Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          gw8L98o7uQVNmfyry6HPIU8nwm8cubWUC96r8Kugze0=
Subject key identifier:   F2:2F:CB:14:AC:71:63:9E:8B:1F:D0:A6:3A:3F:7F:F4:C1:A9:32:5D
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          025E
Signing time:             Thu 07 May 2026 04:32:20 +0000
Manifest this update:     Thu 07 May 2026 04:32:20 +0000
Manifest next update:     Sat 09 May 2026 04:32:20 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: m8t3x0KAo3H6jqCFLhtvkjc4fsCv21S45nR7YbpLIkU=)
                          2: 9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa (hash: 2uFOUkSFKVasJhOLfUiTVE3r4VWf4k4tupX7FNxvep4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: May  7 04:32:20 2026 GMT
            Not After : May  9 04:32:20 2026 GMT
        Subject: CN=69fc15d4-cdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:9f:a8:41:c5:7f:29:7d:02:a0:a7:e7:82:
                    66:04:a8:07:3c:2a:b7:c7:91:09:aa:74:69:7b:1b:
                    28:af:eb:f2:8a:ea:dc:62:55:39:90:b4:42:b5:bf:
                    37:99:79:46:4f:60:ee:60:c8:60:0f:a5:0e:69:96:
                    8d:1c:3e:01:1d:19:2a:ae:0e:01:f3:e7:3e:95:90:
                    55:b2:51:28:c1:af:fb:ba:12:00:7f:d3:f2:ef:27:
                    5e:77:05:9c:f8:26:ca:8d:66:40:49:c3:f4:89:0b:
                    37:6b:b4:f5:67:c9:a5:db:91:ee:5f:dd:b0:e6:e7:
                    36:98:ee:6e:11:71:0d:3d:8f:d4:09:4a:51:19:ad:
                    75:13:44:64:fb:69:01:19:b2:4f:f2:0e:ed:91:e6:
                    b3:f7:ac:07:57:08:dd:16:7f:a4:06:30:a7:98:bb:
                    ee:59:f1:15:73:5f:1f:00:8f:af:5d:90:56:63:7f:
                    0b:95:86:89:cc:e0:e3:d5:6b:50:c9:5a:cf:d8:e8:
                    74:59:fb:d0:5b:c6:9f:2d:65:7d:e7:f1:d0:af:93:
                    41:8c:c4:5d:f0:2d:6b:ad:6f:c8:37:e9:5a:3a:37:
                    8b:81:0c:2f:f1:40:d6:9a:82:72:1c:d6:8d:74:2f:
                    9f:f1:00:8a:8e:ca:3e:86:33:1f:d7:68:a7:fa:9b:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2F:CB:14:AC:71:63:9E:8B:1F:D0:A6:3A:3F:7F:F4:C1:A9:32:5D
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7e:60:a2:eb:7a:74:82:9c:45:7b:90:6e:8f:d3:9b:d1:85:
         1d:8d:18:19:b4:56:fb:ea:93:8c:55:54:16:9b:dc:46:f1:97:
         3e:2b:68:1d:26:73:d4:6f:98:d1:bd:92:85:2f:9c:f5:be:b0:
         18:07:41:90:0d:64:3c:5c:94:3e:eb:77:f0:d2:fb:64:96:a4:
         d6:8c:2d:12:fc:87:1f:3d:4f:c8:3d:cc:c4:59:36:b9:84:a5:
         8e:ea:47:0e:8c:c4:f4:35:df:48:cc:a4:06:4e:dd:26:b9:df:
         67:12:51:ca:dd:4f:f3:37:8c:3e:1b:c3:66:21:7a:de:cb:15:
         ac:be:59:ee:2c:c6:c6:a7:2b:36:df:11:59:51:ba:c1:74:a3:
         08:45:f4:48:6d:8d:6f:6b:16:9a:e5:5d:79:89:a0:84:25:8c:
         98:48:18:f8:39:8b:bc:b3:a1:3c:69:8a:92:e2:dc:5f:cd:ab:
         73:f7:8d:62:a0:54:ab:cf:37:56:bc:99:af:a4:ec:5f:3c:d8:
         75:07:a6:e2:af:4a:16:80:b3:56:96:f3:d0:a2:76:df:ef:04:
         c8:40:0c:2f:73:04:5d:f7:c3:15:96:f1:1d:3d:9e:4e:8a:4e:
         6a:09:bf:b2:9a:31:05:ac:f6:b0:a6:92:38:7c:36:d0:5d:88:
         51:f3:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:21 2026 by rpki-client