Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          guTmNh7GuprwuyM6i0JrD1IHXfTtUnv0AQAnl9pI3HQ=
Subject key identifier:   9E:33:7C:D2:45:C3:C1:62:48:5F:59:66:01:F3:56:E5:CD:0E:F2:62
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       0217
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          0215
Signing time:             Thu 07 May 2026 04:41:28 +0000
Manifest this update:     Thu 07 May 2026 04:41:27 +0000
Manifest next update:     Sat 09 May 2026 04:41:27 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: zR4oHbqUKZWG+YQMyT9p9tIzVl7JFEZvdXb9LIrZiqg=)
                          2: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: May  7 04:41:27 2026 GMT
            Not After : May  9 04:41:27 2026 GMT
        Subject: CN=69fc17f8-ceb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:eb:e6:4e:c3:e8:19:0b:f0:1a:7b:c5:b9:
                    68:ac:c9:b8:fb:b1:48:63:7e:51:9e:79:ba:a1:db:
                    25:c9:e4:b2:33:5d:c8:77:55:ab:c7:9b:ee:7e:10:
                    d0:aa:b6:4f:e6:f6:bd:48:b6:ae:38:8e:a7:57:a4:
                    39:06:aa:17:9b:3f:ae:8f:0d:ed:56:6a:fb:12:cd:
                    19:4c:42:12:8c:06:1d:eb:63:9c:94:39:18:00:42:
                    c1:98:1e:8d:89:d9:21:2b:a5:6c:d0:55:bc:9a:9a:
                    e3:00:8b:cc:71:2e:59:45:37:8b:60:e9:77:2d:8b:
                    4a:80:72:76:72:da:6d:52:2c:7c:55:23:46:dd:1e:
                    f4:54:45:d5:a1:d6:15:31:cd:8f:65:fc:01:2a:42:
                    21:e0:fe:ed:93:b4:14:d7:9b:b3:1c:93:b8:1f:08:
                    72:af:53:47:fb:99:d5:59:ba:08:9d:68:d9:21:8c:
                    27:12:e7:e7:b5:05:48:e4:0e:36:91:18:d8:1b:20:
                    94:8a:10:8c:37:01:65:d7:68:f6:16:8e:b0:43:2c:
                    38:6b:78:28:4b:09:79:7d:ff:43:6e:e9:2d:af:2c:
                    9a:ee:2f:4c:c4:9e:4e:a8:64:1e:60:7e:7a:02:f2:
                    76:97:3e:76:46:86:6f:d3:72:de:80:ec:d0:29:c9:
                    1a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:33:7C:D2:45:C3:C1:62:48:5F:59:66:01:F3:56:E5:CD:0E:F2:62
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:38:c8:e4:99:24:1c:2f:24:a3:8e:ab:3c:e4:15:cb:b6:cc:
         72:85:57:32:70:d7:fe:a8:22:eb:dd:bb:c7:11:a4:4e:a9:cb:
         61:69:84:ac:6f:d3:e1:59:41:e8:c9:db:f2:65:68:13:7f:6a:
         e9:72:0d:94:b5:6e:19:31:1b:ff:ea:1a:36:36:71:07:3f:15:
         f5:8b:6b:85:47:6d:01:24:6e:52:6a:40:2b:f4:33:02:cf:0a:
         5e:e6:2e:f5:b0:4f:fe:4a:1f:a2:02:e1:49:b3:7f:bd:52:c6:
         7a:63:0c:6b:d4:a3:b7:4a:a0:ae:fa:9a:29:9f:db:f0:fd:f0:
         d1:d4:84:53:f5:fd:b8:38:f5:27:bd:71:58:72:fe:c7:62:b5:
         01:17:c6:70:c0:ea:96:72:fe:7d:18:06:83:b1:1b:a7:2c:35:
         94:64:4c:27:52:80:d8:f3:d3:d6:b6:e4:3f:40:9b:31:a6:2f:
         2d:2e:3c:3f:fa:f0:d7:db:a2:ef:4b:f6:92:51:dd:ca:9e:e7:
         c2:81:48:69:6d:34:c9:4b:06:f9:d0:0c:9d:38:d4:d8:1f:9a:
         8c:42:92:7a:83:96:39:82:83:a7:f1:18:95:d6:31:cd:db:06:
         ff:23:47:e5:de:66:16:ba:dc:34:a3:15:cc:44:a2:46:31:81:
         2a:10:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:21 2026 by rpki-client