Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File:                     62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier:          i2aUZha5E+ezx7T4nBKi6gIOq9ShwRG848qJ4PP9S0I=
Subject key identifier:   1B:F0:5A:68:1A:20:C9:45:A3:EF:11:81:3E:BF:26:23:42:66:C2:96
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer:       /CN=AfriNIC-Root-Certificate
Certificate serial:       65
Authority info access:    rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access:      rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number:          CD
Signing time:             Fri 22 May 2026 11:40:10 +0000
Manifest this update:     Fri 22 May 2026 11:40:09 +0000
Manifest next update:     Mon 29 Jun 2026 11:40:09 +0000
Files and hashes:         1: afrinic-ca.cer (hash: lva7C1FkpZQulRIq75k7ODHBF9I8xk6nPrZ3+hfc0m4=)
                          2: apnic-to-afrinic.cer (hash: ehsJkwyh5BZcjOBlbTxJyzFO0jQ5mGCU9DqdwmnAMVI=)
                          3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: uHceFoxgfBSFQpLHmFCX7wyW/waTjSOCm5hw65N1sZc=)
                          4: arin-to-afrinic.cer (hash: 7ywJdiGXPLJMSZvNRQ3yFVV0+aQ2FZemMJ1jTkjUT3A=)
                          5: lacnic-to-afrinic.cer (hash: MKScee8ssVr51K/OTtyyeiSDwz3svtf9jpqq6/x8uvQ=)
                          6: ripe-to-afrinic.cer (hash: qOOK6v0nyMVV1lv+XGJWWWNM1su1zDx80MOlipErK7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Jun 2026 11:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: May 22 11:40:09 2026 GMT
            Not After : Jun 29 11:40:09 2026 GMT
        Subject: CN=6a10409a-9d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:81:2f:9a:9c:e4:e3:bd:8c:71:79:58:be:
                    9b:1f:ef:9f:40:69:c8:96:1a:48:17:98:68:5b:f2:
                    67:b2:9f:4a:99:fd:68:2a:d3:67:3b:17:89:97:5a:
                    fc:5e:c5:ad:a7:59:84:c7:07:7e:db:fd:bc:5e:12:
                    e2:3e:40:63:c7:88:39:e0:15:3e:c4:b3:35:37:31:
                    12:cb:4b:00:04:00:47:41:e2:b0:b2:e8:aa:7d:9d:
                    53:5f:a3:a1:a0:80:f9:53:0a:bd:77:76:d5:05:e1:
                    d4:79:d0:b1:f5:b8:94:27:88:46:c4:d7:5a:f8:a9:
                    9a:94:ef:b9:dc:00:21:c4:9a:a3:f1:b1:68:fc:a3:
                    5d:3d:99:ec:86:84:31:4a:25:91:0d:99:15:63:cb:
                    83:c8:a2:4e:66:b3:e0:4d:3f:6e:2e:68:de:1c:57:
                    83:64:6b:20:1d:8e:b6:a4:97:e2:08:9f:05:96:22:
                    ec:1c:93:78:05:70:bb:75:7a:53:d8:6a:61:74:4f:
                    9a:99:eb:45:a3:4d:3c:d3:c7:a6:c7:fd:15:e6:ef:
                    88:e5:ee:19:52:39:e1:f7:bf:a0:92:e5:01:94:43:
                    7c:93:a9:7a:75:c0:8f:9c:3d:ad:85:06:4c:e0:da:
                    35:10:32:a8:ff:b6:e1:2a:87:d3:73:85:28:62:58:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:5A:68:1A:20:C9:45:A3:EF:11:81:3E:BF:26:23:42:66:C2:96
