Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          CH9yFMy+qVQfwbqvfY4Iy87JELkrXkKdkTJTqfLV58w=
Subject key identifier:   E3:80:56:75:B8:5C:17:CE:00:8E:A6:A4:F0:FF:D0:C6:2C:3A:F4:16
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       0124
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          0123
Signing time:             Tue 12 May 2026 05:02:08 +0000
Manifest this update:     Tue 12 May 2026 05:02:07 +0000
Manifest next update:     Thu 14 May 2026 05:02:07 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: nB0wKIMhf+cYFZg6dqlHM6SCv+FM7JD5+8VYkRZFm4s=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: May 12 05:02:07 2026 GMT
            Not After : May 14 05:02:07 2026 GMT
        Subject: CN=6a02b450-537f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:95:cf:fe:07:5c:3a:fc:ad:41:cc:24:c3:1b:
                    3d:cb:3e:3b:10:a2:4b:0f:a0:b1:91:37:e8:02:6d:
                    e3:88:8e:05:87:ed:e7:8d:b2:d8:f7:49:2f:b2:5e:
                    05:30:4f:10:c6:ae:96:a1:49:9d:5a:33:67:9c:63:
                    fd:93:f7:ba:16:c0:a3:de:8d:73:09:ed:05:f1:51:
                    94:4e:dd:fe:72:68:e1:10:5c:d8:a1:04:f9:d8:7b:
                    81:da:b0:d9:66:8b:98:10:06:94:93:0f:94:bc:37:
                    b5:75:d7:cf:76:ec:04:bc:9a:bd:26:f3:ec:c8:d3:
                    f6:c9:d9:d6:c0:9a:68:4a:ba:95:11:ea:5a:b9:95:
                    e9:b7:56:a5:b9:f8:ca:a4:76:d2:87:75:85:87:19:
                    66:bd:ea:f8:20:32:c5:20:61:67:e7:1a:c2:2b:e3:
                    bc:cf:ee:19:a2:22:ad:ef:bd:6a:8d:a0:af:6f:94:
                    a5:a7:a8:7a:59:e0:5a:bd:ab:6b:ef:6b:45:3b:1c:
                    3a:ec:a0:0e:18:1a:c6:be:d6:16:f6:12:b0:bc:68:
                    f7:7c:b3:78:29:d0:09:9b:58:92:78:13:43:12:3c:
                    92:e2:d8:a6:6b:07:e2:36:31:7b:58:d7:f4:20:7a:
                    0c:6f:96:e2:a4:f6:f1:5b:a6:5e:6b:27:d9:e3:88:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:56:75:B8:5C:17:CE:00:8E:A6:A4:F0:FF:D0:C6:2C:3A:F4:16
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:2c:f3:05:8c:33:ab:0b:41:5e:90:c2:a0:9b:1e:95:d1:
         a1:20:73:10:70:9f:03:87:7c:a7:88:ae:58:4a:5b:00:79:aa:
         77:98:4e:cc:58:16:a8:de:1b:d1:b9:e5:d1:60:64:32:bc:d0:
         72:61:64:56:23:ea:63:7e:0b:87:7b:5f:32:c1:8f:cf:60:f5:
         ef:6d:91:d1:68:a3:a0:a0:93:07:fd:50:f2:07:50:29:f5:cc:
         73:0a:f9:b7:0a:8a:c4:a4:56:5e:d1:fb:e4:da:0f:67:9d:5e:
         95:d5:0a:e6:54:45:64:92:e0:b2:9f:2f:af:f3:a1:ba:29:6d:
         a4:53:d1:6c:f7:b0:c4:3a:12:83:d5:c7:d1:64:3f:e7:be:74:
         a9:7c:4b:5f:60:1e:2f:9c:7c:94:40:df:ab:43:e3:7c:f9:36:
         b2:d4:a8:63:2b:2e:81:31:85:5e:92:28:e5:4d:fd:4f:08:c9:
         2d:e6:82:8b:5a:2e:74:5f:01:db:49:57:5f:e7:fa:25:67:57:
         57:c3:cb:31:b9:65:a1:34:d4:d7:76:55:33:a2:a5:58:e0:dd:
         c6:23:cf:ee:ad:fc:57:db:78:5f:1a:b0:15:36:f1:8b:24:cc:
         b0:fe:01:43:44:de:a9:36:16:99:ad:54:88:8b:6c:fb:eb:b7:
         f4:17:0f:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICASQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkM0QUFBRjExMC8GA1UEBRMoNzU0OTA5QUUwNzhBNjNFODlGMDAxMUUzRDI0QUJC
N0ZERTc1ODY3NzAeFw0yNjA1MTIwNTAyMDdaFw0yNjA1MTQwNTAyMDdaMBgxFjAU
BgNVBAMTDTZhMDJiNDUwLTUzN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtlc/+B1w6/K1BzCTDGz3LPjsQoksPoLGRN+gCbeOIjgWH7eeNstj3SS+y
XgUwTxDGrpahSZ1aM2ecY/2T97oWwKPejXMJ7QXxUZRO3f5yaOEQXNihBPnYe4Ha
sNlmi5gQBpSTD5S8N7V118927AS8mr0m8+zI0/bJ2dbAmmhKupUR6lq5lem3VqW5
+MqkdtKHdYWHGWa96vggMsUgYWfnGsIr47zP7hmiIq3vvWqNoK9vlKWnqHpZ4Fq9
q2vva0U7HDrsoA4YGsa+1hb2ErC8aPd8s3gp0AmbWJJ4E0MSPJLi2KZrB+I2MXtY
1/QgegxvluKk9vFbpl5rJ9njiHN1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU44BW
dbhcF84Ajqak8P/Qxiw69BYwHwYDVR0jBBgwFoAUdUkJrgeKY+ifABHj0kq7f951
hncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDNEFBLzQzQTk2OUQ0NkRGQzExRjA4QTM5RENDMURBRTRFQzlDL2RVa0py
Z2VLWS1pZkFCSGowa3E3Zjk1MWhuYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2RVa0pyZ2VLWS1pZkFCSGowa3E3Zjk1MWhuYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM0QUEvNDNBOTY5RDQ2REZDMTFGMDhBMzlEQ0MxREFF
NEVDOUMvZFVrSnJnZUtZLWlmQUJIajBrcTdmOTUxaG5jLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcXyzzBYwzqwtBXpDCoJseldGhIHMQ
cJ8Dh3yniK5YSlsAeap3mE7MWBao3hvRueXRYGQyvNByYWRWI+pjfguHe18ywY/P
YPXvbZHRaKOgoJMH/VDyB1Ap9cxzCvm3CorEpFZe0fvk2g9nnV6V1QrmVEVkkuCy
ny+v86G6KW2kU9Fs97DEOhKD1cfRZD/nvnSpfEtfYB4vnHyUQN+rQ+N8+Tay1Khj
Ky6BMYVekijlTf1PCMkt5oKLWi50XwHbSVdf5/olZ1dXw8sxuWWhNNTXdlUzoqVY
4N3GI8/urfxX23hfGrAVNvGLJMyw/gFDRN6pNhaZrVSIi2z767f0Fw+0
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:06 2026 by rpki-client