Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
File:                     ll15l05AXZDHV_miXEMFvq3uoG0.mft (raw, json)
Hash identifier:          HZ5/YEalIvuw/PSZBGVKjSB4oG/E+cMticbpwjjjRmA=
Subject key identifier:   BB:4E:78:B9:30:69:8D:72:9A:EF:E9:75:BE:B4:38:FC:0A:E7:07:E1
Authority key identifier: 96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
Certificate issuer:       /CN=F36FB8C3AF/serialNumber=965D79974E405D90C757F9A25C4305BEADEEA06D
Certificate serial:       0536
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
Manifest number:          0535
Signing time:             Thu 26 Mar 2026 03:27:32 +0000
Manifest this update:     Thu 26 Mar 2026 03:27:31 +0000
Manifest next update:     Sat 28 Mar 2026 03:27:31 +0000
Files and hashes:         1: ll15l05AXZDHV_miXEMFvq3uoG0.crl (hash: +vyrZIA+kHVqb4uk3YIX+BjfqI7zJ9gDEaRco4NMFsA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB8C3AF, serialNumber=965D79974E405D90C757F9A25C4305BEADEEA06D
        Validity
            Not Before: Mar 26 03:27:31 2026 GMT
            Not After : Mar 28 03:27:31 2026 GMT
        Subject: CN=69c4a7a4-c632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a3:e4:9b:57:d1:ee:d8:9f:b5:55:84:e0:72:
                    bf:d3:24:ac:1f:ef:e8:01:99:ad:b0:b0:c3:d5:41:
                    04:cc:4e:ea:fa:f6:87:8f:ad:a8:8a:8a:b4:33:89:
                    26:ec:33:81:7f:e4:ad:22:d5:bd:4d:da:7f:2b:15:
                    ae:4f:72:3e:df:b1:bc:92:4f:4f:b3:37:5e:bc:e0:
                    48:b1:01:8a:fb:bb:f5:1c:5a:15:d0:12:72:2a:e6:
                    6d:a4:6c:19:07:03:2d:fc:4b:96:f0:fe:6f:b5:a5:
                    d2:55:69:6c:a3:d0:b9:d4:c3:ba:ea:d3:90:01:82:
                    db:8e:3d:e9:9b:16:f1:c7:1b:16:7e:32:6c:1c:bc:
                    15:c6:9a:6f:8b:c2:9f:2d:d2:3c:69:d1:08:63:ca:
                    ed:33:12:fb:3b:ab:19:02:c0:8e:e9:5a:47:cb:08:
                    70:46:04:b6:bb:27:b2:15:e9:45:15:04:6a:df:a0:
                    b3:21:5a:88:e2:9e:62:f6:b2:e2:7e:e9:74:01:52:
                    69:1f:15:83:b0:3e:0d:7a:c6:51:ce:8d:ea:1a:2f:
                    c2:2d:67:d3:38:3b:04:58:db:69:94:67:49:d5:ce:
                    69:90:aa:18:6e:51:4c:7c:ff:bc:e3:39:5f:29:f7:
                    37:f6:06:d7:c1:be:a0:cb:35:e1:b0:ad:23:e9:78:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4E:78:B9:30:69:8D:72:9A:EF:E9:75:BE:B4:38:FC:0A:E7:07:E1
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:bc:5d:45:8e:1f:f3:54:a2:72:a0:bc:61:3e:23:a5:d1:
         02:4a:4f:25:c7:3c:1f:72:c9:93:71:32:21:70:60:9e:3e:26:
         26:84:46:20:a8:9e:41:bf:87:a6:14:6c:69:d5:1b:0f:6c:fd:
         dd:83:4a:a1:5b:68:b7:18:cc:39:28:f4:0f:b0:9d:fd:e2:b5:
         45:80:b9:89:f0:60:e0:0b:35:3f:36:0e:06:ee:1a:46:e1:a7:
         50:a7:f1:05:d5:9e:93:94:20:c6:f7:82:86:ab:d1:3c:66:72:
         10:9b:ac:d0:50:4e:60:69:18:8b:00:3f:04:ad:20:6b:54:f0:
         a3:d6:96:41:b4:85:2d:a0:a4:93:dd:dc:4a:ca:31:84:0b:d1:
         a9:9f:09:5a:67:89:25:25:18:a4:60:4a:65:e4:84:ed:4e:83:
         ac:84:00:97:79:30:8c:49:fb:91:91:05:82:5a:f9:5f:01:f5:
         f5:9b:fd:48:66:6f:c6:93:3c:82:50:b4:26:4a:4b:4d:65:43:
         0f:8d:45:44:91:bd:3e:4e:75:9b:1a:80:cc:ab:d8:7c:f6:da:
         a2:52:92:4d:9b:27:b2:a5:33:24:b8:64:38:8a:e9:2a:86:e8:
         ca:70:bb:1b:0d:67:09:22:19:66:f1:d3:3d:90:e7:56:6f:a4:
         d8:fe:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:49 2026 by rpki-client