Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          bCqusdlTboGMhh+BCQMxrHJK4B7ZGgfQOBCLxNDnyCI=
Subject key identifier:   4C:CD:8A:01:A1:7C:E5:9B:CD:31:72:3A:19:CF:DB:6C:C1:24:FF:09
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       0338
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          0337
Signing time:             Thu 07 May 2026 04:02:27 +0000
Manifest this update:     Thu 07 May 2026 04:02:26 +0000
Manifest next update:     Sat 09 May 2026 04:02:26 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: lxqCuLY9uavdnttk5VWOHGR14XX5pO7GPgZQJAJxpvk=)
                          2: 698B22BAB0E011F098883C87DAE4EC9C.roa (hash: 5UZtU7DBbaKMgey3XqLzKXM826/jRqDSRDPI7cDwmOY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: May  7 04:02:26 2026 GMT
            Not After : May  9 04:02:26 2026 GMT
        Subject: CN=69fc0ed2-0772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:ba:50:18:8c:19:de:1f:17:05:7f:90:ec:
                    cb:e3:bc:fb:33:d4:85:79:07:6c:48:2a:a1:79:61:
                    62:e4:1e:6c:57:cc:9a:94:89:e8:8b:c5:99:76:70:
                    c5:94:35:20:d1:b6:2a:7b:a5:a4:17:ee:65:7a:b8:
                    be:d6:76:60:6d:04:5a:d5:8e:92:c3:c5:5f:4c:60:
                    52:27:25:f6:41:a7:55:de:3e:21:1b:dc:83:ee:ac:
                    4e:9c:37:48:6f:a0:fb:af:04:e4:2f:4c:d5:53:f3:
                    c4:95:94:5f:49:38:7c:af:4c:0f:9f:ee:55:e9:e7:
                    f0:fb:2f:52:c4:fb:b0:4e:68:31:d3:f6:9c:51:d0:
                    3b:39:9a:3a:33:cf:4c:01:27:1f:35:7d:be:41:30:
                    de:9f:ec:9a:2f:fc:d4:c8:28:ba:13:22:a1:b2:96:
                    4c:70:72:9a:9a:80:a2:9e:c1:ee:04:19:6b:64:ff:
                    3f:f0:ac:27:16:d3:a6:ac:91:7a:5a:c1:a2:87:f2:
                    5c:bd:48:4f:70:14:f8:d7:01:4f:35:f1:38:d2:26:
                    76:19:aa:8f:b3:be:aa:cf:c7:64:98:2f:a2:b0:2c:
                    cd:78:63:82:1d:58:db:3c:c6:50:97:dc:c8:8e:ef:
                    9f:f7:5a:0d:cf:97:69:bf:05:20:3d:73:fe:29:87:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:8A:01:A1:7C:E5:9B:CD:31:72:3A:19:CF:DB:6C:C1:24:FF:09
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:03:b8:27:57:54:97:d0:9f:b2:5e:a7:b5:b5:91:f3:2f:16:
         b4:d1:27:bf:dd:e3:d2:17:b8:0d:2b:4e:1f:a6:9a:22:2a:fd:
         30:2b:a1:e3:03:e7:a1:e1:0c:0e:0d:d3:80:f5:66:d6:56:ed:
         88:f8:d5:2d:c4:21:ac:6a:0b:38:fd:9f:85:46:ef:8c:3e:88:
         ee:f0:41:80:1e:89:50:a7:6c:45:5f:66:b8:fe:03:8e:69:39:
         d6:78:a0:26:f5:6d:fa:3f:fa:32:50:3f:7f:d6:00:cd:92:22:
         20:24:ac:05:21:4e:40:3f:3c:94:a2:4d:60:86:d1:fb:fe:d5:
         9a:a2:86:2f:29:c4:f7:e9:63:98:55:f3:7c:d3:69:f6:57:4e:
         0a:17:d2:e9:99:15:70:de:72:61:51:f9:c1:b3:07:c4:fb:13:
         8a:91:2b:63:6e:e2:b5:d9:62:86:94:a6:bd:ab:d4:2b:5d:57:
         b5:07:15:34:73:e1:fb:f7:41:e3:7c:47:27:18:14:87:77:df:
         2e:00:42:fe:93:7a:39:08:17:8f:d5:9c:50:1e:3f:a2:c7:f5:
         d7:ea:7c:25:d2:55:b1:33:5d:1f:fe:52:02:f3:bd:2e:af:69:
         df:fc:3e:9b:8a:c6:2e:5c:5d:46:23:78:13:9d:f7:15:96:5a:
         64:fb:c8:d6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTExQzZBRjExMC8GA1UEBRMoNzA5MDA4QURDNzE3OTE4RkRGRkNGMTY3NDFGQjVC
MTMwQkE3QzQzMDAeFw0yNjA1MDcwNDAyMjZaFw0yNjA1MDkwNDAyMjZaMBgxFjAU
BgNVBAMTDTY5ZmMwZWQyLTA3NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHlLpQGIwZ3h8XBX+Q7MvjvPsz1IV5B2xIKqF5YWLkHmxXzJqUieiLxZl2
cMWUNSDRtip7paQX7mV6uL7WdmBtBFrVjpLDxV9MYFInJfZBp1XePiEb3IPurE6c
N0hvoPuvBOQvTNVT88SVlF9JOHyvTA+f7lXp5/D7L1LE+7BOaDHT9pxR0Ds5mjoz
z0wBJx81fb5BMN6f7Jov/NTIKLoTIqGylkxwcpqagKKewe4EGWtk/z/wrCcW06as
kXpawaKH8ly9SE9wFPjXAU818TjSJnYZqo+zvqrPx2SYL6KwLM14Y4IdWNs8xlCX
3MiO75/3Wg3Pl2m/BSA9c/4phzANAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTM2K
AaF85ZvNMXI6Gc/bbMEk/wkwHwYDVR0jBBgwFoAUcJAIrccXkY/f/PFnQftbEwun
xDAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExMUM2Lzg2QURBODk4RDIyQzExRUU4OTcyMTM2QTc3NTQxMkU2L2NKQUly
Y2NYa1lfZl9QRm5RZnRiRXd1bnhEQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NKQUlyY2NYa1lfZl9QRm5RZnRiRXd1bnhEQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTExQzYvODZBREE4OThEMjJDMTFFRTg5NzIxMzZBNzc1
NDEyRTYvY0pBSXJjY1hrWV9mX1BGblFmdGJFd3VueERBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4A7gnV1SX0J+yXqe1tZHzLxa00Se/
3ePSF7gNK04fppoiKv0wK6HjA+eh4QwODdOA9WbWVu2I+NUtxCGsags4/Z+FRu+M
Poju8EGAHolQp2xFX2a4/gOOaTnWeKAm9W36P/oyUD9/1gDNkiIgJKwFIU5APzyU
ok1ghtH7/tWaooYvKcT36WOYVfN802n2V04KF9LpmRVw3nJhUfnBswfE+xOKkStj
buK12WKGlKa9q9QrXVe1BxU0c+H790HjfEcnGBSHd98uAEL+k3o5CBeP1ZxQHj+i
x/XX6nwl0lWxM10f/lIC870ur2nf/D6bisYuXF1GI3gTnfcVllpk+8jW
-----END CERTIFICATE-----
Generated at Thu May 7 21:33:57 2026 by rpki-client