e:d8:88:97:78:66:70:42:f0:56:73:97:
                    0e:48:eb:98:2a:60:d8:03:45:d3:f5:4d:f8:d5:36:
                    df:a1:9e:51:85:74:0d:cf:0f:13:42:bf:03:19:af:
                    58:8e:45:b1:41:75:03:e6:01:92:8a:d7:0a:c0:6b:
                    76:a1:17:ac:4f:e1:7a:e9:a5:6c:6f:4c:d0:a4:60:
                    9b:6e:e9:51:31:05:e6:03:2b:88:15:3c:6c:2e:68:
                    9a:57:e3:91:9e:af:f2:6d:68:44:e1:85:a0:d3:f3:
                    1a:00:d1:c8:90:da:be:33:ca:04:48:b0:d0:2e:71:
                    c3:d8:d7:07:6b:09:1c:d7:e2:33:f6:cf:e9:0e:c8:
                    54:7a:92:08:23:e2:e6:d1:11:ac:03:df:46:12:ac:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CF:A8:1A:91:45:A1:6E:AF:81:AD:8D:55:EA:7F:90:A8:56:BD:22
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:2a:f2:7e:08:a9:1d:bc:20:d5:c4:b5:12:29:15:ac:f8:
         7d:bb:4b:5c:89:be:48:cc:26:24:97:6c:e9:b7:f2:b2:08:c0:
         b7:da:da:5b:69:af:dd:aa:66:e7:e7:f4:19:78:6e:6f:5f:0e:
         af:ff:d9:10:26:eb:a8:fa:fe:b5:e2:87:df:c0:d9:92:f3:ee:
         da:52:d9:d8:a8:a6:2c:be:50:5b:ff:79:7a:af:33:07:f1:e0:
         c2:aa:d4:6a:f9:6c:6f:3f:13:fc:6e:d7:0c:b2:db:1a:6b:4e:
         4b:bb:46:ef:0c:7e:6e:cb:83:54:a7:13:54:7f:09:28:e8:d0:
         34:7a:4e:69:07:16:48:f3:7b:6e:d6:a7:f6:08:db:af:cd:a3:
         87:f6:0c:51:ec:a3:6b:a0:fa:63:cb:b8:34:5a:fd:c6:b8:62:
         d9:ab:36:7f:83:2f:14:59:b1:f4:01:24:10:83:67:45:af:04:
         08:1a:01:1f:41:65:12:71:20:19:1e:e9:51:cc:ec:bb:4a:29:
         1d:23:f4:ed:36:85:a2:63:8c:a7:84:42:6e:75:dc:87:f7:93:
         0d:d8:78:0d:bd:e6:a4:04:17:82:3a:7e:a0:e9:cf:16:5b:e4:
         34:41:69:25:cf:0b:11:25:68:c3:9a:7f:2e:3d:bd:7a:91:92:
         83:4a:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:12 2026 by rpki-client