Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
File:                     v1plQpwwfXk7DXBa2V_P60lCIWo.mft (raw, json)
Hash identifier:          XV7BJHTIbtOt01O+38XRcMifFqWD4YJeznzjhr1Fvk8=
Subject key identifier:   83:5B:AC:FA:AF:75:77:F0:6B:15:37:CF:FB:D0:FE:CC:6E:56:26:B8
Authority key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Certificate issuer:       /CN=F3619CE0AF/serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
Certificate serial:       021B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
Manifest number:          021A
Signing time:             Thu 07 May 2026 04:39:41 +0000
Manifest this update:     Thu 07 May 2026 04:39:40 +0000
Manifest next update:     Sat 09 May 2026 04:39:40 +0000
Files and hashes:         1: v1plQpwwfXk7DXBa2V_P60lCIWo.crl (hash: KrAhm4MUGzlZV79kd+dh6/U3v4m+K/xHWTW3abnJaRk=)
                          2: 3995E772B22911EF8FFA5C88762E951A.roa (hash: q5GdnXuThvMc7lFNIre+h57AswQCqM5v2uH6+3ENceQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619CE0AF, serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
        Validity
            Not Before: May  7 04:39:40 2026 GMT
            Not After : May  9 04:39:40 2026 GMT
        Subject: CN=69fc178d-843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:f9:d1:e8:a4:56:f8:d7:9b:48:17:19:2d:
                    7d:56:e9:34:74:46:0f:65:5f:3c:3c:69:aa:04:4f:
                    ce:85:81:af:58:d7:eb:c5:be:4a:f1:a5:44:96:69:
                    5f:19:aa:ef:ce:4a:5e:14:64:b5:6d:0e:1a:75:c3:
                    7b:56:6d:e2:1e:eb:a5:57:3a:b9:35:a2:cf:a8:44:
                    0b:8d:df:43:56:90:ef:ac:89:60:38:95:c6:29:2b:
                    51:5f:c0:a4:76:b4:4a:51:fd:ab:59:dc:ee:53:46:
                    d8:a6:e7:96:43:16:73:d9:da:ab:10:e1:20:95:fd:
                    00:17:c9:36:0c:73:c4:34:5e:e4:e4:e2:76:79:97:
                    a0:17:e5:34:44:e7:23:be:6e:0e:72:fd:c8:79:20:
                    9e:7b:e6:fd:5e:90:49:fe:55:a4:fd:a5:10:6e:ee:
                    04:5b:b4:0f:3f:92:4d:15:8e:ed:1b:8e:8d:1d:71:
                    a9:dd:a0:46:7a:bc:ca:e7:f3:f4:6c:a1:e9:c3:49:
                    ee:15:a5:cb:23:b3:78:33:4e:60:4c:e9:2e:2a:71:
                    47:73:36:fe:97:e9:2b:e6:92:48:f5:33:63:99:ad:
                    b8:6c:7e:ff:fc:c5:cd:57:9a:2d:78:3b:5c:05:ae:
                    dd:f4:ef:22:63:ea:0d:a2:5f:54:fb:97:80:83:d5:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5B:AC:FA:AF:75:77:F0:6B:15:37:CF:FB:D0:FE:CC:6E:56:26:B8
            X509v3 Authority Key Identifier:
                keyid:BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4d:92:38:65:20:f0:e6:d5:6f:74:bc:29:53:32:53:17:5d:
         1b:c2:d7:d2:8a:39:65:1a:11:74:f5:95:8b:63:f0:72:79:1e:
         d8:fa:5c:13:43:c8:93:9a:f8:84:ad:3f:62:d8:72:80:7d:5f:
         e6:11:11:ca:e6:64:34:df:65:6e:8d:0f:60:2a:f2:b9:91:46:
         43:58:62:19:e8:7e:b8:5d:e2:92:d1:19:72:f7:b4:86:14:b4:
         44:ef:68:90:d7:42:57:3c:6f:7c:81:3d:0e:a4:ab:7f:4c:6a:
         c0:89:22:5c:55:89:92:16:b9:bc:85:23:c1:3f:5e:55:fa:d8:
         4b:b9:1b:7e:56:fd:14:33:84:a8:db:ee:05:f7:07:63:be:49:
         55:63:53:4b:b7:22:79:56:45:ef:e5:fc:03:32:89:96:cb:08:
         a2:bc:0d:2f:3f:0d:55:86:7b:f9:68:00:59:82:d7:e2:0f:9c:
         9c:40:15:b6:e3:fd:77:62:9a:cb:5c:45:f6:0d:45:a7:ff:b7:
         d6:23:28:e0:90:f3:f1:02:85:b4:88:20:cf:30:c5:9c:4b:91:
         0d:11:42:97:c1:4c:d8:a5:fa:14:97:11:1c:85:6e:0f:65:2a:
         91:ec:b3:bc:01:f8:36:32:6d:b5:88:49:7b:98:a8:73:d4:c8:
         4e:9e:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:35:17 2026 by rpki-client