            X509v3 Authority Key Identifier:
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:37:d6:b9:10:2f:5d:f7:57:98:f5:cf:0b:8c:80:84:e5:
         f3:06:76:57:0c:7e:21:c2:23:74:03:0e:e6:ec:9c:71:3c:c0:
         38:4f:12:17:af:3b:e4:2c:d8:64:bb:f4:20:4f:a0:89:7f:f7:
         23:5d:c8:65:2c:1a:24:2b:3c:dd:67:14:97:ec:72:9b:fc:97:
         e0:d9:bb:a1:77:36:14:e3:56:fb:c9:c3:d7:92:71:ef:f3:a3:
         17:40:d3:cb:8d:3c:97:94:78:30:a1:92:58:8a:a7:bb:ff:ac:
         7d:9e:f2:6d:c2:e7:85:c8:71:7c:d2:02:7d:75:ef:7b:3d:a8:
         18:4a:64:a0:dd:42:53:be:6a:3c:47:4e:bd:a0:e4:44:67:e0:
         e9:3c:84:7c:aa:f9:f7:45:f5:29:23:53:6b:54:49:39:44:28:
         90:ba:e8:20:e8:50:3c:7f:6c:fe:c5:c5:11:72:b3:57:5b:1b:
         20:bb:f7:3c:92:b4:72:a0:8b:e6:cf:8f:94:c2:7c:43:ee:84:
         13:08:a1:bb:f3:dc:51:e0:02:be:1e:6c:1e:22:ed:be:ce:56:
         0c:39:f7:b9:14:4b:b6:9f:66:a4:41:07:db:03:06:c7:0c:c6:
         95:f3:be:3c:54:c6:bc:2a:89:69:52:03:69:f1:84:c8:20:b2:
         3b:af:df:b4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIBZTANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjYwNTIyMTE0MDA5WhcNMjYwNjI5MTE0
MDA5WjAYMRYwFAYDVQQDEw02YTEwNDA5YS05ZDBmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA7daBL5qc5OO9jHF5WL6bH++fQGnIlhpIF5hoW/Jnsp9K
mf1oKtNnOxeJl1r8XsWtp1mExwd+2/28XhLiPkBjx4g54BU+xLM1NzESy0sABABH
QeKwsuiqfZ1TX6OhoID5Uwq9d3bVBeHUedCx9biUJ4hGxNda+KmalO+53AAhxJqj
8bFo/KNdPZnshoQxSiWRDZkVY8uDyKJOZrPgTT9uLmjeHFeDZGsgHY62pJfiCJ8F
liLsHJN4BXC7dXpT2GphdE+ametFo00808emx/0V5u+I5e4ZUjnh97+gkuUBlEN8
k6l6dcCPnD2thQZM4No1EDKo/7bhKofTc4UoYljAFwIDAQABo4ICXzCCAlswHQYD
VR0OBBYEFBvwWmgaIMlFo+8RgT6/JiNCZsKWMB8GA1UdIwQYMBaAFOtoDzj11scb
tLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIHgDB1BgNVHR8EbjBsMGqgaKBmhmRy
c3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBGNEQx
MUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFNYlku
Y3JsMEsGCCsGAQUFBwEBBD8wPTA7BggrBgEFBQcwAoYvcnN5bmM6Ly9ycGtpLmFm
cmluaWMubmV0L3JlcG9zaXRvcnkvQWZyaU5JQy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgbkGCCsGAQUFBwELBIGsMIGpMHAGCCsGAQUFBzAL
hmRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFN
YlkubWZ0MDUGCCsGAQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90
aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAAJON9a5
EC9d91eY9c8LjICE5fMGdlcMfiHCI3QDDubsnHE8wDhPEhevO+Qs2GS79CBPoIl/
9yNdyGUsGiQrPN1nFJfscpv8l+DZu6F3NhTjVvvJw9eSce/zoxdA08uNPJeUeDCh
kliKp7v/rH2e8m3C54XIcXzSAn1173s9qBhKZKDdQlO+ajxHTr2g5ERn4Ok8hHyq
+fdF9SkjU2tUSTlEKJC66CDoUDx/bP7FxRFys1dbGyC79zyStHKgi+bPj5TCfEPu
hBMIobvz3FHgAr4ebB4i7b7OVgw597kUS7afZqRBB9sDBscMxpXzvjxUxrwqiWlS
A2nxhMggsjuv37Q=
-----END CERTIFICATE-----
Generated at Fri May 22 15:08:03 2026 by rpki-client